7051
This working group has failed
Search IETF mail list archives
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,772 posts.
7052
How does a TCP Reset Attack work?
A TCP reset attack is executed using a single packet of data, no more than a few bytes in size. A spoofed TCP segment, crafted and sent by an attacker, tricks two victims into abandoning a TCP connection, interrupting possibly vital communications between them.
7053
Reverse Engineering Apple's typedstream Format
imessage-exporter ’s goal is to provide the most comprehensive representation of iMessage data available. Message data is stored in a legacy format that appears to be a stream that represents objects.
7054
Hacking eInk Price Tags (2021)
Dmitry.GR: Wireless picture frames that run for years on batteries
7055
Oklahoma Department of Securities Leaked Millions of Files
A storage server configured for public access exposed millions of files belonging to the Oklahoma Securities Commission.
7056
EFF: Apple Should Stand Up and Defend Its Developers
Update II: Apparently not frightened off by Apple's letter defending its developers, Lodsys went ahead and sued at least seven developers in the Eastern District of Texas for patent infringement. In its original cease-and-desist letters, Lodsys gave developers 21 days to respond. But – apparently...
7057
How secure is HTTPS today? How often is it attacked? (2011)
This is part 1 of a series on the security of HTTPS and TLS/SSL HTTPS is a lot more secure than HTTP! If a site uses accounts, or publishes material that people might prefer to read in private, the site should be protected with HTTPS. Unfortunately, is still feasible for some attackers to break...
7058
EFF Asks Court to Undo Damage Done to First Amendment in Flawed NSL Ruling
EFF has petitioned a federal appeals court to reconsider its flawed ruling in our national security letter case on behalf of CREDO Mobile and Cloudflare. In July, the Ninth Circuit in San Francisco upheld the NSL statute against our First Amendment challenge. The court ruled that the FBI is...
7059
How to get a heart attack while using JEB decompiler (2022)
Finding RCE during deobfuscation in JEB decompiler running on Java 18.
7060
7061
Simple ways to find exposed sensitive information
Code level discussion of web scraping, gray hat automation, growth hacking and bounty hunting
7062
Sovereign Keys, EFF's proposal to replace the certificate authority model
This is part 2 of a series on the security of HTTPS and TLS/SSL. [Part 1] In a previous post, we discussed some structural insecurities in HTTPS and TLS/SSL, and how those are beginning to pose serious problems for the security of the Web. In this post I will introduce a new proposal called "...
7063
Project Jengo Redux: Cloudflare’s Prior Art Search Bounty Returns
On March 15th, 2021, Cloudflare was sued by a patent troll called Sable Networks. Today, we are launching our efforts to fight back.
7064
There’s a rootkit in the closet
Part 1: Finding the rootkit It's monday morning and I am for coffee in downtown Thessaloniki, a partner calls: - On machine XXX mysqld is not starting since Saturday. - Can I drink my coffee and come over later to check it ? Is it critical ? - Nope, come over anytime you can... Around
7065
0-Day Vulnerability on Log4j
Learn about the Log4j vulnerability and how you can combat it. Read this comprehensive guide to get actionable tips.
7066
Another Crack in the Chain of Trust: Uncovering (Yet Another) Secure Boot Bypass
Binarly uncovers CVE-2025-3052: a Secure Boot bypass affecting most UEFI devices, enabling attackers to run unsigned code before OS load.
7067
Is macOS Look Up Destined for CSAM?
Remember Apple’s failed attempt to detect CSAM in images? Would that have been similar to the way that Visual Look Up works? Is this the thin end of the wedge?
7068
$300k for Cracking Telegram Encryption
$300,000 for cracking #Telegram encryption
7069
7070
Hacking the Samsung NX300 "Smart" Camera
blog about networking, cameras, old gear, and xmpp
7071
Hiding secret codes in light protects against fake videos
A team of Cornell computer science researchers has developed a way to “watermark” light in videos, which they can use to detect if video is fake or has been manipulated, another potential tool in the fight against misinformation.
7072
We scanned the Internet for port 22
Yesterday (Sept. 12) we scanned the entire Internet for port 22 -- the port reserved for "SSH", the protocol used by sysadmins to remotely l...
7073
7074
Insider Attack Resistance
Our smart devices, such as mobile phones and tablets, contain a wealth of important personal information that needs to be kept safe. Google is constantly trying to find new and better ways protect that valuable information on Android devices. From partnering with external researchers to find and fix vulnerabilities…
7075
Abuse prevention is tradecraft
It’s sunday evening; there’s a lot to be said for being a stay-at-home-dad, and honestly I actually like having stuff like meal-prep and laundry to do, after 35+ years of “All Uni…
7076
China Shows How Surveillance Leads to Intimidation and Software Censorship
Xinjiang, home of the China's muslim Uighur minority, has long been the world's laboratory for Internet repression. Faced with widespread local unrest, and online debate, China has done everything it can to enforce its vision of the Net in the region, from imprisoning bloggers and online publishers...
7077
Schneier on Security: Recording the Police
I’ve written a lot on the “War on Photography,” where normal people are harassed as potential terrorists for taking pictures of things in public. This article is different; it’s about recording the police: Allison’s predicament is an extreme example of a growing and disturbing trend. As citizens increase their…
7078
Reimagining the Browser: Introducing Cloudflare Browser Isolation Beta
Today, we’re excited to open up a beta of a third approach to keeping web browsing safe with Cloudflare Browser Isolation.
7079
Unroll.me
Link to: http://blog.unroll.me/we-can-do-better/
7080
