151
152
Encryption is a necessity
Recent news around Apple’s resistance to the US government’s demand to decrypt the iPhone of one of the San Bernardino shooters has brought encryption
153
Web Storage: the lesser evil for session tokens
I was recently asked whether it was safe to store session tokens using Web Storage (sessionStorage/localStorage) instead of cookies. Upon googling this I found the top results nearly all assert that w
154
Facial Recognition’s Threat to Privacy Is Worse Than Anyone Thought
Before all of this ever went down In another place, another town You were just a face in the crowd You were just a face in the crowd Out in the street walking around A face in the crowd -Tom Petty If we don’t speak up now, the days when we can walk around with our heads held high without fear of...
155
DDoS Attacks: Best Practices for Prevention and Response
Late last month, Internet users across the eastern seaboard of the United States had trouble accessing popular websites, such as Reddit, Netflix, and the New York Times....
156
The Security-Minded Container Engine by CoreOS: rkt Hits 1.0
No single cloud fits all. Explore how we build a more flexible future with hybrid cloud.
157
Yubico: Secure Hardware vs. Open Source
Learn more about what's happening within the tech and cybersecurity industry and the developments in our business and security keys within our Yubico Blog.
158
159
Backdoor in DVR firmware sends CCTV camera snapshots to email address in China
CCTV is ubiquitous in the UK. A recent study estimates there are about 1.85m cameras across the UK – most in private premises. Most of those cameras will be connected to some kind of recording device, which these days means a Digital Video Recorder or DVR. DVRs take video feeds from multiple cameras and store […]
160
161
Chrome is warning users about insecure pages
First transition in Google's HTTPS-everywhere plans is done
162
How Referral Spam Like lifehacker.com Gets into Google Analytics
Find out how referral spam in Google Analytics can be produced, why anybody would take time to do that and personality behind the latest spam wave.
163
Bypassing Antivirus with Ten Lines of Code
I had originally set out to write a long winded blog post on different antivirus bypass techniques. I went through what was supposed to be s...
164
165
166
Symantec's Bad Week
Appcanary makes sure you never run vulnerable software on your servers. Like our blog? Subscribe to our newsletter or podcast . Browse the archive , or follow us on twitter , github or rss .
167
168
Certificate Revocation Issue
We're experts in automated, Scalable, Integrated Digital Certificates Solutions, SSLs/TLSs, managed PKI, IoT, authentication & email security. Learn more about our identity management services.
169
Technology in Hostile States: Ten Principles for User Protection
This blog post is meant to generate a conversation about best practices for using cryptography...
170
Playpen: The Story of the FBI’s Unprecedented and Illegal Hacking Operation
In December 2014, the FBI received a tip from a foreign law enforcement agency that a Tor Hidden Service site called “Playpen” was hosting child pornography. That tip would ultimately lead to the largest known hacking operation in U.S. law enforcement history. The Playpen investigation—driven by...
171
A Technical Perspective on the Apple iPhone Case
The legal dispute between Apple and the FBI might prove pivotal in the long-running battle to protect users' privacy and right to use uncompromised encryption. The case has captured the public imagination. Of course, EFF supports Apple's efforts to protect its users. The case is complicated...
172
Dropping Linux capabilities to improve container security
Increase container security by dropping capabilities in Docker. Learn how to drop unnecessary capabilities for increased security.
173
174
Is Your Site Leaking Password Reset Links?
Emailed password reset links are a common part of web applications. Is your site leaking these confidential links to third party sites?
175
176
177
Beware of hacked ISOs if you downloaded Linux Mint on February 20th
We were exposed to an intrusion today. It was brief and it shouldn’t impact many people, but if it impacts you, it’s very important you read the information below.
178
Verizon Routing Millions of IP Addresses for Cybercrime Gangs
Over the past few years, spammers have sought out large ranges of IP addresses. By spreading out their sending patterns across a wide range of IP addresses, they can attempt to defeat spam filters and get spam and malware emails delivered where they are not wanted. However, IPv4 addresses are getting scarce and hard…
179
Announcing Certbot: EFF's Client for Let's Encrypt
EFF is proud to introduce Certbot, a powerful tool to help websites encrypt their traffic. Certbot is the next iteration of the Let's Encrypt Client; it obtains TLS/SSL certificates and can automatically configure HTTPS encryption on your server. It's still in beta for now, but we plan to release...
180
We Shouldn’t Wait Another 15 Years for a Conversation About Government Hacking
With high-profile hacks in the headlines and government officials trying to reopen a long-settled debate about encryption, information security has become a mainstream issue. But we feel that one element of digital security hasn’t received enough critical attention: the role of government in...