8521
WireGuard for Windows Pre-Alpha Is Available
Users of kernels < 5.6 may also choose wireguard-lts or wireguard-dkms + linux-headers , depending on which kernel is used.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,776 posts.
8522
Hacking the D.C. Internet Voting Pilot
The District of Columbia is conducting a pilot project to allow overseas and military voters to download and return absentee ballots over the Internet. Before opening the system to real voters, D.C. has been holding a test period in which they've invited the public to evaluate the system's security and usability. This…
8523
Three locks for your SSH door
AIX provides the highest level of performance, security, and reliability of any UNIX operating system.
8524
Stuxnet: A Breakthrough
Broadcom Community - VMTN, Mainframe, Symantec, Carbon Black
8525
Red Hat Asks Supreme Court to Review Software Patents
Search for and read the latest Red Hat news and press releases about the people and products shaping the future of open source and open hybrid cloud technology.
8526
8527
8528
8529
Intercepting Predator Video
Sometimes mediocre encryption is better than strong encryption, and sometimes no encryption is better still. The Wall Street Journal reported this week that Iraqi, and possibly also Afghan, militants are using commercial software to eavesdrop on U.S. Predators, other unmanned aerial vehicles, or UAVs, and even piloted…
8530
A Tour Of A “Pay to Download Firefox” Site
At Mozilla , we regularly get anguished emails from people who have paid to download Firefox, and have then discovered a) that it's actually free, and b) that it's very hard to get the company they paid to stop charging their credit card. For those who have never had the misfortune to visit one of these trap sites, I…
8531
Return-Oriented Programming without Returns (on the x86)
We show that on the x86 it is possible to mount a return-oriented programming attack without using any return instructions. Our new attack instead makes use of certain instruction sequences that behave like a return; we show that these sequences occur with sufficient frequency in large Linux libraries to allow…
8532
Schneier on Security: Software Problems with a Breath Alcohol Detector
This is an excellent lesson in the security problems inherent in trusting proprietary software: After two years of attempting to get the computer based source code for the Alcotest 7110 MKIII-C, defense counsel in State v. Chun were successful in obtaining the code, and had it analyzed by Base One Technologies, Inc…
8533
Advanced SSH Techniques
At one site where I provide technical assistance, access to the network is all done via ssh over the Internet. However, one can't get access to the machines directly; one must first make an ssh connection to a gateway box I'll call martha. martha doesn't allow one to use regular passwords or keys, though. We're all…
8534
8535
8536
8537
Europe: The end of the privacy of digital correspondence
The End of the Privacy of Digital Correspondence The EU wants to oblige providers to search all private chats, messages, and emails automatically for suspicious content - generally and indiscriminately. The stated aim: To prosecute child pornography. The result: Mass surveillance by means of full
8538
From kafkatrap to honeytrap
The short version is: if you are any kind of open-source leader or senior figure who is male, do not be alone with any female, ever, at a technical conference. Try to avoid even being alone , ever, because there is a chance that a “women in tech” advocacy group is going to try to collect your scalp.
8539
My GMail password scares me with its power
Google’s GMail blog has some “handy” advice on how pick a good password to project your email account. Don’t use dictionary words, use mixed case,…
8540
Overclocking SSL
(This is a write up of the talk that I gave at Velocity 2010 last Thursday. This is a joint work of myself, Nagendra Modadugu and Wan-Teh Chang.)
8541
8542
8543
8544
Apple seeking to patent spyware
It looks like Apple, Inc., is exploring a new business opportunity: spyware and what we're calling "traitorware." While users were celebrating the new jailbreaking and unlocking exemptions, Apple was quietly preparing to apply for a patent on technology that, among other things, would allow Apple...
8545
8546
Massive Twitter Cross-Site Scripting Vulnerability
I bet 10 years ago none of us thought that 140 characters would change the landscape of Social Media quite so much. However, with close to 289,000,000 active users sending around 6,000 tweets every second Twitter has proven its critics wrong. Obviously, having gotten over …
8547
Block AI bots, scrapers and crawlers with a single click
To help preserve a safe Internet for content creators, we’ve just launched a brand new “easy button” to block all AI bots. It’s available for all customers, including those on our free tier
8548
8549
Arbitrary code execution via ldd utility
The `ldd` utility is more vulnerable than you think. It's frequently used by programmers and system administrators to determine the dynamic library dependencies of executables. Sounds pretty innocent, right? Wrong! In this article I am going to show you how to create an executable that runs arbitrary code if it's...
8550
Schneier on Security: Technology Shouldn't Give Big Brother a Head Start
China is the world’s most successful Internet censor. While the Great Firewall of China isn’t perfect, it effectively limits information flowing in and out of the country. But now the Chinese government is taking things one step further. Under a requirement taking effect soon, every computer sold in China will have to…