61
62
Advanced Tor Browser Fingerprinting
The ability to privately communicate through the internet is very important for dissidents living under authoritary regimes, activists and basically everyone concerned about internet privacy.
63
TOTP SSH port fluxing
Some people change their SSH port on their servers so that it is slightly harder to find for bots or other nasties and while that is generally viewed as an action of security through obscurity it does work very well at killing a lot of the automated logins you always see in /var/log/auth.log .
64
Why I Live in IRC (2015)
I have lived in IRC for about 7 years. What I mean by this is that IRC has been my primary hub for reading information online and interacting with people and systems. I don't use an RSS reader, I visit Twitter and Facebook only ...
65
Google Chrome 51 disables HTTP/2 on most Linux distros due to old OpenSSL
Chrome drops NPN for ALPN on May 31st, requiring OpenSSL 1.0.2+. CentOS, Debian, and most Ubuntu versions can't support it, breaking HTTP/2 for millions.
66
The Golden Age of Open Protocols
Protocols are a geeky topic. It’s way more interesting to talk about applications. People will go on and on about why they like gmail or some other email application. But not a lot of people get excited about SMTP and IMAP which are the underlying email protocols that allow the gmail application to talk to […]
67
68
69
Usenet Tradecraft: Survival in an Extremely Adversarial Environment (2013)
Survival in an Extremely Adversarial Environment If your secure communications platform isn’t being used by terrorists and pedophiles, you&# …
70
OpenSSL Key Recovery Attack on DH small subgroups (CVE-2016-0701)
Usual Mandatory Disclaimer: IANAC (I am not a cryptographer) so I might likely end up writing a bunch of mistakes in this blog post... ...
71
72
73
Roughtime: a protocol for secure, auditable time synchronisation
Security protocols often assume an accurate, local clock (e.g. TLS, Kerberos, DNSSEC and more). It's a widely accepted assumption when designing protocols but, for a lot of people, it just isn't true. We find good evidence that at least 25% of all certificate errors in Chrome are due to a bad local clock.
74
HTTP GZIP Compression remote date and time leak
Tor is a service run by a network of volunteers to allow people to use internet anonymously. Normally tor is used to browse the web without being tracked or identified.
75
The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability
A Hacker's Blog of Unintended Use and Insomnia.
76
77
78
Do Evil with ESP8266: Slow Down the WiFi
While hackers do good most of the time, we occasionally do evil and play a prank. The ESP8266, unlike JSON , allows me to do evil. Thus, I programmed the microcontroller for an evil purpose: slow down the WiFi.
79
Militia Radio Frequencies
The militia-patriot movement in America has embraced radio communications in a big way. Within the past decade, the methods and communications gear have evolved from basic CB or FRS radios, to now …
80
Advanced Ping: httping, dnsping, smtpping
I really love ping! It is easy to use and directly reveals whether the network works or not. Refer to Why Ping is no Security Flaw! (But your Friend) and Advanced Tracerouting . At least outgoing pings (from trust to untrust) should be allowed without any security concerns. However, many companies are denying these…
81
82
Getting a network trace from a single application
I recently wanted a way to get a network packet trace from a specific application. My googling showed me an old askubuntu thread that solve...
83
I tried to watch Game of Thrones legally in France, Here is what happened
As many of my friends in France started watching the last season of Game Of Thrones: I decided to start watching it too.
84
Curl and http/2 on Mac
$ curl ‐‐http2 https://daniel.haxx.se/ curl: (1) Unsupported protocol curl on mac curl has been shipped by default on Mac OS X since many years - I actually couldn't even manage to figure out exactly how many. It is built and bundled with the operating system by Apple itself and on Apple's own terms and even ……
85
33C3 talk on dissecting cellular modems
Yesterday, together with Holger 'zecke' Freyther, I co-presented at 33C3 about Dissectiong modern (3G/4G) cellular modems. This presentation covers some of our recent explorations into a specific type
86
Russian ship loitering near undersea cables
**Russian ship loitering near undersea cables** Updated: Original article 9th Oct. 2016. The Russian Navy’s Project 22010 mini-sub host ship Yantar is known for loitering near undersea internet cables (known as Submarine communications Cables - SCC). It may have other special missions also…. Read More >….
87
That Plane Overhead: Starring Our Friends SDR, ADS-B, I2C and KLGA
You may ask yourself, “How did I get here?” - Talking Heads
88
My Experience With the Great Firewall of China
When I recently visited China for the first time,as an InfoSec professional I was very curious to finally be able to poke at theGreatFirewall of China with m...
89
Blocking-resistant communication through domain fronting
David Fifield, University of California, Berkeley Chang Lan, University of California, Berkeley Rod Hynes, Psiphon Inc Percy Wegmann, Brave New Software Vern Paxson, University of California, Berkeley and the International Computer Science Institute