Dropbox Lack of Security
Miguel de Icaza's Blog
Google's Backdoor Access System into Gmail Accounts
Google made headlines when it went public with the fact that Chinese hackers had penetrated some of its services, such as Gmail, in a politically motivated attempt at intelligence gathering. The news here isn’t that Chinese hackers engage in these activities or that their attempts are technically sophisticated—we knew…
Free Wordpress themes coming with a price
There are so many free WordPress themes out there it can put your head in a spin. This post is the one-stop resource for info about free WordPress Themes
An Open Letter From Internet Engineers to the U.S. Congress
Today, a group of 83 prominent Internet inventors and engineers sent an open letter to members of the United States Congress, stating their opposition to the SOPA and PIPA Internet blacklist bills that are under consideration in the House and Senate respectively. We, the undersigned, have played...
Why you don't steal from a hacker.
So during the London riots I return home the next morning to find my flat ransacked and my Macbook Pro laptop stolen! Police showed ...
Who Does Facebook Think You Are Searching For?
UPDATE March 28, 2013: Many people have commented here and emailed me that it no longer works for you. I have made an update to fix the bookmarklet for those with Facebook Graph Search. You can get…
A Stick Figure Guide to the Advanced Encryption Standard (AES)
(A play in 4 acts. Please feel free to exit along with the stage character that best represents you. Take intermissions as you see fit. Click on the stage if...
OnStar Begins Spying On Customers’ GPS Location For Profit
I canceled the OnStar subscription on my new GMC vehicle today after receiving an email from the company about their new terms and conditions. While most people, I imagine, would hit the delete button when receiving something as exciting as new terms and conditions, being the nerd sort, I decided to have a personal…
Iran forged the wrong SSL certificate
If you want to be really evil, however, *.google.com is the wrong SSL certificate to forge. The right one? ssl.google-analytics.com .
I Can Crack Your App With Just A Shell (And How To Stop Me)
Hi, I'm Kenneth. I’m a Swiss transplant in San Francisco. I’m an angel investor, and an engineer at AngelList & CSC. Previously, I was co-founder of FreshPay and the architect behind Chartboost. When I'm not working, you can find me either photographing some remote corner of the world, or hacking away on an…
Google to default to SSL version for logged in users
Insights from Googlers into our products, technology, and the Google culture
Tarsnap critical security bug
There's a lot to say about this, and it's entirely possible that I'll miss covering some important points in this post; if I've missed something, please email me or post a comment below and I'll do my best to add the necessary information.
FBI: If We Told You . . . (Part II)
Yesterday, we posted a troubling explanation from the FBI of why it doesn’t want you to know whether your phone and internet providers are cooperating in the most expansive surveillance program that Congress has ever enacted: You might sue.
Most laser printer printed pages have tracking watermark
<br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><a href="http://brahmsyellowdots.blogspot.com/2008/10/it-begins.html">About This Blog</a>
EFF: forced disclosure of encryption password violates 5th Amendment
San Francisco - The Electronic Frontier Foundation (EFF) urged a federal court in Colorado today to block the government's attempt to force a woman to enter a password into an encrypted laptop, arguing in an amicus brief that it would violate her Fifth Amendment privilege against self-incrimination...
EU Court of Justice: Censorship in Name of Copyright Violates Fundamental Rights
Paris, November 24th, 2011 — The European Court of Justice just rendered a historic decision in the Scarlet Extended case, which is crucial for the future of rights and freedoms on the Internet. The Court ruled that forcing Internet service providers to monitor and censor their users' communications
A little game to demonstrate timing attacks.
Lauren Ipsum is trying to get past Jane Hecate, a little old lady who holds the Book of Passwords. Jane is older and can't see well, so she has to spell out Lauren's guess letter by letter to check whether it's the right password. How can Lauren use this to her advantage? A story about computer science and other…
Electronic Frontier Foundation Uncovers Widespread FBI Intelligence Violations
EFF has uncovered widespread violations stemming from FBI intelligence investigations from 2001 - 2008. In a report released today, EFF documents alarming trends in the Bureau’s intelligence investigation practices, suggesting that FBI intelligence investigations have compromised the civil...
What does $1265 of bugs look like?
To start with, there's a lot of spelling mistakes — 53, by my count. Within a few hours of my announcing the bug bounties, someone had run a spell checker against all of the comments in the Tarsnap source code and found about half of these; the rest, consisting mostly of cases where one English word was replaced by…