31
32
EFF: Stop Congress from Reauthorizing the Warrantless Spying Bill
We could be celebrating the New Year by ripping out the fiber optic cables that are sending copies of all our emails to the National Security Agency. But instead, Congress is planning on ringing in 2013 by re-authorizing parts of the FISA Amendments Act, the controversial 2008 bill that allows...
33
34
Lessons learned from cracking 2 million LinkedIn passwords
A community of security professionals discussing IT security and compliance topics and collaborating with peers.
35
Three NSA Whistleblowers Back EFF's Lawsuit Over Government Spying Program
San Francisco - Three whistleblowers – all former employees of the National Security Agency (NSA) – have come forward to give evidence in the Electronic Frontier Foundation's (EFF's) lawsuit against the government's illegal mass surveillance program, Jewel v. NSA. In a motion filed today, the three...
36
37
Securing Your Domain Against Seizure: Where Is Safe to Register a Domain Name?
The Gun.io blog: insights on hiring software developers, AI in engineering, distributed teams and how to build high-performing technical teams.
38
39
China listening in on Skype - Microsoft assumes you approve
Fighting censorship with technology since 2011. We use AI to monitor censorship and expand free speech worldwide.
40
Chromium Blog: A Tale Of Two Pwnies (Part 2)
When we wrapped up our recent Pwnium event, we praised the creativity of the submissions and resolved to provide write-ups on how the two e...
41
The Critical Security Flaws that Resulted in Last Friday's Hack
A core value CloudFlare is that security information should be shared between organizations to make the entire Internet safer. That is how CloudFlare's systems work: if one site is attacked, data about that attack is immediately shared with the rest of the network so other sites can be safe.
42
43
Format string vulnerability found in 'sudo'
A flaw exists in the debugging code in sudo versions 1.8.0 through 1.8.3p1 that can be used to crash sudo or potentially allow an unauthorized user to elevate privileges. Sudo versions affected: 1.8.0 through 1.8.3p1 inclusive. Older versions of sudo are not affected. CVE ID: This vulnerability has been assigned…
44
Vice.com Reveals John McAfee's Location In iPhone Metadata
Some time ago, the website Vice.com posted an article with the somewhat full of themselves title “We Are With John McAfee Right Now, Suckers”. In it, they reveal how they have been traveling with John for the better part of the week.
45
Members of Congress Demand Answers for the Unjust Domain Name Seizures
This morning, a bipartisan group of Representatives, led by Rep. Zoe Lofgren (D-Calif.), sent a pointed letter to Attorney General Eric Holder and the Secretary of Homeland Security Janet Napolitano protesting the recent spat of domain name seizures—executed on dubious copyright grounds—that have...
46
47
Microsoft Certificate used to sign "Flame"
Microsoft Emergency Bulletin: Unauthorized Certificate used in "Flame" , Author: Johannes Ullrich
48
Drone hijacked by UT hackers with $1,000 spoofer
The Sophos Blog
49
Bank of America Giving Access to Random Accounts
Today, we received an invoice for one of our expenses. To send the payment, I logged into Bank of America's website to use their ACH (Automated Clearing
50
Apple's Crystal Prison and the Future of Open Platforms
Two weeks ago, Steve Wozniak made a public call for Apple to open its platforms for those who wish to tinker, tweak and innovate with their internals. EFF supports Wozniak's position: while Apple's products have many virtues, they are marred by an ugly set of restrictions on what users and...
51
EFF Challenges National Security Letter Statute in Landmark Lawsuit
Since the first national security letter statute was passed in 1986, the FBI has issued hundreds of thousands of such letters seeking private telecommunications and financial records of Americans without any prior approval from courts. Indeed, for the period between 2003 and 2006 alone, almost 200,...
52
The Mystery of the Encrypted Gauss Payload
The Securelist blog houses Kaspersky’s threat intelligence reports, malware research, APT analysis and statistics
53
Tor trip report to an FBI conference
In October I attended an FBI conference, as part of my work to try to keep Tor on good relations...
54
'; CREATE TABLE `Capture the Flag`; -- Stripe CTF Web Edition coming next week'
Online payment processing for internet businesses. Stripe is a suite of payment APIs that powers commerce for businesses of all sizes.
55
Researchers Connect Flame to Stuxnet
The Securelist blog houses Kaspersky’s threat intelligence reports, malware research, APT analysis and statistics
56
57
Mozilla to Certificate Authorities: no subordinate CAs for traffic interception
Earlier today we sent an email to all certificate authorities in the Mozilla root program to clarify our expectations around certificate issuance. In particular, we made it clear that the ...
58
59
60
