391
392
Handling App Transport Security in iOS 9
The rollout of iOS 9 is expected to come this Fall and will introduce a new privacy feature called App Transport Security (ATS) to enforce ...
393
394
395
An introduction to JavaScript-based DDoS
CloudFlare protects millions of websites from online threats. One of the oldest and most pervasive attacks launched against websites is the Distributed Denial of Service (DDoS) attack.
396
Report on FBI’s Use of Patriot Act Highlights Need for Intelligence Reform
The Justice Department’s Office of the Inspector General (OIG) yesterday released another report on the Federal Bureau of Investigation’s use of Section 215 of the Patriot Act between 2007 and 2009. The report was long delayed due to declassification and redaction issues, but the timing is...
397
Packet capturing on Windows with netsh
No Wireshark? No TCPDump? No Problem!, Author: Rob VandenBrink
398
European Court Strikes Down Law Allowing Users to Rip Their Own CDs
Today the High Court of the United Kingdom handed down an excellent decision—excellent because the result is so unreasonable, so out of touch with reality, and so divorced from the needs and expectations of ordinary users, that it provides a textbook illustration of the need for urgent reform of...
399
400
Obama Administration Supports Privacy-Invasive “Cybersecurity” Bill
Right before Congress left for its annual summer vacation the Obama Administration endorsed the Senate Intelligence Committee's Cybersecurity Information Sharing Act (CISA). EFF opposes the bill because its vague definitions, broad legal immunity, and new spying powers allow for a tremendous amount...
401
402
403
Detecting VPN (and its configuration) and proxy users on the server side
A lot of people use VPN every day. Somebody use it in always-on mode to circumvent government or corporative internet censorship, while…
404
405
Releasing jsfunfuzz and DOMFuzz
Today I'm releasing two fuzzers: jsfunfuzz , which tests JavaScript engines, and DOMFuzz , which tests layout and DOM APIs.
406
The Federal HTTPS-Only Standard: Necessary and Overdue
The White House Office of Management and Budget has published a new standard recommending full HTTPS on all federal web sites and web services. They are accepting public comments until April 14; if you care about privacy and security, you should weigh in.This post is our public comment: we whole-...
407
Tarsnap exploit bounty
Most bugs are straightforward, but occasionally one comes up which is not so clear in its impact. Such is the case with a bug which is fixed in tarsnap 1.0.36 . This bug causes the NUL string termination byte to overflow the heap-allocated buffer used for paths of objects examined as tarsnap traverses a directory…
408
Poor man's VPN via ssh socks proxy
Redpill Linpro Tech Blog
409
410
411
Our brief in support of Twitter's First Amendment suit against the US government
Yesterday, NYU Technology Law & Policy Clinic filed a legal brief on behalf of Freedom of the Press Foundation in Twitter's important lawsuit against the government for violating their First Amendment rights.Buoyed by the Snowden disclosures that began eighteen months ago, tech companies like Twitter have been…
412
How widely used are security-based HTTP response headers?
In this blog I look at how widespread the usage of common security based HTTP response headers are in the Alexa Top 1 Million most visited sites.
413
414
Tracking a Bluetooth Skimmer Gang in Mexico (Part I)
-Sept. 9, 12:30 p.m. CT, Yucatan Peninsula, Mexico: Halfway down the southbound four-lane highway from Cancun to the ancient ruins in Tulum, traffic inexplicably slowed to a halt. There was some sort of checkpoint ahead by the Mexican Federal Police. I began to wonder whether it was a good idea to have brought along…
415
PuTTY 0.66 fixes security vulnerability
Home | FAQ | Feedback | Licence | Updates | Mirrors | Keys | Links | Team Download: Stable · Snapshot | Docs | Privacy | Changes | Wishlist
416
Getting Superfish Out of Firefox
First things first: If you are reading this post on a recent Lenovo laptop, please click the lock icon in the URL bar, then click “More Information…”. If you see ...
417
Microsoft adopts first international cloud privacy standard
Today marks a major milestone, as Microsoft is the first major cloud provider to adopt the world’s first international standard for cloud privacy. It’s another reason customers can move with confidence to the Microsoft Cloud. The standard in question may seem technical, but it has important practical benefits for…
418
419
420
Firefox Under Fire: Anatomy of latest 0-day attack
The recent Firefox attacks are an example of active in-the-wild exploitation of a serious software vulnerability.