1
Instagram's Million Dollar Bug
How participation in Facebook's bug bounty not only led to the complete compromise of Instagram, but also legal threats and intimidation
2
I noticed some disturbing privacy defaults in Windows 10
Adventures in diy, electronics, programming, remote control and anything else.
3
Extracting the SuperFish certificate
I extracted the certificate from the SuperFish adware and cracked the password (" komodia ") that encrypted it. I discuss how down below. T...
4
If you've nothing to hide, you've got nothing to fear
Since 1851 Amsterdam had a registry that recorded the following innocent pieces of data about the residents: Name, Date of birth, Address, Marital Status, Parents, Profession, Religion, Previous Addresses and Date of Death if deceased. For many years this system served well and was kept meticulously up to date.
5
It's Time to Break Up the NSA (2014)
The NSA has become too big and too powerful. What was supposed to be a single agency with a dual mission—protecting the security of U.S. communications and eavesdropping on the communications of our enemies—has become unbalanced in the post-Cold War, all-terrorism-all-the-time era. Putting the U.S. Cyber Command, the…
6
7
8
9
10
11
Deleting any Facebook album
What if your photos get deleted without your knowledge? That would be pretty upsetting, wouldn’t it? This post is about a vulnerability I found that allowed malicious users to delete any photo album on Facebook. Any photo album owned by a user, a page, or a group could be deleted. Graph API is the primary […]
12
Firefox tracking protection decreases page load time by 44%
Edited to add: I wrote a followup post to address comments here and elsewhere that advertising is working as intended. This paper has been ...
13
Auditing GitHub users’ SSH key quality
If you have just/as of late gotten an email about your keys being revoked, this is because of me, and if you have, you should really go through and make sure that no one has done anything terrible to you, since you have opened yourself to people doing very mean things to you for what is most likely a very long time.
14
Truecrypt report
A few weeks back I wrote an update on the Truecrypt audit promising that we’d have some concrete results to show you soon. Thanks to some hard work by the NCC Crypto Services group, soon is n…
15
Secure Secure Shell
No ads, no tracking. Ever.<br/> <strong>blog.stribik.technology</strong> is completely static, without cookies or javascript.<br/> <strong>comments.stribik.technology</strong> uses javascript and local storage, it's loaded when you click
16
Get your loved ones off Facebook
I originally wrote this for my friends and family in 2015, to explain why the latest Facebook privacy policy is really harmful. It’s since been read b
17
ARRIS Cable Modem Has a Backdoor in the Backdoor
A couple of months ago, some friends invited me to give a talk at NullByte Security Conference . I started to study about some embedded devi...
18
19
One in every 600 websites has .git exposed
Deeply technical and hands-on AI and tech leader. Built, scaled and sold my own… · Experience: Cubes · Education: Nanzan University · Location: London Area, United Kingdom · 500+ connections on LinkedIn. View Jamie Brown’s profile on LinkedIn, a professional community of 1 billion members.
20
21
Who Hacked Ashley Madison?
AshleyMadison.com , a site that helps married people cheat and whose slogan is “Life is Short, have an Affair,” recently put up a half million (Canadian) dollar bounty for information leading to the arrest and prosecution of the Impact Team — the name chosen by the hacker(s) who recently leaked data on more than 30…
22
Thunderstrike – Apple EFI firmware vulnerability
31C3 presentation on the Thunderstrike firmware vulnerability in MacBooks
23
24
25
26
Firefox, you're supposed to be in my pocket, not the other way around
Personal blog of Julien (jvoisin) Voisin
27
28
29
1.5 TB of Dark Net Market scrapes
Mirrors of ~89 Tor-Bitcoin darknet markets & forums 2011–2015, and related material.
30