91
Pin-pointing China's attack against GitHub
For the past week, the website "GitHub" has been under attack by China. In this post, I pin-point where the attack is coming from by doing a...
92
93
ICANN's assault on personal and small business privacy
This post is extremely long and detailed and is on quite a dense subject. Here is the short version.
94
Firefox Now Offers a More Private Browsing Experience
We’re releasing a powerful new feature in Firefox Private Browsing called Tracking Protection. We created this feature because we believe in giving you m
95
BoringSSL
We recently switched Google's two billion line repository over to BoringSSL , our fork of OpenSSL . This means that BoringSSL is now powering Chromium (on nearly all platforms), Android M and Google's production services. For the first time, the majority of Google's products are sharing a single TLS stack and making…
96
97
Trackers and bank accounts
A Finnish online bank leaked out user data by using a third-party tracker script.
98
Privacy is at a crossroads. Choose wisely
We already put legal limits on financial, medical, military, transportation, and agriculture technology. Why not online tracking?
99
TSA Master Keys
Someone recently noticed a Washington Post story on the TSA that originally contained a detailed photograph of all the TSA master keys. It’s now blurred out of the Washington Post story, but the image is still floating around the Internet. The whole thing neatly illustrates one of the main problems with backdoors…
100
OAuth Has Ruined Everything
Save time building sleek web, mobile and desktop apps with professional .NET UI Components, JavaScript UI Libraries, Reporting and Automated Testing solutions.
101
Decertifying the worst voting machine in the US
On Apr 14 2015, the Virginia State Board of Elections immediately decertified use of the AVS WinVote touchscreen Direct Recording Electronic (DRE) voting machine. This seems pretty minor, but it received a tremendous amount of pushback from some local election officials. In this post, I’ll explain how we got to that…
102
Race conditions on Facebook, DigitalOcean and others (fixed)
Hello, Lately I have been looking into race condition bugs affecting websites/web-applications. Here is a good resource to learn about th...
103
Candy Japan hit with credit card fraud
What is credit card fraud, how we noticed it and how it impacted our business.
104
Court: Breaking Your Employer's Computer Policy Isn't a Crime
The United States Court of Appeals for the Second Circuit issued an opinion rejecting the government’s attempt to hold an employee criminally liable under the federal hacking statute—the Computer Fraud and Abuse Act (“CFAA”)—for violating his employer-imposed computer use restrictions. The decision...
105
1Password Leaks Your Data
Seriously.
106
An experimental real world adblock
Corporate branding and advertisements are ubiquitous in society today and almost impossible to avoid. What if we lived in a world where consumers were blind to this surplus of corporate branding? Brand Killer is a technology demonstration that envisions a future in which consumers can use augmented reality to opt out…
107
108
NSA in P/poly: The Power of Precomputation
Even after the Snowden revelations, there remained at least one big mystery about what the NSA was doing and how. The NSA’s classified 2013 budget request mentioned, as a priority item, R…
109
In Wake of Charlie Hebdo Attack, Let’s Not Sacrifice Even More Rights
EFF is stunned and deeply saddened by the attack on Charlie Hebdo, a French satirical newspaper. As free speech advocates, we mourn the use of violence against individuals who used creativity and free expression to engage in cultural and political criticism. Murder is the ultimate form of...
110
111
How to Protect Yourself from NSA Attacks on 1024-bit DH
In a post on Wednesday, researchers Alex Halderman and Nadia Heninger presented compelling research suggesting that the NSA has developed the capability to decrypt a large number of HTTPS, SSH, and VPN connections using an attack on common implementations of the Diffie-Hellman key exchange...
112
113
Mysterious Planes Over Baltimore Spark Surveillance Suspicions
It all started with a simple Twitter query from a Baltimore man: “Anyone know who has been flying the light plane in circles above the city for the last few nights?” This was several days after the death of Freddie Gray in police custody, and the subsequent riots and protests. Pete Cimbolic, an aviation buff and…
114
115
CISA passes Senate
CISA passed the Senate today in a 74-21 vote. The bill is fundamentally flawed due to its broad immunity clauses, vague definitions, and aggressive spying authorities. The bill now moves to a conference committee despite its inability to address problems that caused recent highly publicized...
116
Why the Tor attack matters
Earlier today, Motherboard posted a court document filed in a prosecution against a Silk Road 2.0 user, indicating that the user had been de-anonymized on the Tor network thanks to research conduct…
117
EFF to Congress: Stop the Cybersurveillance Bills
EFF joined over 50 privacy and civil society organizations that sent two letters to Congress demanding it vote against the Senate Intelligence Committee's cybersecurity "information sharing" bill, the Cybersecurity Information Sharing Act of 2015 (CISA, S. 754) and the House Intelligence Committee’...
118
OS X sudoers exploit found in the wild
Last month's discovery of a zero-day vulnerability in OS X led to today's revelation of the first known exploit.
119
Even the LastPass Will Be Stolen
How to obtain encryption keys to decrypt the LastPass vault in different scenarios
120
Intel x86 considered harmful – survey of attacks against x86 over last 10 years
Back in summer I have read a new bookpublished by one of the core Intel architects about the Management Engine (ME).I didn’t quite like what I read there. In...