211
Enhancing digital certificate security (Fake *.Google.com cert issued)
Posted by Adam Langley, Software Engineer Late on December 24, Chrome detected and blocked an unauthorized digital certificate for the "*....
212
How likely is the NSA PRISM program to catch a terrorist?
Recent revelations about PRISM, the NSA’s massive program of surveillance of civilian communications have caused quite a stir. And rightfully so, as it appears that the agency has been grante…
213
Where “nothing to hide” fails as logic
Every April, I try to wade through mounds of paperwork to file my taxes. Like most Americans, I’m trying to follow the law and pay all of the taxes that I owe without getting screwed in the process. I try and make sure that every donation I made is backed by proof, every deduction is backed by logic and documentation…
214
EFF Sues FBI For Access to Facial-Recognition Records
San Francisco - As the FBI is rushing to build a "bigger, faster and better" biometrics database, it's also dragging its feet in releasing information related to the program's impact on the American public. In response, the Electronic Frontier Foundation (EFF) today filed a lawsuit to compel the...
215
Fake femme fatale dupes IT guys at US government agency
The Sophos Blog
216
Bypassing Google’s Two-Factor Authentication
Explore the Duo Blog for expert tips, security insights, and resources to stay updated on the latest in security and access management trends.
217
Teenager facing terrorism charges for something he posted on Facebook
Meet Cameron D'Ambrosio. He's 18 and lives in a small town near Boston. He posts a lot of lyrics on Facebook and wants to be a rapper. Oh, and he's being held without bail as a terrorist for ... WHAT??!
218
PRISM? Come to Israel to study our surveillance state
It seems that those who were astonished, abhorred, enraged or outraged from finding out that the National Security Agency (NSA) tracked millions of united states citizens and did so with the cooperation of numerous internet service providers, telecommunication companies and web-based hosting services had not even…
219
Complete, Persistent Compromise of Netgear Wireless Routers
UPDATE: Turns out, Jacob Holocomb ( @rootHak42 on Twitter) of Independent Security Evaluators found this bug back in April on a different d...
220
221
Securing Ubuntu
Table of Contents Initial Setup Setting up iptables and Fail2Ban Fail2Ban iptables rules Make shared memory read-only Setting up Bastille Linux Configuring Bastille sysctl hardening Setting up a chroot environment Securing nginx inside the chroot Extras Initial Setup Let’s login to our new machine and take some…
222
223
224
Can Apple read your iMessages?
About a year ago I wrote a short post urging Apple to publish the technical details of iMessage encryption. I’d love tell you that Apple saw my influential crypto blogging and fell all over t…
225
Hacking the OS X Kernel for Fun and Profiles
My last post described how user-level CPU profilers work, and specifically how Google’s pprof profiler gathers its CPU profiles with the help of the operating system. The specific feature needed from the operating system is the profiling timer provided by setitimer (2) and the SIGPROF signals that it delivers.
226
How I attacked a fellow student
I’m a college student studying abroad at the University of Pennsylvania, studying a mixture of CS, Physics and Music. This semester I decided to take a course CIS551: Network and Computer Security, eager to learn about the field. This is the story of how as part of the course, I compromised the security of one […]
227
Opera breached, has code cert stolen, possibly spreads malware
The Sophos Blog
228
Court Opinion Finding NSA Surveillance Unconstitutional to be released
Update: In response to EFF's FOIA lawsuit, the government has released the 2011 FISA court opinion ruling some NSA surveillance unconstitutional. For over a year, EFF has been fighting the government in federal court to force the public release of an 86-page opinion of the secret Foreign...
229
Exploiting a Bug in Google's Glass
A few days ago, I posted to Twitter a picture I took of a Google Glass unit running software that I had modified. I did this while in the Bay Area after picking it up from Google's headquarters in Mountain View. I was unable to provide many more details at the time, as I first was busy driving home, and then became…
230
EFF: Help Us Protect Mesh Networking From Overbroad Patents
Earlier this year, we announced that along with the Cyberlaw Clinic at Harvard’s Berkman Center for Internet and Society, we were challenging six patent applications that, if granted, could threaten the development of 3D printing technology. We asked you—the community—for help, and your input was...
231
232
Bitcoin as a law enforcement/natsec honeypot: what is the evidence?
Paranoia appears to be the order of the day, given what we know about the NSA and GCHQ thanks to Edward Snowden. Absent from the stories so...
233
Bills Introduced by Congress Fail to Fix Unconstitutional NSA Spying
In the past two weeks Congress has introduced a slew of bills responding to the Guardian's publication of a top secret court order using Section 215 of the PATRIOT Act to demand that Verizon Business Network Services give the National Security Agency (NSA) a record of every customer's call history...
234
235
How to send DMs on Twitter without permission
I just recalled " SMS commands " feature and tried to send a DM (private, direct message) with "Share on Twitter"-button. It works! Twitt...
236
Android RNG Weakness Renders Bitcoin Wallets Insecure
We recently learned that a component of Android responsible for generating secure random numbers contains critical weaknesses , that render all Android wallets generated to date vulnerable to theft. Because the problem lies with Android itself, this problem will affect you if you have a wallet generated by any Android…
237
238
Node.js incorrectly parses HTTP methods
One who writes code
239
Here come the encryption apps
It seems like these days I can’t eat breakfast without reading about some new encryption app that will (supposedly) revolutionize our communications — while making tyrannical regimes fa…
240
The Fallacy of Cracking Contests (1998)
In this issue: The Fallacy of Cracking Contests How to Recognize Plaintext News The Doghouse: Iomega Zip Disks Counterpane Systems News Final Report from the Commerce Department Technical Advisory Committee on Key Recovery Comments From Readers About "CRYPTO-GRAM"