151
Confidant: an open-source secret management service
I’m pleased to announce the initial open source release of Confidant, a secret management service for AWS users, built by engineers at…
152
Signal for Android: RedPhone and TextSecure in one app
Today we’ve started rolling out Signal for Android, which unites simple private messaging and simple private calling into a single app on Android. This is the culmination of our effort to combine TextSecure and RedPhone into one app, which we began on iPhone and are now bringing to completion on ...
153
Apple’s Dev Agreement Means No EFF Mobile App for iOS
Today we launched a new app that will make it easier for people to take action on digital rights issues using their phone. The app allows folks to connect to our action center quickly and easily, using a variety of mobile devices. Sadly, though, we had to leave out Apple devices and the folks who...
154
155
Introducing 1Password for Teams
The ultimate password keeper for business, 1Password simplifies team security. Secure your company's data with our business password vault.
156
The Moral Character of Cryptographic Work
Abstract: Cryptography rearranges power: it configures who can do what, from what. This makes cryptography an inherently political tool, and it confers on the field an intrinsically moral dimension. The Snowden revelations motivate a reassessment of the political and moral positioning of cryptography. They lead one to…
157
158
Important Notice Regarding Public Availability of Stable Patches
grsecurity is the only drop-in Linux kernel replacement offering high-performance, state-of-the-art exploit prevention against both known and unknown threats.
159
New South Wales Attacks Researchers Who Found Internet Voting Vulnerabilities
A security flaw in New South Wales’ Internet voting system may have left as many as 66,000 votes vulnerable to interception and manipulation in a recent election, according to security researchers. Despite repeated assurances from the Electoral Commission that all Internet votes are “fully...
160
Exploring the Hacker Tools of Mr. Robot
Discover the tools used in the Mr Robot television show to break into target computers. Then download, play and build your security knowledge.
161
Let's Encrypt Launch Schedule
Let’s Encrypt has reached a point where we’re ready to announce our launch schedule. First certificate: Week of July 27, 2015 General availability: Week of September 14, 2015 We will issue the first end entity certificates under our root under tightly controlled circumstances. No cross-signature will be in place yet…
162
Is Your VirtualBox Reading Your E-Mail? Reconstruction of FrameBuffers from VRAM
This document describes a method of reading and displaying previously used framebuffers from a variety of popular graphics cards. In all 4 tested laptops the content of the VRAM was not erased upon reboot. It is also possible to show that the content of the host VRAM can be accessed from a VirtualBox guest, thereby…
163
About the supposed factoring of a 4096 bit RSA key
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
164
United Airlines Stops Researcher Who Tweeted about Airplane Network Security
Our client, Chris Roberts, a founder of the security intelligence firm One World Labs, found himself detained by the FBI earlier this week after tweeting about airplane network security during a United Airlines flight. When Roberts landed in Syracuse, he was questioned by the FBI, which ultimately...
165
Introducing AWS WAF
AWS WAF is a managed cloud web application firewall (WAF) service that protects websites, APIs, and applications from bots, exploits, and layer 7 events. Deploy scalable, enterprise-grade WAF solutions with global protection.
166
DLL Hijacking Just Won’t Die
The folks that build the NSIS Installer have released updates to mitigate a serious security bug related to DLL loading. (v2.5 and v3.0b3 include the fixes). To make a long and complicate…
167
168
State Considered Harmful – A Proposal for a Stateless Laptop
Two months ago I have published a detailed survey of varioussecurity-related problems plaguing the Intel x86 platforms. While the picturepainted in the paper...
169
170
There's No DRM in JPEG – Let's Keep It That Way
If you have ever tried scanning or photocopying a banknote, you may have found that your software—such as Adobe Photoshop, or the embedded software in the photocopier—refused to let you do so. That's because your software is secretly looking for security features such as EURion dots in the...
171
Stupid certificate tricks
Sometimes I do things for no real reasons other than “because I can” and/or “it amuses me”. For example, embedding a snarky message into my HTTPS certificate.
172
Important Allies Join the Fight Against NSA Internet Backbone Surveillance
Last week, the ACLU filed a welcome additional challenge to the NSA’s warrantless Internet backbone surveillance (aka “Upstream” surveillance) on behalf of Wikimedia and a number of other media and human rights organizations. We applaud all of those involved in bringing the case. It adds another...
173
Exploitable vulnerabilities found in Kaspersky Anti-Virus
Posted by the notorious Tavis Ormandy.We’ve talked before about how we use Google scale to ...
174
Beware of sudo on OS X
There's a little kerfuffle going on over on HN about a newly discovered local root exploit on OS X 10.10.5 , so I thought this might be a g...
175
176
Internet of Crappy Things
There is a flood of appliances which could be connected - and some are connected - without a second thought as to whether or not it’s necessary or secure.
177
Over 30% of Official Images in Docker Hub Contain Security Vulnerabilities
Docker Hub is a central repository for Docker developers to pull and push container images. We performed a detailed study on Docker Hub images to understand how vulnerable they are to security threats. Surprisingly, we found that more than 30% of images in official repositories are highly susceptible to a variety of…
178
What web developers should know about SSL
The most common questions we get from developers who already know their stuff
179
How Apple’s iCloud Drive deletes your files without warning
[…] with iCloud Drive, you can safely store all your presentations, spreadsheets, PDFs, images, and any other kind of document in iCloud. Then access them from your iPhone, iPad, iPod touch, Mac, or PC […]
180