1
Amazon's customer service backdoor
As a security conscious user who follows the best practices like: using unique passwords, 2FA, only using a secure computer and being able…
2
3
Defending Our Brand
Update, June 24 2016 We have confirmed that Comodo submitted Requests for Express Abandonment for all three trademark registration applications in question. We’re happy to see this positive step towards resolution, and will continue to monitor the requests as they make their way through the system. We’d like to thank…
4
The Dropbox hack is real
Earlier today, Motherboard reported on what had been rumoured for some time, namely that Dropbox had been hacked [http://motherboard.vice.com/read/hackers-stole-over-60-million-dropbox-accounts] . Not just a little bit hacked and not in that "someone has cobbled together a list of credentials that work
5
6
WhatsApp's Signal Protocol integration is now complete
At Open Whisper Systems, our goal is to make private communication simple. A year ago, we announced a partnership with WhatsApp and committed to integrating the Signal Protocol into their product, moving towards full end-to-end encryption for all of their users by default. Over the past year, we...
7
NSO Group's iPhone Zero-Days used against a UAE Human Rights Defender
Ahmed Mansoor was targeted by NSO Group, an Israel-based “cyber war” company that sells Pegasus, a government-exclusive “lawful intercept” spyware product.
8
9
How Dropbox Hacks Your Mac
Update: Dropbox hack blocked by Apple in Sierra Following my post revealing Dropbox’s Dirty Little Security Hack a few weeks ago, I thought I’d look deeper into how Dropbox was getti…
10
“PayPal has demanded that we monitor data traffic as well as customers’ files”
Seafile is an open source, self-hosted file sync and share solution with high performance and reliability. Sync, access, and collaborate on files on your own server or private cloud.
11
Yahoo installed a backdoor for the NSA behind the back of the security team
[Update (12/14/16): Reuters has specified that the rootkit was implemented as a Linux kernel module. Wow.]
12
LastPass autofill exploit
Mathias Karlsson decided to check out the security of the LastPass browser extensions. Here's what he found.
13
The “Cobra Effect” that is disabling paste on password fields
Back in the day when the British had a penchant for conquering the world, they ran into a little problem on the subcontinent; cobras. Turns out there were a hell of a lot of the buggers wandering around India and it also turned out that they were rather venomous which
14
Leaving Beta, New Sponsors
Let’s Encrypt is leaving beta today. We’re also excited to announce that founding sponsors Cisco and Akamai have renewed their Platinum sponsorships with 3-year commitments, Gemalto is joining as our newest Gold sponsor, and HP Enterprise, Fastly, Duda and ReliableSite.net are our newest Silver sponsors. Since our…
15
Trackers
A couple of weeks ago I went to the local shopping centre looking for a thermometer. After entering one store upon leaving without buying anything a tracker was assigned to me. I didn’t think much of it at first, but he followed me dutifully around the shopping centre, took careful note of how I walked. Whenever I…
16
17
How I Hacked Facebook and Found Someone's Backdoor Script
Bug Bounty Hunting from Pentest View, and How to Find Remote Code Execution and Someone's Backdoor on Facebook Server...
18
Grand jury subpoena for Signal user data
In the “first half of 2016” (the most specific we’re permitted to be), we received a subpoena from the Eastern District of Virginia. The subpoena required us to provide information about two Signal users for a federal grand jury investigation. We’ve designed the Signal service to minimize the dat...
19
20
21
22
One of the FBI’s Major Claims in the iPhone Case Is Fraudulent
“We have enormous computing power in the US government, but we need to be able to bring it to bear without the phone killing itself.” – FBI Director James Comey, March 1 , 2016.
23
I'm giving up on PGP
After years of wrestling GnuPG with varying levels of enthusiasm, I came to the conclusion that it’s just not worth it, and I’m giving up. At least on the concept of long term PGP keys.
24
No More Deceptive Download Buttons
Posted by Lucas Ballard, Safe Browsing Team In November , we announced that Safe Browsing would protect you from social engineering attack...
25
Why privacy is important, and having “nothing to hide” is irrelevant
The governments of Australia, Germany, the UK and the US are destroying your privacy. Some people don't see the problem...
26
27
What It Costs to Run Let's Encrypt
Today we’d like to explain what it costs to run Let’s Encrypt. We’re doing this because we strive to be a transparent organization, we want people to have some context for their contributions to the project, and because it’s interesting. Let’s Encrypt will require about $2.9M USD to operate in 2017. We believe this is…
28
29
30
Exposing high-end poker cheating devices
This post exposes how real-world highly advanced poker cheating devices work.