61
62
The Next Front in the New Crypto Wars: WhatsApp
In Saturday’s edition of the New York Times, Matt Apuzzo reports that the Department of Justice is locked in a “prolonged standoff” with WhatsApp. The government is frustrated by its lack of real-time access to messages protected by the company’s end-to-end encryption. The story may represent a...
63
64
Industry Concerns about TLS 1.3
Search IETF mail list archives
65
The US Government has no credibility to compel anybody to weaken security
This is my belated obligatory post about the entire "Apple vs the FBI" episode and whether it should help decrypt the San Bernardino shooter's iPhone. People have commented that I should write something, and I've been reluctant in case I go off in full-rant-mode. I wrote the entire post and…
66
Introducing TAuth: Why OAuth 2.0 is bad for banking APIs and how we're fixing it
This week we released our authorisation flow making it possible for you to go from building apps that talk to your bank account, to building apps that can talk to any bank account. This is huge. Check out this SMS bot (how on trend) I hacked up yesterday morning. (and don’t forget to join the beta wait list ).
67
Belarus finally bans Tor
Country: Belarus Probed ISPs: Beltelecom (AS 6697) Censorship method: TCP injections We have recently heard of network anomalies in Belarus. Tor has been finally blocked in December 2016, although it had been explicitly declared that Tor should be blocked since February 2015. An anonymous cypherpunk has helped to…
68
Fraudulent Advertising on Facebook
This story starts with Sidney Crosby. A professional hockey player and Canadian icon. I can neither confirm nor deny that I welled up like…
69
Disclosing vulnerabilities to protect users
Posted by Neel Mehta and Billy Leonard, Threat Analysis Group On Friday, October 21st, we reported 0-day vulnerabilities — previously publi...
70
71
72
How the TPP Will Affect You and Your Digital Rights (2015)
The Internet is a diverse ecosystem of private and public stakeholders. By excluding a large sector of communities—like security researchers, artists, libraries, and user rights groups—trade negotiators skewed the priorities of the Trans-Pacific Partnership (TPP) towards major tech companies and...
73
FBI Wants It to Be Impractical to Deploy Strong Encryption Without Key Escrow
The FBI wants strong encryption without key escrow, which is insecure at scale, to be illegal or impractical. Data breach risks rise as devices get less secure.
74
Disappearing messages for Signal
The latest Signal release for iPhone, Android, and Desktop now includes support for disappearing messages. The timer has come With this update, any conversation can be configured to delete sent and received messages after a specified interval. The configuration applies to all parties of a convers...
75
The VeraCrypt Audit Results
VeraCrypt 1.18 and its bootloaders were evaluated. This release included a number of new features including non-western developed encryption options, a boot loader that supports UEFI (modern BIOSes), and more.
76
Amnesty International: Encryption Is a Human Rights Issue
New Report Analyzes How Crypto Backdoors, Interference with Crypto, and Compelled Disclosure of Encryption Keys All Impact Free Expression and Privacy Defending encryption is a human rights issue, according to a new Amnesty International report. The report calls on nation-states to promote the use...
77
“No Cost” License Plate Readers Are Turning Texas Police into Debt Collectors
Vigilant Solutions, one of the country’s largest brokers of vehicle surveillance technology, is offering a hell of a deal to law enforcement agencies in Texas: a whole suite of automated license plate reader (ALPR) equipment and access to the company’s massive databases and analytical tools—and it...
78
Flash and Chrome
Chrome will de-emphasize Flash in favor of HTML5, giving you improved security, reduced power consumption and faster page load times.
79
80
81
82
Task_t considered harmful
Posted by Ian Beer, Project ZeroThis post discusses a design issue at the core of the XNU kernel ...
83
The Mirai Botnet Is Proof the Security Industry Is Broken
Appcanary makes sure you never run vulnerable software on your servers. Like our blog? Subscribe to our newsletter or podcast . Browse the archive , or follow us on twitter , github or rss .
84
85
HackedThat: Breaking in to a hardened server via the back door
Earlier this summer, the team atInversoft published a comprehensive andsophisticatedguide to user data security. Theguide spans from hardening servers from p...
86
87
How Dropbox securely stores your passwords
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
88
89
Two Bytes to $951M
In February 2016 one of the largest cyber heists was committed and subsequently disclosed. An unknown attacker gained access to the Banglade...
90