1
Announcing the first SHA-1 collision
Posted by Marc Stevens (CWI Amsterdam), Elie Bursztein (Google), Pierre Karpman (CWI Amsterdam), Ange Albertini (Google), Yarik Markov (Goog...
2
3
What Happens When You Send a Zero-Day to a Bank?
THIS POST MOVED TO MY NEW BLOG AT https://blog.phor.net/how-to-zero-day-a-bank
4
Keybase launches encrypted Git
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
5
Taking control of all .io domains with a targeted registration
A Hacker's Blog of Unintended Use and Insomnia.
6
US telcos appear to be selling non-anonymized access to consumer telephone data
https://bit.ly/crazymobiledemo
7
8
9
10
There is no WhatsApp 'backdoor'
Today, The Guardian published a story falsely claiming that WhatsApp’s end-to-end encryption contains a “backdoor.”
11
1Password Travel Mode: Protect your data when crossing borders
Travel Mode protects your 1Password data from unwarranted searches when you travel. Find out how – and why — to use it.
12
Do you need a VPN?
Early this year, the U.S. Congress rolled back Internet privacy rules, giving service providers free reign to track, store and sell browsing data. In July,
13
I Had My Electronics Seized by U.S. Customs and Border Protection
After my trip in Hamburg, Germany, for the 33rd Chaos Communication Congress, I left Germany for t
14
Chrome 56 will mark HTTP pages with password fields as non-secure
Posted by Emily Schechter, Chrome Security Team [Updated on 12/5/16 with instructions for developers] Developers : Read more about how to ...
15
The New York Times Is Now Available as a Tor Onion Service
Updated: March 4, 2025
16
17
iOS Privacy: Easily get a user's Apple ID password, just by asking
I work with U.S. law firms as a non-testifying technical consulting expert on matters involving the Apple platform and iOS apps. Learn more about my litigation consulting.
18
Avoid Non-Microsoft Antivirus Software
Robert O'Callahan. Christian. Kiwi. Software guy. All content human-authored unless otherwise noted.
19
Wildcard Certificates Coming January 2018
Update, March 13, 2018 Wildcard certificate support is live. Let’s Encrypt will begin issuing wildcard certificates in January of 2018. Wildcard certificates are a commonly requested feature and we understand that there are some use cases where they make HTTPS deployment easier. Our hope is that offering wildcards…
20
Firefox Multi-Account Containers
Our new Multi-Account Containers extension for Firefox means you can finally wrangle multiple email/social accounts. Maybe you’ve got two Gmail or Instag
21
Tracking friends and strangers using WhatsApp
You and your good buddy, Steve Steveington, are in training for an arduous charity walk. You signed up together on the spur of the moment and pledged to hold each other accountable whilst you got in shape for the big day. However, you have developed reason to suspect that Steve Steveington is losing his commitment to…
22
23
24
Post a boarding pass on Facebook, get your account stolen
Article removed for legal reasons, sorry. After receiving a Czech version of a cease and desist letter from a legal representative of A. F., I've removed the article. You'll find articles based on my story in “Recommended reading” below, go read them.
25
Accessing Publicly Available Information on the Internet Is Not a Crime
EFF is fighting another attempt by a giant corporation to take advantage of our poorly drafted federal computer crime statute for commercial advantage—without any regard for the impact on the rest of us. This time the culprit is LinkedIn. The social networking giant wants violations of its...
26
27
Password Rules Are Bullshit
Of the many, many, many bad things about passwords, you know what the worst is? Password rules. Let this pledge be duly noted on the permanent record of the Internet. I don’t know if there’s an afterlife, but I’ll be finding out soon enough, and I plan
28
29
Malware identified in CCleaner 5.33
Update 9/18: CCleaner Cloud version 1.07.3191 is also reported to be affected Update 9/19: This issue was discovered and reported by both Morphisec and Cisco in separate in-field cases and reported separately to Avast. Update 9/19: There has been some confusion on how the
30
Chaos Computer Clubs Breaks Iris Recognition System of the Samsung Galaxy S8
Biometric authentication systems – again – don’t deliver on their security promise: The iris recognition system of the new Samsung Galaxy S8 was successfully defeated by hackers of the Chaos...