421
422
Invisible Click Tracking Using “Empty” UTF-8 Characters
Have a look at this URL linking to this post: https://kaspars.net/blog/invisible-click-tracking Notice any tracking variables? Me neither! But check out the HTTP request and response in the network inspector of your browser -- it is redirecting to the "same" URL: URL encoded special characters in the browser console…
423
424
Mailpile Chooses AGPL v3
I finally put the team's original plan into action, launching a vote on our new roadmap site , asking our community of backers to help us choose a single license for the project.
425
426
EFF's Updated SSL Configuration
EFF recently updated our SSL certificate and configuration. This gave us an A+ rating on SSL Labs, a great jumping off point for reviewing a site's secure connection. What follows is a quick, technical guide to how we achieved this. Generating a Certificate First we generate an 4096-bit RSA private...
427
Audi Cruise Control Bug
I noticed a "bug" in the way Audi handles its Cruise Control options. Cruise control is only meant to be used once you drive "30 kilometers per hour or more". …
428
TSA Sued Over New Policy to Refuse Opt-Outs
Last Friday, the TSA snuck out a document updating the “privacy policy” for the nude body scanners. On Tuesday, reports started coming in on the change, including right here. Professi…
429
430
Teensy weensy crypto
As the UK's politicians continue to fail to understand what "strong cryptography" or "banning" even mean, I thought I would have a look at how simple strong cryptography can be.
431
Gov. Brown Signs CalECPA, Requiring Police to Get a Warrant for Your Data
Californians can rest assured that law enforcement can’t poke around in their digital records without first obtaining a warrant. Today, Gov. Jerry Brown has signed S.B. 178, the California Electronic Communications Privacy Act (CalECPA). After months of pressure from public interest groups, media...
432
433
SendGrid employee’s account was compromised and used to access internal systems
Explore the latest company news, product updates, technical tutorials, and best practices from Twilio, the industry-leading customer engagement platform.
434
Poisonous MD5 – Wolves Among the Sheep
Because we can!
435
Introduction to WebKit Content Blockers
Describing content blocking rules in a structured format ahead-of-time, rather than running extension-provided code.
436
Break a dozen secret keys, get a million more for free
[An in-depth blog post by Daniel J. Bernstein, crossposted between the ECRYPT blog and the cr.yp.to blog .]
437
Opportunistic Encryption for Firefox
Firefox 37 brings more encryption to the web through opportunistic encryption of some http:// based resources. It will be released the week ...
438
What Happens When You Enter the Witness Protection Program?
The history of the Witness Protection Program is full of Hollywood-worthy intrigue. It also challenges our assumptions about crime and identity.
439
440
HTTPS Everywhere Version 5: Sixteen New Languages and Thousands of New Rules
This week we released the latest version of HTTPS Everywhere to all of our users. Compared to the previous major release, this version introduces thousands of new rules, translations of the interface into sixteen new languages, and support for "Block All HTTP Requests" in Chrome. If you already use...
441
Hopefully the last post I'll ever write on Dual EC DRBG
I’ve been working on some other blog posts, including a conclusion of (or at least an installment in) this exciting series on zero knowledge proofs. That’s coming soon, but first I want…
442
EFF, Access Now, and the White House Sat Down to Talk About Encryption
In the public battle for strong encryption, EFF has championed the voice of everyday Internet users. After all, if we can’t rely on the security of our digital communications, how can the Web continue to grow and thrive? Now the fight has moved to the Oval Office. EFF, Access Now, over a dozen...
443
444
Government Succeeds in Stalling Again, but Jewel V. NSA Goes On
We were disappointed today to learn that a federal appeals court in Pasadena declined to consider EFF’s appeal of a ruling in Jewel v. NSA, our long-running lawsuit battling unconstitutional mass surveillance of Internet and phone communications. While we are disappointed that government’s stall...
445
Maintaining Digital Certificate Security
Posted by Adam Langley, Security Engineer On Friday, March 20th, we became aware of unauthorized digital certificates for several Google ...
446
Yubico with new 4096-bit keys and gpg-agent for ssh authentication
Collection of my projects and hacks.
447
EFF's “Yellow Dots of Mystery” (2008)
Since late 2004, EFF has been warning the public about "printer dots" -- tiny yellow dots that appear on documents produced by many color laser printers and copiers. These yellow dots form a coded pattern on every page the printer produces and can be used to identify specific details about a...
448
449
Reassessing Airport Security
News that the Transportation Security Administration missed a whopping 95% of guns and bombs in recent airport security “red team” tests was justifiably shocking. It’s clear that we’re not getting value for the $7 billion we’re paying the TSA annually. But there’s another conclusion, inescapable and disturbing to…
450
W^X policy violation affects Windows drivers compiled in VS 2013 and previous
Back in June, I was doing some analysis on a Windows driver and discovered that the INIT section had the read, write, and executable characteristics flags set. Windows executables (drivers included…