Topics /
The most popular blog posts about security & privacy on Hacker News. 8,773 posts.
Today is an incredibly important vote for the future of your digital privacy, but some in Congress are hoping you won’t find out. Finally, after weeks of delay, the Senate will start debate on the dangerous FISA Amendments Act at 10 am Eastern and vote on its re-authorization by the end of the day...
Score one for the good guys: Bitcanal , a Portuguese Web hosting firm long accused of helping spammers hijack large swaths of dormant Internet address space over the years, was summarily kicked off the Internet this week after a half-dozen of the company’s bandwidth providers chose to sever ties with the company.
No single cloud fits all. Explore how we build a more flexible future with hybrid cloud.
Posted by Elie Bursztein, Anti-Abuse Research Lead Earlier this year, we deployed a new TLS cipher suite in Chrome that operates three tim...
A quick note on the importance of reading the terms of service!
In the tradition started by Colin Percival and Thomas Ptacek, a set of “Cryptographic Right Answers” updated for the accelerated post-quantum transition timeline.
There’s really no such thing as security in the abstract. Security can only be defined in relation to something else. You’re secure from something or against something. In the next 10 years, the traditional definition of IT security—that it protects you from hackers, criminals, and other bad guys—will undergo a…
On March 15th, an HTTPS/TLS Certificate Authority (CA) was tricked into issuing fraudulent certificates that posed a dire risk to Internet security. Based on currently available information, the incident got close to — but was not quite — an Internet-wide security meltdown. As this post will...
A little fun for the last day of 2012: how to crash a program via division? x86’s IDIV instruction traps not only on division by zero, but also on INT_MIN / -1 (signed integer overflow).
A vulnerability in the Internet Key Exchange (IKE) version 1 (v1) and IKE version 2 (v2) code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area. An attacker…
Council of 9 ventured forth to DEFCON 24 to compete in this year's badge challenge, brought to us each year by 1o57. There was determination among the team to win at DC24 to ensure that last year's...
There's been some discussion about forward secret TLS recently, spurred, I think, by this piece from Declan McCullagh on CNET.
This year we are calling to FREE THE INTERNET. Your donation will help break the chains of censorship and surveillance. If you give now during the campaign, your donation will be matched by our supporters at Power Up Privacy. This means a $25 donation will have a $50 impact.
Well for a quick weekend recap I’m going to look at which 3rd party SDKs and API calls I can find in the big 4 Android chat apps based. We’ll be using free data from AppGoblin which you can feel free to browse at any of the links below or on tables. Data is collected via de-compiled SDKs and MITM API traffic.
Californians can rest assured that law enforcement can’t poke around in their digital records without first obtaining a warrant. Today, Gov. Jerry Brown has signed S.B. 178, the California Electronic Communications Privacy Act (CalECPA). After months of pressure from public interest groups, media...
QubesOS provides a desktop operating system made up of multiple virtual machines, running under Xen. To protect against buggy network drivers, the …
Part I of this is here , if you haven’t read it yet please do so before reading this installment, it will help to establish context.
Unless otherwise noted, changes described below apply to the newest Chrome Beta channel release for Android, Chrome OS, Linux, Mac, and Wi...
Microsoft releases additional updates for older platforms to protect against potential nation-state activity
In all the blockchain hype, a simple, yet self-refuting idea keeps popping up: a Private Blockchain .
The secret ballot is one of the load-bearing walls of democracy. In Georgia, as in most states, this allows you to know whether your neighbor voted, but never who they voted for. Yet, in multiple states including Georgia, that guarantee is actively at risk.
