8611
Script kiddies have awesome tools
Wir ziehen mit dem Projekt ngra.de um. Sind Sie am Kauf der Domain ngra.de interessiert?
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,776 posts.
8612
Bank Robber Recruits Accomplices With Fake Job Ad on Craigslist
Now this is clever: “I came across the ad that was for a prevailing wage job for $28.50 an hour,” said Mike, who saw a Craigslist ad last week looking for workers for a road maintenance project in Monroe. He said he inquired and was e-mailed back with instructions to meet near the Bank of America in Monroe at 11 a.m…
8613
Twitter Exploit Still Works
I bet 10 years ago none of us thought that 140 characters would change the landscape of Social Media quite so much. However, with close to 289,000,000 active users sending around 6,000 tweets every second Twitter has proven its critics wrong. Obviously, having gotten over …
8614
Cryptographic voting system developed by MIT prof has first real world trial
A new system for ensuring accurate election tallies, which MIT researchers helped to develop, passed its first real-world test last Tuesday.
8615
8616
Corrupted Word Files for Sale
On one hand, this is clever: We offer a wide array of corrupted Word files that are guaranteed not to open on a Mac or PC. A corrupted file is a file that contains scrambled and unrecoverable data due to hardware or software failure. Files may become corrupted when something goes wrong while a file is being saved e.g…
8617
Palm Pre Privacy Invasion
I've been taking a closer look at the WebOS side of my Palm Pre tonight, and I noticed that it periodically uploads information to Palm, Inc.
8618
Nate Lawson Breaks Google Keyczar's HMAC Crypto Signatures
I recently found a security flaw in the Google Keyczar crypto library. The impact was that an attacker could forge signatures for data that was “signed” with the SHA-1 HMAC algorithm (t…
8619
How Credit Card Numbers Are Generated
Visa,Master Card,Discover, and American Express credit card validation and generation techniques using the luhn algorithm.
8620
Google Shares, Monetizes, and Exploits Your Data Without 'Selling' It
"Google will never sell any personal information to third parties; and you get to decide how your information is used." - Sundar Pichai Sound familiar? Although big tech companies like Google keep the lights on by harvesting and monetizing your personal data, they can be quick to mince words and deny the strawman…
8621
8622
Io v. Veoh: Important ruling for sites comprised of 'user-generated content'
In an important ruling handed down yesterday, a federal district court threw out a copyright infringement suit brought by adult video producer Io Group against Veoh, concluding that the video hosting site qualifies for the DMCA safe harbor. The ruling should be required reading for the executives...
8623
Attacking Machine Learning with Adversarial Examples
Stay up to speed on the rapid advancement of AI technology and the benefits it offers to humanity.
8624
The qmail security guarantee
Of course, ``security hole in qmail'' does not include problems outside of qmail: for example, NFS security problems, TCP/IP security problems, DNS security problems, bugs in scripts run from .forward files, and operating system bugs generally. It's silly to blame a problem on qmail if the system was already…
8625
Lessons from the Debian/OpenSSL Fiasco (2008)
Last week, Debian announced that in September 2006 they accidentally broke the OpenSSL pseudo-random number generator while trying to silence a Valgrind warning. One effect this had is that the ssh-keygen program installed on recent Debian systems (and Debian-derived systems like Ubuntu) could only generate 32,767…
8626
Datacenter Security: A Cautionary Tale from Last.fm
Last.fm has presence in three datacenters in the London area - this is currently more because of necessity than redundancy; datacenter space is at a real premium in the UK and we can’t fulfill our power growth needs at just one site. We operate our own 20 gigabit fibre ring between these, which means we can basically…
8627
"Goldman sachs code torrent" honeypot
.rar 32MB. A distributed real-time co-located high-frequency trading platform… A very low latency (microseconds) event-driven market data processing, strategy and order submission engine.
8628
8629
8630
8631
8632
Complexity is insecurity
Complexity can be thought of as a type of code smell : It doesn't necessarily imply that there is a problem, but the presence of complexity is very strongly correlated with the presence of security vulnerabilities. In the design and construction of secure systems, it is important to not only consider mistakes which…
8633
8634
8635
Media Temple Hacked
I don’t normally do negative posts about another person or company, but I feel this needs to get out there. A few hours ago I received an email from MediaTemple , where I host several of my clients. It was an automated message informing me that:
8636
8637
Matrix' answer to Moxie: On privacy versus freedom
Matrix, the open protocol for secure decentralised communications
8638
8639
The world’s most-surveilled cities
We've gathered data on CCTV cameras in use in 120 major cities across the globe to determine which cities have the most surveillance cameras per person.
8640
New [July 2, 2021] Audacity Data Collection Policy
Audacity is the world's most popular audio editing and recording app. Edit, mix, and enhance your audio tracks with the power of Audacity. Download now!