301
Disclosure timeline for vulnerabilities under active attack
Posted by Chris Evans and Drew Hintz, Security Engineers We recently discovered that attackers are actively targeting a previously unknown...
302
303
Mail from the (Velvet) Cybercrime Underground
Over the past six months, “fans” of this Web site and its author have shown their affection in some curious ways. One called in a phony hostage situation that resulted in a dozen heavily armed police surrounding my home . Another opened a $20,000 new line of credit in my name. Others sent more than $1,000 in bogus…
304
Introducing FuzzDB
FuzzDB is an open source database of attack patterns, predictable resource names, regex patterns for identifying interesting server responses, and documentation resources. It's most often used testing the security of ...
305
306
How to implement HTTPS in an insufficient manner
HTTPS or SSL or TLS or whatever you want to call it can be a confusing beast. Some say it’s just about protecting your password and banking info whilst the packets are flying around the web but I’ve long said that SSL is not about encryption [https://www.
307
Excess Automobile Deaths as a Result of 9/11
People commented about a point I made in a recent essay: In the months after 9/11, so many people chose to drive instead of fly that the resulting deaths dwarfed the deaths from the terrorist attack itself, because cars are much more dangerous than airplanes. Yes, that’s wrong. Where I said “months,” I should have…
308
1% of CMS-Powered Sites Expose Their Database Passwords (2011)
Feross Aboukhadijeh is a computer security researcher, teacher, web developer, designer, long distance runner, gamer, music lover, and builder of websites that (sometimes) go viral.
309
310
The Prosecution of Aaron: A Response to Orin Kerr
Aaron Swartz committed suicide last week. He was 26, a genius and my friend. Not a really good friend, but someone I had worked with off and on for 11 years, liked a lot, had laughed with frequently, occasionally shaken my head over and deeply admired. When I first met him he looked like this.
311
Mailchimp offers 10% discount for using 2-factor security
Browse how-to articles on starting, running, and marketing your business, plus thought-provoking podcasts and films to inspire your inner entrepreneur.
312
313
RSA warns developers not to use RSA products
In today’s news of the weird, RSA (a division of EMC) has recommended that developers desist from using the (allegedly) ‘backdoored’ Dual_EC_DRBG random number generator — w…
314
315
316
What I've Been Thinking About
I’m starting to think about my next book, which will be about power and the Internet—from the perspective of security. My objective will be to describe current trends, explain where those trends are leading us, and discuss alternatives for avoiding that outcome. Many of my recent essays have touched on various facets…
317
Don't use autofill in your browser
What every WordPress site owner can do to improve WordPress security. Even the less tech savvy ones. Read all about in in this article!
318
319
320
321
The Government Wants A Backdoor Into Your Online Communications
According to the New York Times, President Obama is "on the verge of backing" a proposal by the FBI to introduce legislation dramatically expanding the reach of the Communications Assistance for Law Enforcement Act, or CALEA. CALEA forces telephone companies to provide backdoors to the government...
322
Building a PGP web of trust that people will actually use
Back in the early 1990s, PGP introduced the concept of web of trust (WoT)- a means by which users of personal encryption can know whether or...
323
324
Security releases issued
Posted by James Bennett on Feb. 19, 2013
325
326
“No-fly” trial: Closing arguments
Judge William Alsup convened day five of the trial in Ibrahim v. DHS — the first lawsuit challenging a U.S. government “no-fly” order to make it to trial — on Friday morning with the announcement that, “I received this additional material about the [plaintiff’s] daughter and her attempts to come here.”
327
Chromecast: Exploiting the Newest Device By Google
On Wednesday, July 24th Google launched the Chromecast. As soon as the source code hit we began our audit. Within a short period of time we had multiple items to look at for when our devices arrived. Then we received our Chromecasts the following day and were able to confirm that one of the bugs existed in the build…
328
How secure is HTTPS today? How often is it attacked? (2011)
This is part 1 of a series on the security of HTTPS and TLS/SSL HTTPS is a lot more secure than HTTP! If a site uses accounts, or publishes material that people might prefer to read in private, the site should be protected with HTTPS. Unfortunately, is still feasible for some attackers to break...
329
We scanned the Internet for port 22
Yesterday (Sept. 12) we scanned the entire Internet for port 22 -- the port reserved for "SSH", the protocol used by sysadmins to remotely l...
330
Google to Encrypt All Keyword Searches
Boost organic search traffic with content strategy tools that help you build an SEO strategy, optimize your content, and track performance in one place.