241
242
Analysis of the Alexa Top 1M sites
Prior to the release of the Mozilla Observatory a year ago, I ran a scan of the Alexa Top 1M websites. Despite being available for years, the usage rates of ...
243
244
245
246
Trust Issues: Exploiting TrustZone TEEs
Posted by Gal Beniamini, Project ZeroMobile devices are becoming an increasingly privacy-sensitiv...
247
248
249
ReBreakCaptcha: Breaking Google’s ReCaptcha v2 Using Google
TL;DR A logic vulnerability, dubbed ReBreakCaptcha, which lets you easily bypass Google’s ReCaptcha v2 anywhere on the web. Overview Back in 2016, I started poking around to see how hard it w…
250
251
Yubico announces tiny, cheap YubiHSM 2
Learn more about what's happening within the tech and cybersecurity industry and the developments in our business and security keys within our Yubico Blog.
252
253
Cloudflare Reports Massive Slowdown in Network Level DDoS Attacks
News outlets and blogs will frequently compare DDoS attacks by the volume of traffic that a victim receives. Surely this makes some sense, right? The greater the volume of traffic a victim receives, the harder to mitigate an attack - right?
254
Rediscovering the Intel AMT Vulnerability
On May 1, 2017 Intel disclosed the AMT vulnerability (INTEL-SA-00075), but details of that vulnerability were not made public. However, Tenable researchers were able to overcome this challenge and make Tenable the first to deliver Intel AMT vulnerability detection capabilities to customers, just minutes after Intel’s…
255
256
How Stack Overflow plans to survive the next DNS attack
Let’s talk about DNS. After all, what could go wrong? It’s just cache invalidation and naming things .
257
Aadhaar isn’t progress – it’s dystopian and dangerous
Mitchell Baker and Ankit Gadgil: India should pause further roll out of Aadhaar until a law protecting individual security is passed.
258
259
Learning with Privacy at Scale
Understanding how people use their devices often helps in improving the user experience. However, accessing the data that provides such…
260
OSS-Fuzz: Five months later, and rewarding projects
The latest news from Google on open source releases, major projects, events, and outreach programs for early career developers.
261
Shadow Brokers exploits are patched or inactive on supported Windows platforms
Today, Microsoft triaged a large release of exploits made publicly available by Shadow Brokers. Understandingly, customers have expressed concerns around the risk this disclosure potentially creates. Our engineers have investigated the disclosed exploits, and most of the exploits are already patched. Below is our…
262
Blueborne – A new attack vector endangering major operating systems
Following the disclosure of the BlueBorne attack vector this past September, Armis discovered that critical Bluetooth vulnerabilities impact the Amazon Echo and Google Home.
263
264
Negative Result: Reading Kernel Memory from User Mode
I were going to write an introduction about how important negative results can be. I didn’t. I assume you can figure out for yourself why that is and if not you got all the more reason to read this blog post. If you think it’s trivial why my result is negative, you definitely need to read the blog post.
265
Adguard found 220 sites that launch mining when a user opens their main page
AdGuard is the best way to get rid of annoying ads and online tracking and protect your computer from malware. Make your web surfing fast, safe and ad-free
266
267
Titan in depth: Security in plaintext
While there are no absolutes in computer security, we design, build and operate Google Cloud Platform (GCP) with the goal to protect customers' code and data. We harden our architecture at multiple layers, with components that include Google-designed hardware, a Google-controlled firmware stack, Google-curated OS…
268
EFF Asks Mass. High Court to Require Clear Limits for Searches of Devices
Along with several other advocacy groups, EFF signed on to an amicus brief this week in the case of the Commonwealth of Massachusetts v. James Keown, in support of requiring courts to set pre-search limits on the method of digital searches by law enforcement pursuant to judicially authorized...
269
New TSA Policy May Lead to Increased Scrutiny of Reading Material
The TSA is testing new requirements that passengers remove books and other paper goods from their carry-on baggage when going through airline security. Given the sensitivity of our reading choices, this raises privacy concerns .
270
