181
Google Address Sanitizer ("compile-time valgrind") to be part of GCC 4.8
This is the mail archive of the gcc-patches@gcc.gnu.org mailing list for the GCC project .
182
New Java 0-day exploit spotted in the wild.
The latest cybersecurity trends, best practices, security vulnerabilities, and more.
183
Introducing Qubes 1.0 ("a stable and reasonably secure desktop OS")
After nearly three years of work, I have a pleasure to announce that Qubes 1.0 has finally been released! To see the installation instructio...
184
The Twitter "Patent Hack"
Yesterday Twitter announced that they plan to amend the assignments agreements that they sign with their employees. They call this proposed amendment the Innovator's Patent Agreement. I've been aware of this effort inside of Twitter for a while and I like to call this move the "Twitter Patent Hack" because I think…
185
186
The Strange Case of John Dillinger and the Fraudulent Apple ID
Programming Zen is a blog about programming and emerging technologies, authored by Antonio Cangiano, a Software Development Manager and AI Evangelist at IBM.
187
188
Cloudflare Attack Post Mortem; Apparent Google Apps/Gmail Vulnerability
This morning a hacker was able to access a customer's account on CloudFlare and change that customer's DNS records. The attack was the result of a compromise of Google's account security procedures.
189
CWI cryptanalist discovers new cryptographic attack in Flame spy malware
Cryptanalyst Marc Stevens from the Centrum Wiskunde & Informatica (CWI) in Amsterdam, known for breaking the https security in 2008 using a cryptanalytic attack on MD5, analyzed the recent Flame virus this week.
190
191
Exploit Information Leaks in Random Numbers from Python, Ruby and PHP
Space Cybersecurity has become a prominent topic in the news, particularly when it comes to protecting space-related assets and technologies.
192
193
Using Twitter to Build a Password Cracking List - 1978 passwords out of 4400
This is going to be a quick one. We're going to show how to use twitter to build a word list for cracking passwords. We'll use John the Rip...
194
195
196
Cybersecurity Bill Broad Enough to Use Against WikiLeaks and The Pirate Bay
Congress is doing it again: they’re proposing overbroad regulations that could have dire consequences for our Internet ecology. The Cyber Intelligence Sharing and Protection Act of 2011 (H.R. 3523), introduced by Rep. Mike Rogers and Rep. Dutch Ruppersberger, allows companies or the government[fn]...
197
198
Daring Fireball: Cookies and Privacy
What I detect in Google’s behavior (and John Battelle’s more-or-less defense of it) is a sense of entitlement. That because in the past ad networks could track almost all users via cookies, they are entitled to continue tracking almost all users across the web via cookies, even when a large (and growing) number of…
199
U.S. Government Threatens Free Speech With Calls for Twitter Censorship
“[T]he ultimate good desired is better reached by free trade in ideas....That at any rate is the theory of our Constitution.” — Justice Oliver Wendell Holmes, dissent in Abrams v. United States, 1919EFF has witnessed a growing number of calls in recent weeks for Twitter to ban certain...
200
201
Why We Should All Care About Today's Senate Vote on FISA
Today is an incredibly important vote for the future of your digital privacy, but some in Congress are hoping you won’t find out. Finally, after weeks of delay, the Senate will start debate on the dangerous FISA Amendments Act at 10 am Eastern and vote on its re-authorization by the end of the day...
202
203
204
On CPU backdoors - Trusting hardware
So, you're a decent paranoid person, running only open source software on your box: Linux, GNU, etc. You have the feeling you could, if you ...
205
206
The Most Incompetent TSA Story Yet?
The storyline: TSA screener finds two pipes in passenger’s bags. Screener determines that they’re not a threat. Screener confiscates them anyway, because of their “material and appearance.” Because they’re not actually a threat, screener leaves them at the checkpoint. Everyone forgets about them. Six hours later, the…
207
SSH Do’s and Don’ts
Do Use SSH Keys When ever you can use a key for SSH. Once you create it, you can distribute the public side widely to enable access where ever you need it. Generating one is easy: ssh-keygen -t dsa Don't Use a Blank Passphrase on Your Key This key is now your identity. Protect it.
208
Bitsquatting: DNS Hijacking without exploitation
Researchers have exploited bit-errors before in amazing ways . But bit-errors can be detected and exploited in new ways on an Internet-wide scale. One of these means is by bitsquatting, or registering domain names one bit different than frequently resolved domains.
209
Olympics 2012: A Bruce Schneier Moment
An east London estate, where 700 people live, has received leaflets saying a "Higher Velocity Missile system" could be placed on a water tower. ...
210
And the privacy invasion award goes to …
Who’s playing fast and loose with your data? The Big Brother Awards, billed as the “Oscars for data leeches” by the hackers and privacy advocates who hand out the prizes, shine a high-intensity spotlight on companies and individuals with poor privacy track records. Since 1998, Privacy International...