151
152
Phishing Has Gotten Very Good
This isn’t phishing; it’s not even spear phishing. It’s laser-guided precision phishing: One of the leaked diplomatic cables referred to one attack via email on US officials who were on a trip in Copenhagen to debate issues surrounding climate change. “The message had the subject line ‘China and Climate Change’ and…
153
154
155
More on the NSA Commandeering the Internet
If there’s any confirmation that the U.S. government has commandeered the Internet for worldwide surveillance, it is what happened with Lavabit earlier this month. Lavabit is—well, was—an e-mail service that offered more privacy than the typical large-Internet-corporation services that most of us use. It was a small…
156
157
FISA Court Rejects Catch-22 Secrecy Argument in FOIA Case
In the first publicly known victory by a non-government party before the Foreign Intelligence Surveillance Court (FISC), the secret court today granted a motion filed by EFF related to an ongoing Freedom of Information Act lawsuit. The FISC gave its OK to the public disclosure of an earlier opinion...
158
Malware Hidden Inside JPG EXIF Headers
A few days ago, Peter Gramantik from our research team found a very interesting backdoor on a compromised site. This backdoor didn’t rely on the…
159
Set up an email server in two hours
You may be concerned that the NSA is reading your e-mail. Is there really anything you can do about it though? After all, you don’t really want to move off of GMail / Google Apps. And no plac…
160
How airline reservations are used to target illegal searches
One of the most detailed pictures to date of how the US government uses airline reservations to target illegal searches is provided by documents released recently by the US government as part of an agreement to settle a lawsuit brought by David House , an activist with the Pvt. Manning Support Network .
161
You cannot have a digital copy of the DC Code
On how the law was taken away from the people of Washington, DC by legal shenanigans
162
Phishing with Linkedin's Intro
Security and Programming Blog
163
Firefox getting smarter about third-party cookies
Mozilla has a long running interest in fostering greater transparency, trust and accountability related to privacy and the many cookie-based practices we see today. On Friday, Mozilla released a Firefox ...
164
165
166
Facebook Android app sends phone number to Facebook servers without consent
Broadcom Community - VMTN, Mainframe, Symantec, Carbon Black
167
Beginner's Guide to Wi-fi Interception
You know how security people get all uppity about SSL this and SSL that? Stuff like posting creds over HTTPS isn’t enough, you have to load login forms over HTTPS as well and then you can’t send auth cookies over HTTP because they’ll get sniffed and sessions
168
169
Everything you wanted to know about SQL injection (but were afraid to ask)
This content is now available in the Pluralsight course "Ethical Hacking: SQL Injection" [http://www.pluralsight.com/courses/ethical-hacking-sql-injection]Put on your black hats folks, it’s time to learn some genuinely interesting things about SQL injection. Now remember – y’all play nice with the bits and
170
171
How Advanced Is the NSA's Cryptanalysis, and Can We Resist It?
The latest Snowden document is the US intelligence ‘black budget.’ There’s a lot of information in the few pages the Washington Post decided to publish, including an introduction by Director of National Intelligence James Clapper. In it, he drops a tantalizing hint: ‘Also, we are investing in groundbreaking…
172
Verizon, caught red-handed
Verizon has now on multiple occasions refused to connect my Google Nexus 7 LTE tablet, though the device was publicized widely as working on Verizon and...
173
174
175
176
177
178
Civil Liberties Groups Speak Out Against CISPA in Lead Up to Hearings
On Monday, EFF and over 30 other Internet rights organizations sent a letter to members of Congress demanding they vote no on the "cybersecurity" bill known as CISPA. The letter starts off a week in which Congress will hold three different hearings about CISPA and computer and network security. In...
179
Blackmail fail
In which the author receives surprising offers from kind strangers
180
SecureDrop
SecureDrop is an open-source whistleblower support system, originally written by Aaron Swartz and now run by the Freedom of the Press Foundation. The first instance of this system was named StrongBox and is being run by The New Yorker. To further add to the naming confusion, Aaron Swartz called the system DeadDrop…