301
302
Safe from what?
What does it mean for a baby monitor to be safe? Some things are clearly essential: It should not explode; it should not release significant quantities of dangerous gasses; if it's designed to be placed within reach of a baby, it should not pose an electrocution or choking hazard. Less obviously, if it has data or…
303
304
305
Coreboot Blocked from Recent Thinkpads by Intel Boot Guard
So some innocent post on the coreboot mailing list managed to make some waves. The problem Intel tries to solve… Intel Boot Guard is the latest effort in a long series by Intel and others to allow computers to provide some reliable information about the state a computer is in. They’re working on it since at least…
306
British Spy Agency Considers Journalists a Threat, Vacuums Up Their Emails
Terrorists, hackers, and journalists. According to a recent Guardian article covering new Snowden documents, British spy agency GCHQ considers all of these individuals threats—various levels of threats, but threats nonetheless. One intelligence report goes so far as to say, "Of specific concern are...
307
308
309
Surveillance forces journalists to think and act like spies
Once upon a time, a journalist never gave up a confidential source. When someone comes forward, anonymously, to inform the public, it's better to risk time incarcerated than give them up. This ethical responsibility was also a practical and professional necessity. If you promise anonymity, you're obliged to deliver…
310
What’s in a Boarding Pass Barcode?
The next time you’re thinking of throwing away a used boarding pass with a barcode on it, consider tossing the boarding pass into a document shredder instead. Two-dimensional barcodes and QR codes can hold a great deal of information, and the codes printed on airline boarding passes may allow someone to discover more…
311
The ICANN Public Comments on WHOIS Privacy
ICANN is currently considering a proposal that “domains used for online financial transactions for commercial purpose should be ineligible for [WHOIS] privacy and proxy registrations” [ PDF ]. Given the vagueness around what would count as “commercial purpose” (tip jars? advertising? promoting your Kickstarter?) and…
312
AT&T Hotspots: Now with Advertising Injection
While traveling through Dulles Airport last week, I noticed an Internet oddity. The nearby AT&T hotspot was fairly fast—that was a pleasant surprise.
313
314
Facebook and PGP
Facebook just announced support for PGP, an encrypted email standard, for email from them to you. It’s an interesting move on many levels, albeit one that raises some interesting questions. The answers, and Facebook’s possible follow-on moves, are even more interesting.
315
Duqu 2.0 Hits Kaspersky Lab
Kaspersky Lab uncovers Duqu 2.0 – a highly sophisticated malware platform exploiting up to three zero-day vulnerabilities.
316
I Know This – Hack Jurassic Park’s Security System
“I Know This” is a game I made for the Global Game Jam 2015 along with Gavin McCarthy (art, design), Adam Axbey (sound effects) and Matthew Simmonds (4mat) (music); I did programming and design. The name we chose for the team was Two’s Complement .
317
Human Rights Watch Sues DEA Over Bulk Collection of Americans’ Telephone Records
Los Angeles — Human Rights Watch, a nonpartisan organization that fights human rights abuses across the globe, filed suit against the U.S. Drug Enforcement Administration late Tuesday for illegally collecting records of its telephone calls to certain foreign countries as part of yet another...
318
Hacking Team: a zero-day market case study
This article documents Hacking Team’s third-party acquisition of zero-day (0day) vulnerabilities and exploits. The recent compromise of Hacking Team’s email archive offers one of the first public case studies of the market for 0days. Because of its secretive nature, this market has been the source of endless debates…
319
Canada's Quiet Weakening of Communications Encryption
This article outlines some of the federal government of Canada’s successful and unsuccessful attempts to weaken encryption standards.
320
Re: Proposed Statement on "HTTPS everywhere for the IETF"
Search IETF mail list archives
321
322
The New USA Freedom Act: A Step in the Right Direction, but More Must Be Done
A bipartisan group of congressional leaders has reintroduced the USA Freedom Act. The bill is an attempt to rein in the intelligence community's "Collect It All" strategy, and passing USA Freedom is a first, small step in the right direction. However, it has serious faults that should be addressed...
323
Breaches, traders, plain text passwords, ethical disclosure and 000webhost
It’s a bit hard to even know where to begin with this one, perhaps at the start and then I’ll try and piece all the bits together as best I can. As you may already know if you’re familiar with this blog, I run the service Have
324
EFF to UN: You Need a Privacy Watchdog
EFF joined more than sixty civil liberties organizations and public interest groups from across the world yesterday in calling upon the world's governments to support the creation of a United Nations Special Rapporteur on the right to privacy. The special rapporteurs are independent experts...
325
326
Hidden in plain sight: Brute-forcing Slack private files
Van Pathé tot KLM en de Rijksoverheid: ontdek hoe Dawn Technology met maatwerk software alledaagse ervaringen slimmer, sneller en beter maakt.
327
Disabling SSLv3 and RC4
Posted by Adam Langley, Security Engineer As the previously announced transition to SHA-256 certificates is nearing completion, we are p...
328
Universal DNSSEC: Secure DNS for Every Domain
CloudFlare launched just five years ago with the goal of building a better Internet. That’s why we are excited to announce that beginning today, anyone on CloudFlare can secure their traffic with DNSSEC in just one simple step.
329
330
The easiest bug bounties I have won
The bugs I will write about are the simplest ones I have ever found on Facebook. The point of this blog is to show that some bugs can be fo...