Just as you take steps to protect your personal safety and health while engaging in real-life encounters, a sex worker should also be mindful of the dangers of the online world. As we wrote in a separate blog post today, the sex worker forum MyRedBook, along with its companion sites, have been...
If you want to invest in bitcoin for the long-haul, you should address the thorny issue of how best to store them. Since people love stealing bitcoins from others more than just about anything else in this world, all storage systems must first and foremost:
This is part 3 of a series of blog posts looking at the security of the UK Government's web infrastructure. Britain's National Health Service is riddled with old and insecure WordPress-based websites. Many of these sites have severe flaws including being vulnerable to XSS attacks. There is absolutely no suggestion…
This domain name has been registered with Gandi.net. It is currently parked by the owner.
At Open Whisper Systems, we believe users should have both privacy and powerful services. Today we’re releasing Flock, a private cloud sync service for your personal data. Your contacts and calendars belong to you. So does your privacy. Flock makes it possible to have both.
Often times, physical access to a machine means game over. While people like to think that OSX is immune to most security threats, even Apple computers can be susceptible to physical attacks. Mac OSX is capable of booting into single user mode by holding a special key combination (Command-S). From this point, an…
Wow! This takes me back! Please check the date this post was authored, as it may no longer be relevant in a modern context.
A significant portion of British citizens are currently blocked from accessing the Chaos Computer Club's (CCC) website. On top of that, Vodafone customers are blocked from accessing the ticket sale...
Today, we're releasing a new version of SSL Rating Guide as well as a new version of SSL Test to go with it. Because the...
Yesterday the OpenSSL Project released an update to address the CVE-2014-0160 vulnerability, nicknamed “Heartbleed.” This serious vulnerability affects a..
blog about networking, cameras, old gear, and xmpp
Looking for a way to help the Internet stay open and free? This topic needs some dedicated...
Awhile ago, I stumbled upon a service that let you write python-bots to interact with a number of external services. The basic idea was th...
Over the past four years, KrebsOnSecurity has been targeted by countless denial-of-service attacks intended to knock it offline. Earlier this week, KrebsOnSecurity was hit by easily the most massive and intense such attack yet — a nearly 200 Gbps assault leveraging a simple attack method that industry experts say is…
XTS is the de-facto standard disk encryption mode, which makes it look like a good general-purpose one. It isn't. What disk encryption actually promises, and why XTS's guarantees don't travel.
It's everywhere . Sometimes they tell you to ignore certificates as well (looking at you, Salt). That's dumb.
What is a warrant canary? A warrant canary is a colloquial term for a regularly published statement that a service provider has not received legal process that it would be prohibited from saying it had received. Once a service provider does receive legal process, the speech prohibition goes into...
Use urandom. That is the whole answer. Why the entropy-depletion story is a myth, and why userspace CSPRNGs are behind most of the last decade's randomness disasters.
The Sophos Blog
Verizon users might want to start looking for another provider. In an effort to better serve advertisers, Verizon Wireless has been silently modifying its users' web traffic on its network to inject a cookie-like tracker. This tracker, included in an HTTP header called X-UIDH, is sent to every...
A possibly revised version of this article can be found at: https://gnupg.org/faq/whats-new-in-2.1.html
