31
Bogus story: no Chinese backdoor in military chip
Today's big news is that researchers have found proof of Chinese manufacturers putting backdoors in American chips that the military uses. T...
32
33
"Adobe has released Adobe Photoshop CS6, which addresses these vulnerabilities"
Adobe applies hundreds of security processes and controls to help us comply with industry-accepted standards.
34
35
36
A Tor of the Dark Web
Tell me if you’ve been in this situation: you’re chatting about online anonymity with your wife and the other Knight-Mozilla Fellows over a pizza in Florence. A quiet-spoken stranger who had been sitting across the room walks up to your table and says “are you all here for the Tor hackathon?” You respond “why yes, yes…
37
Why does that QR Code go to justinsomnia.org?
Back in 2007 I stumbled upon something called a QR Code . It was a neat two-dimensional barcode that encodes textual information visually—with URLs being a promising application for the emerging smartphone market (thanks to the release of the iPhone that year). So I did what any self-respecting personal blogger would…
38
39
Congress Must Act After US Government Admits To Warrantless Wiretapping
As Congress and the President rush to re-authorize the dangerous FISA Amendments Act (FAA)—the law shamefully passed after pressure to legalize certain portions of the NSA’s warrantless wiretapping program—EFF has been sounding the alarm that Americans’ communications are still being...
40
John Nash's Letter to the NSA
The National Security Agency (NSA) has recently declassified an amazing letter that John Nash sent to it in 1955. It seems that around the year 1950 Nash tried to interest some US security organs …
41
42
43
44
Playing chicken with cat.jpg
I was reminded of this by 37signals' response on Monday to last week's cat.jpg privacy failure . To be clear, I have a lot of sympathy for 37signals: Once someone looked in their logs and saw "cat.jpg" as the name of the one hundred millionth file they had stored, I'm sure the resulting fit of laughter significantly…
45
The EC2 firewall is broken
As most standards-aware network administrators know, blocking ICMP is evil. Sure, there are certain ICMP packets which should be blocked; but to quote RFC 2979 :
46
White House Deletes TSA Petition
At approximately 11:30 am EDT, the White House removed a petition about the TSA airport screening procedures from the White House
47
Followup to "I bought more than 1 million Facebook data entries for $5"
Warning: According to Facebook you are not allowed to read this post, so beware.
48
49
50
51
52
53
Analysis of bank PIN numbers
Is your PIN number too predictable? Detailed analysis on PIN number databases.
54
55
Microsoft confirms UEFI fears, locks down ARM devices
The Software Freedom Law Center provides legal representation and other law related services to protect and advance Free and Open Source Software.
56
'; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
Today we're launching Capture the Flag: Web Edition, a security contest where you can try your hand at discovering and exploiting vulnerabilities in mock web applications.
57
58
A Tale of Two Pwnies (Part 1)
Just over two months ago, Chrome sponsored the Pwnium browser hacking competition. We had two fantastic submissions , and successfully bloc...
59
Storing Passwords Securely
Why "SHA 256-bits enterprise-grade password encryption" is only slightly better than storing passwords in plain text, and better ways to do it.
60
Hotel Wifi JavaScript Injection
So I’m checking my blog on the hotel wifi, like ya do, and I notice something a little off with the style. There’s a dark colored bar at the top of the page that shouldn’t be there. That’s funny. Maybe a recent Firefox update changed how they treat CSS?