241
What Happens When You Enter the Witness Protection Program?
The history of the Witness Protection Program is full of Hollywood-worthy intrigue. It also challenges our assumptions about crime and identity.
242
HTTPS Everywhere Version 5: Sixteen New Languages and Thousands of New Rules
This week we released the latest version of HTTPS Everywhere to all of our users. Compared to the previous major release, this version introduces thousands of new rules, translations of the interface into sixteen new languages, and support for "Block All HTTP Requests" in Chrome. If you already use...
243
EFF, Access Now, and the White House Sat Down to Talk About Encryption
In the public battle for strong encryption, EFF has championed the voice of everyday Internet users. After all, if we can’t rely on the security of our digital communications, how can the Web continue to grow and thrive? Now the fight has moved to the Oval Office. EFF, Access Now, over a dozen...
244
245
Government Succeeds in Stalling Again, but Jewel V. NSA Goes On
We were disappointed today to learn that a federal appeals court in Pasadena declined to consider EFF’s appeal of a ruling in Jewel v. NSA, our long-running lawsuit battling unconstitutional mass surveillance of Internet and phone communications. While we are disappointed that government’s stall...
246
Maintaining Digital Certificate Security
Posted by Adam Langley, Security Engineer On Friday, March 20th, we became aware of unauthorized digital certificates for several Google ...
247
EFF's “Yellow Dots of Mystery” (2008)
Since late 2004, EFF has been warning the public about "printer dots" -- tiny yellow dots that appear on documents produced by many color laser printers and copiers. These yellow dots form a coded pattern on every page the printer produces and can be used to identify specific details about a...
248
249
Non-official MtGox investigation update and preliminary release
The official blog of WizSec, a group of bitcoin security specialists, and their investigation into MtGox.
250
Police Must Respect the Right of Citizens to Record Them
“I’m asking all the citizens of North Charleston to continue taping.” That is what Councilwoman Dorothy Williams said in response to the shooting death of Walter Scott. She and others recognize that the story would have been very different without the video showing that a white police officer shot...
251
252
California’s DNA Law Violates Privacy Protections Guaranteed by State
San Francisco—Californians who’ve merely been arrested and not charged, much less convicted of a crime, have a right to privacy when it comes to their genetic material, EFF said in an amicus brief filed Nov. 13 with the state’s highest court. EFF is urging the California Supreme Court to hold that...
253
Fuzzing FFmpeg for fun and profit
One of the great things about having rack-space in our new office is that we can now support open source projects using our equipment such as FFmpeg and Libav. They are critical parts of our software as well as underpin much of multimedia processing in the world today.
254
255
The Inside Story Behind MS08-067
Access to this page requires authorization. You can try signing in or changing directories .
256
Introducing Docker Content Trust
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
257
258
How To Create an SSH CA to Validate Hosts and Clients with Ubuntu
When dealing with an extensive infrastructure and many team members, managing SSH keys for authentication can become unwieldy. However, SSH can utilize cert…
259
The CA's Role in Fighting Phishing and Malware
Since we announced Let’s Encrypt we’ve often been asked how we’ll ensure that we don’t issue certificates for phishing and malware sites. The concern most commonly expressed is that having valid HTTPS certificates helps these sites look more legitimate, making people more likely to trust them. Deciding what to do here…
260
Why ninety-day lifetimes for certificates?
This is a historic blog post at this point. Please see our certificate lifetime documentation for the current status of certificate lifetimes. We’re sometimes asked why we only offer certificates with ninety-day lifetimes. People who ask this are usually concerned that ninety days is too short and wish we would offer…