211
212
213
Docker 1.3 is out
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
214
215
216
Dual_EC_DRBG backdoor: a proof of concept
Dual_EC_DRBG is an pseudo-random number generator promoted by NIST in NIST SP 800-90A and created by NSA. This algorithm is problematic because it has been made mandatory by the FIPS norm (and should be implemented in every FIPS approved software) and some vendors even promoted this algorithm as first source of…
217
Did North Korea Really Attack Sony?
I am deeply skeptical of the FBI’s announcement on Friday that North Korea was behind last month’s Sony hack. The agency’s evidence is tenuous, and I have a hard time believing it. But I also have trouble believing that the US government would make the accusation this formally if officials didn’t believe it. Clues in…
218
219
Cell Phone Guide For US Protesters, Updated 2014 Edition
Update: Our recently updated Surveillance Self-Defense guide includes more background and detail on security threats facing mobile phone users. Check out the guide, and pay particular attention to The Problem With Mobile Phones. With major protests in the news again, we decided it's time to update...
220
Peek Inside a Professional Carding Shop
Over the past year, I’ve spent a great deal of time trolling a variety of underground stores that sell “dumps” — street slang for stolen credit card data that buyers can use to counterfeit new cards and go shopping in big-box stores for high-dollar merchandise that can be resold quickly for cash. By way of explaining…
221
Regin: Top-tier espionage tool enables stealthy surveillance
Broadcom Community - VMTN, Mainframe, Symantec, Carbon Black
222
223
Privacy Protects Bothersome People (2013)
We need to support privacy, not for those of us who have "nothing to hide", but for bothersome people like investigative journalists and activists, without which our democracy would crumble
224
How you will not uncover Satoshi
Computer forensics is the science of finding evidence in computers and digital documents, and when a hacker perform forensics, better be prepared for the unknown. Satoshi did many things in order t…
225
Quick notes about the bash bug, its impact, and the fixes so far
We spent a good chunk of the day investigating the now-famous bash bug (CVE-2014-6271), so I had no time to make too many jokes about it on...
226
My Heart Bleeds for OpenSSL
Overview Today has been eventful, to say that least. My colleague and I patched several services, re-issued keys for them and started the ...
227
Jamming XKeyScore
Back in the day there was talk about "jamming echelon" by adding keywords to email that the echelon system was supposedly looking for. We ca...
228
229
Keyless SSL: The Nitty Gritty Technical Details
We announced Keyless SSL yesterday to an overwhelmingly positive response. We read through the comments on this blog, Reddit, Hacker News, and people seem interested in knowing more and getting deeper into the technical details.
230
231
232
233
Boring SSL
Earlier this year, before Apple had too many goto fails and GnuTLS had too few , before everyone learnt that TLS heart-beat messages were a thing and that some bugs are really old , I started a tidy up of the OpenSSL code that we use at Google.
234
Drupal 7 SQL Injection Vulnerability
SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: Drupal - pre Auth SQL Injection Vulnerability Release Date: 2014/10/15 Last
235
236
237
238
Illinois General Assembly passes bill to ban citizens from recording police
The Illinois General Assembly just passed a bill that would prevent citizens from recording the police.
239
EFF Dismayed by House's Gutted USA Freedom Act
EFF and Other Civil Liberties Organizations Call on Congress to Support Uncompromising Reform Since the introduction of the USA FREEDOM Act, a bill that has over 140 cosponsors, Congress has been clear about its intent: ending the mass collection of Americans' calling records. Many members of...
240
HipChat Will Grant Employers Access To 1-to-1 Chat History
Atlassian and Slack have forged a new strategic partnership.