121
122
Sony uses DMCA to silence speech that reveals its security flaws
Co-authored by Corynne McSherry and Marcia Hofmann For years, EFF has been warning that the anti-circumvention provisions of the Digital Millennium Copyright Act can be used to chill speech, particularly security research, because legitimate researchers will be afraid to publish their results lest...
123
Translation of Carrier IQ's Media Release
We Got Caught Doing Something We Were Kind of Hoping No One Would Notice and Now We’re Nervously Placing Exclamation Marks at the End of Our Media Alert Headlines!
124
Electronic Arts Hates Strong Passwords
EA does not allow passwords longer than 16 characters or passwords that contain symbols. However passwords like cool, pass and love are totally acceptable.
125
126
Sony Music Brazil hacked
I hate to pick on Sony, but they got hacked again (and no, I am not talking about the Lulzsec + sonypictures, this is another…
127
Neat trick for getting private info for Facebook, GMail, Twitter and Digg users
Hidden img and script tags with onload and onerror let any site tell if you're logged into GMail, Facebook, Twitter or Digg. Google called it expected.
128
Be careful what you put in an email
Posts about OMakase written by Om Malik
129
H.R.1981, the end of online privacy as we know it.
Space Cybersecurity has become a prominent topic in the news, particularly when it comes to protecting space-related assets and technologies.
130
How Organized Spam is Taking Control of Google's Search Results
In the past few months, I have been watching a very unsettling trend unfold in very competitive ecommerce search results on Google. It appears that huge amounts of money are put into place to systematically and successfully manipulate highly competitive search terms in order to sell fake…
131
Randi Zuckerberg Runs in the Wrong Direction on Pseudonymity Online
The Nymwars rage on. Over the past several weeks Google has been engaged in a very public struggle with its users over its “real names” policy on Google+, prompting blog posts and editorials debating the pros and cons of allowing pseudonymous accounts on social networking sites. But there is one...
132
133
Bitcoin is Not Anonymous
An Analysis of Anonymity in the Bitcoin System2011135 points53 commentscited by 3Crypto & Blockchain details
TL;DR Bitcoin is not inherently anonymous. It may be possible to conduct transactions is such a way so as to obscure your identity, but, ...
134
The Final Answer For What To Do To Prevent Piracy [of Indie Games]
(For some reason, Blogger deleted this post. I have recreated it. Sorry for any comments that were lost.) This article is my decisive sta...
135
House Keys copyable from 200 ft away via camera
UC San Diego Jacobs School of Engineering2011133 points69 commentscited by 4Security & Privacy details
 UC San Diego computer scientists have built a software program that can perform key duplication without having the key. Instead, the computer scientists only need a photograph of the key.
136
Hiding your data in plain sight: USB hardware hiding
This article will describe the possibility of hiding data in any kind of USB hardware. Even though USB data carriers come in various sizes and forms, which already sometimes makes them hard to recognize, this approach could even make it worse. Any USB device could be a data carrier and thus from a forensics point of…
137
The implications of UEFI "Secure Boot" for Linux users
Last month Steven Sinofsky from Microsoft announced new requirements for manufacturers wanting to ship Windows 8 systems, including a feature called “Secure Boot”. Canonical, together with Red Hat, today publishes a white paper highlighting the implications of these requirements for users and manufacturers. The paper…
138
139
140
Zero Day Vulnerability in many Wordpress Themes
Big News [April 24th, 2012]: I’ve launched Wordfence to permanently fix your WordPress site’s security issues. Read this now.
141
142
143
EFF: Apple Should Stand Up and Defend Its Developers
Update II: Apparently not frightened off by Apple's letter defending its developers, Lodsys went ahead and sued at least seven developers in the Eastern District of Texas for patent infringement. In its original cease-and-desist letters, Lodsys gave developers 21 days to respond. But – apparently...
144
Sovereign Keys, EFF's proposal to replace the certificate authority model
This is part 2 of a series on the security of HTTPS and TLS/SSL. [Part 1] In a previous post, we discussed some structural insecurities in HTTPS and TLS/SSL, and how those are beginning to pose serious problems for the security of the Web. In this post I will introduce a new proposal called "...
145
146
147
A possible flaw in open-source bcrypt implementations
[NOTE: See updates below and here .] I'm working on an application that requires a secure password hash. The state of the art is Colin Perc...
148
Nym Wars (Google+ "real name" rules)
I hadn't been paying much attention to the Google "Real Names" clusterfuck, because it was so obvious to me that they were going to lose this one in the press that it would all be over soon. But it's still not over, and the Google brass appear to be digging in their heels, despite the universally bad press they're…
149
150