181
182
183
Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx
Deliver modern applications with NGINX. Explore high-performance load balancing, API gateways, and web server solutions trusted by top global enterprises.
184
Experimenting with Post-Quantum Cryptography
Posted by Matt Braithwaite, Software Engineer Quantum computers are a fundamentally different sort of computer that take advantage of aspec...
185
You are being followed: The business of social media surveillance
Anubis could not load its JavaScript. The server may be overloaded. Please reload the page to try again.
186
Statistician calls for audit to address election hacking fears
Double-check needed before Electoral College cements presidential results on Dec. 19
187
Scalable and secure access with SSH
Visit the post for more.
188
189
Uber Hacking: How we found out who you are, where you are and where you went
Here at Integrity we love to be challenged, so whenever there is some free time, there is encouragement to do research or to break some things ( https://labs.integrity.pt/advisories/ ) in addition to play foosball.
190
EFF to Court: Government Must Inform People That It’s Accessing Their Data
Seattle, Washington—The Electronic Frontier Foundation (EFF) told a federal court today that the government is violating the U.S. Constitution when it fails to notify people that it has accessed or examined their private communications stored by Internet providers in the cloud. EFF is supporting...
191
192
Qubes OS 3.1 has been released
I’m happy to announce that today we’re releasing Qubes OS 3.1! The major new architectural feature of this release has been the introduction of the Qubes Management infrastructure, which is based on the popular Salt management software. In Qubes 3.1, this management stack makes it possi...
193
iOS 10 to Feature Stronger “Limit Ad Tracking” Control
The release of iOS 10, the newest version of Apple's mobile operating system (coming this Fall), will bring an array of new features and upgrades, and a change to the functionality of the "Limit Ad Tracking" privacy setting.
194
DDoSCoin: Cryptocurrency with malicious proof of work
Eric Wustrow, University of Colorado Boulder; Benjamin VanderSloot, University of Michigan
195
196
World of Warcraft: one simple line of code can cost you dearly
A few days ago, a new type of gold/item scam made the rounds. Usually scamming in MMORPGs is done using social engineering techniques, e.g. an attacker sells a fake item code for alleged in-game items like mounts to a potential victim for in-game currency. But this most recent kind of attack does not only involve…
197
How we found a bug in Amazon ELB
Troubleshooting of an Amazon ELB bug found in production using the Sysdig and Wireshark analysis tools and following a strictly top-down approach.
198
Mission Improbable: Hardening Android for Security and Privacy
Updates: See the Changes section for a list of changes since initial posting. After a long wait,...
199
200
Arguments Supporting Warrantless Surveillance Wither When Exposed to Sunlight
The government recently declassified a secret letter, written in 2002 laying out the executive branch’s initial legal justifications for the vast expansion of electronic surveillance after September 11, 2001. Like many others, it was written by former DOJ Office of Legal Counsel attorney John Yoo,...
201
Lessons learned while protecting Gmail
Posted by Elie Bursztein - anti-abuse & security research, Nicolas Lidzborski - Gmail security engineering, and Vijay Eranti - Gmail anti-abus...
202
Major Remote SSH Security Issue in CoreOS Linux Alpha
No single cloud fits all. Explore how we build a more flexible future with hybrid cloud.
203
Obama Has Gotten 3,000+ Tweets about Encryption. Let’s Double That
EFF, ACLU, and Access Now released a statement in support of Apple and its stance on encryption last week. We called on the President to reject any attempt to force backdoors like the one the FBI was seeking to Apple’s operating system. We asked our communities to help by tweeting at the President...
204
RubyGems.org gem replacement security vulnerability and mitigation
Summary RubyGems.org contained a bug that could allow an attacker to replace some .gem files on our servers with a different file that they supplied. We deployed a partial fix on April 2nd and a co...
205
206
HTTPS Adoption doubled this year
Despite having been around for over 20 years, HTTPS always remained very lightly adopted – until 2016. Data from two independent sources shows that HTTPS adoption more than doubled from 2015 to 2016. Snyk CEO Guy Podjarny digs into this data.
207
Advanced Deanonymization Attacks
News posted by Whonix staff. The Whonix Blog. Stay Tuned. (rss)
208
Bitbucket secrets
Research, expert perspectives, and product announcements from Atlassian on how teams can work smarter with AI. Subscribe for monthly insights on the future of teamwork.
209
A year of Windows kernel font fuzzing #1: the results
Posted by Mateusz Jurczyk of Google Project ZeroThis post series is about how we used at-scale fu...
210
An exploit kit hiding in the pixels of malicious ads
Millions of readers who visit popular news websites have been targeted by a series of malicious ads redirecting them to the Stegano exploit kit.