31
Nvidia GPUs can break Chrome's incognito mode
When I launched Diablo III, I didn’t expect the pornography I had been looking at hours previously to be splashed on the screen. But that’s exactly what replaced the black loading scree…
32
Guccifer 2.0: DNC's servers hacked by a lone hacker
Worldwide known cyber security company CrowdStrike announced that the Democratic National Committee (DNC) servers had been hacked by “sophisticated” hacker groups. I’m very please…
33
Two years spent spamming spammers back
I created a bot to respond to these types of emails…
34
Kaspersky OS
At last – we’ve done it! I’ve anticipated this day for ages – the day when the first commercially available mass market hardware device based our own secure operating system landed on my desk.
35
Upgrade your SSH keys
Upgrade to faster and more secure SSH keys. I promise a smooth transition to the use of your new keys.
36
How I could have hacked any Facebook account
Note: This is being published with the permission of Facebook under the responsible disclosure policy. The vulnerability is now fixed. ...
37
Microsoft Kills off ISVs by Foisting Its Own Products That Are No Better
Hi Folks! Meet David, the magnificent masterpiece sculpted by Michelangelo at the start of the 16th century. A photo of his face with that curious furrowed brow featured on our very first anti-cyber…
38
Running a Tor Exit Node for Fun and E-mails
The Tor Project is a non-profit organization in the United States that created Tor, The Onion Router, a free software that creates an open network of volunteers which helps people anonymize their traffic by routing it through three or more other computers before it reaches its final destination.
39
“Subject: Urgent Warning”
Back in December I got a desperate email from this person. A woman who said her Instagram had been hacked and since she found my contact info in the app she mailed me and asked for help. I of course replied and said that I have nothing to do with her being hacked but I … Continue reading “Subject: Urgent Warning” →
40
Please scan my towel
My friend Scott pointed out the towels in most hotels now have RFID tags to help with inventory control: I also knew that my RSA Conference badge would have an RFID tag in it so it could be scanne…
41
This is why people fear the Internet of Things
Imagine buying an internet-enabled surveillance camera, network attached storage device, or home automation gizmo, only to find that it secretly and constantly phones home to a vast peer-to-peer (P2P) network run by the Chinese manufacturer of the hardware. Now imagine that the geek gear you bought doesn’t actually…
42
NoScript is harmful and promotes malware
NoScript proudly calls itself a security extension advertising itself as an extension with “whitelist based pre-emptive script blocking approach prevents exploitation of security vulnerabilities (known and even not known yet!) with no loss of functionality…”
43
Taking Over DigitalOcean Domains via a Lax Domain Import System
A Hacker's Blog of Unintended Use and Insomnia.
44
How I Could Steal Money from Instagram, Google and Microsoft
TL;DR: Instagram ($2000), Google ($0) and Microsoft ($500) were vulnerable to direct money theft via premium phone number calls. They all offer services to supply users with a token via a computer-voiced phone call, but neglected to properly verify whether supplied phone numbers were legitimate, non-premium numbers…
45
46
There are no secure smartphones
Modern smartphones have a CPU chip, and a baseband chip which handles radio network communications (GSM/UMTS/LTE/etc.) This chip is connected to the CPU via DMA. Thus, unless an IOMMU is used, the baseband has full access to main memory, and can compromise it arbitrarily.
47
If your code accepts URIs as input, filter out “file://”
There are many online sites that accept reading input from remote locations. For example a site might try to extract all the text from a webpage, or show you the HTTP-headers a given server sends back in response to a request.
48
49
How Skype fixes security vulnerabilities
In a nutshell — they don't. This post describes my fruitless effort to convince Microsoft employees that their service is vulnerable, and the humiliation one has to go through should one's account be blocked by a hacker. This is a story of ignorance, pain, and despair.
50
51
Why OpenBSD Is Important to Me
The freedom to speak in private is essential to democracy. The less private your conversations, the more careful you are about what you say. And being careful leads to less candor, less criticism, and less innovation. Thought and private speech are the breeding ground for new, sometimes controversial ideas. They are…
52
Going dark: online privacy and anonymity for normal people
Last week we got news of the Rosebutt data breach [http://motherboard.vice.com/read/rosebuttboard-ip-board]. This is a very particular class of site and like many others we've recently seen compromised, it's highly likely that members would have preferred to keep their identities secret. It
53
Compromising a Linux desktop using 6502 opcodes on the NES
Overview A vulnerability and a separate logic error exist in the gstreamer 0.10.x player for NSF music files. Combined, they allow for ve...
54
What is Differential Privacy?
Yesterday at the WWDC keynote, Apple announced a series of new security and privacy features, including one feature that’s drawn a bit of attention — and confusion. Specifically, Apple …
55
Beware: Windows 10 Signature Edition Blocks Installing Linux
We help you acquire the perfect domain for your site. Affordable payment options. Quick and responsive customer support available.
56
Extracting Qualcomm's KeyMaster Keys – Breaking Android Full Disk Encryption
A security blog focusing on Android, the Linux Kernel and everything nice.
57
58
59
UCOP Ordered Spyware Installed on UC Data Networks
The San Francisco Chronicle has coverage of an issue that has been circulating on faculty email networks at UC Berkeley for a few days. ...
60