61
62
CISA passes Senate
CISA passed the Senate today in a 74-21 vote. The bill is fundamentally flawed due to its broad immunity clauses, vague definitions, and aggressive spying authorities. The bill now moves to a conference committee despite its inability to address problems that caused recent highly publicized...
63
EFF to Congress: Stop the Cybersurveillance Bills
EFF joined over 50 privacy and civil society organizations that sent two letters to Congress demanding it vote against the Senate Intelligence Committee's cybersecurity "information sharing" bill, the Cybersecurity Information Sharing Act of 2015 (CISA, S. 754) and the House Intelligence Committee’...
64
OS X sudoers exploit found in the wild
Last month's discovery of a zero-day vulnerability in OS X led to today's revelation of the first known exploit.
65
First fully sandboxed Linux desktop app
Its not a secret that I've been working on sandboxed desktop applications recently. In fact, I recently gave a talk at devconf.cz about it. However, up until now I've mainly been focusing on the bundling and deployment aspects of the problem. I've been running applications in their own environment, but having pretty…
66
67
68
69
China's Great Cannon
This post describes our analysis of an attack tool that we identify as separate from, but co-located with, the Great Firewall of China.
70
71
Cell-Site Simulators Aren’t Secret Anymore
Digital analyzer. IMSI catcher. Stingray. Triggerfish. Dirt box. Cell-site simulator. The list of aliases used by the devices that masquerade as a cell phone tower, trick your phone into connecting with them, and suck up your data, seems to grow every day. But no matter what name cell-site...
72
Sustaining Digital Certificate Security
Posted by Ryan Sleevi, Software Engineer This post updates our previous notification of a misissued certificate for google.com Followin...
73
Hard, Not Soft, Kill Switches
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
74
Global coalition to Facebook: “Authentic names” are dangerous for your users
Facebook claims its practice of forcing users to go by their "real names" (or "authentic identities" as Facebook spins it) makes the social network a safer place. In fact, the company has often claimed that the policy protects women who use the social media platform, even when faced with community...
75
Life in a post-database world: Using crypto to avoid database writes
Possibly one of the biggest hurdles that stands in the way of fostering innovation and discovering newer and better techniques of doing old things is the ease with which developers and designers to…
76
Chaos Computer Club congratulates Netzpolitik.org
Nach nur kurzer Prüfung einer Strafanzeige des Verfassungsschutzes ermittelt der Generalbundesanwalt gegen die Redaktion von netzpolitik.org. Der Chaos Computer Club (CCC) gratuliert der Redaktion...
77
78
Santa Claus Confirms NSA Attack on Naughty or Nice Database
A press conference was organised this morning on behalf of Mr Santa Claus. At the conference, a spokes–elf confirmed that there had been repeated attempts to hack the “naughty or nice (NON)” database. The NON-database was thought to be used by Mr Claus to keep records of young inhabitants of planet earth, in order to…
79
No Matter What the FBI Says, Compromising Encryption Is a Technical Issue
What does the FBI want when it comes to the encryption “debate”? At an oversight hearing before the Senate Judiciary Committee today, FBI Director James Comey offered what he called the “good news” that it’s not a debate at all. In fact, he said, government and the tech industry all want the same...
80
Confidant: an open-source secret management service
I’m pleased to announce the initial open source release of Confidant, a secret management service for AWS users, built by engineers at…
81
Signal for Android: RedPhone and TextSecure in one app
Today we’ve started rolling out Signal for Android, which unites simple private messaging and simple private calling into a single app on Android. This is the culmination of our effort to combine TextSecure and RedPhone into one app, which we began on iPhone and are now bringing to completion on ...
82
Apple’s Dev Agreement Means No EFF Mobile App for iOS
Today we launched a new app that will make it easier for people to take action on digital rights issues using their phone. The app allows folks to connect to our action center quickly and easily, using a variety of mobile devices. Sadly, though, we had to leave out Apple devices and the folks who...
83
Introducing 1Password for Teams
The ultimate password keeper for business, 1Password simplifies team security. Secure your company's data with our business password vault.
84
Important Notice Regarding Public Availability of Stable Patches
grsecurity is the only drop-in Linux kernel replacement offering high-performance, state-of-the-art exploit prevention against both known and unknown threats.
85
New South Wales Attacks Researchers Who Found Internet Voting Vulnerabilities
A security flaw in New South Wales’ Internet voting system may have left as many as 66,000 votes vulnerable to interception and manipulation in a recent election, according to security researchers. Despite repeated assurances from the Electoral Commission that all Internet votes are “fully...
86
Exploring the Hacker Tools of Mr. Robot
Discover the tools used in the Mr Robot television show to break into target computers. Then download, play and build your security knowledge.
87
Let's Encrypt Launch Schedule
Let’s Encrypt has reached a point where we’re ready to announce our launch schedule. First certificate: Week of July 27, 2015 General availability: Week of September 14, 2015 We will issue the first end entity certificates under our root under tightly controlled circumstances. No cross-signature will be in place yet…
88
United Airlines Stops Researcher Who Tweeted about Airplane Network Security
Our client, Chris Roberts, a founder of the security intelligence firm One World Labs, found himself detained by the FBI earlier this week after tweeting about airplane network security during a United Airlines flight. When Roberts landed in Syracuse, he was questioned by the FBI, which ultimately...
89
Introducing AWS WAF
AWS WAF is a managed cloud web application firewall (WAF) service that protects websites, APIs, and applications from bots, exploits, and layer 7 events. Deploy scalable, enterprise-grade WAF solutions with global protection.
90