181
182
Improved fraud prevention with Radar 2.0
Radar 2.0 improves machine learning performance and reduces fraud by up to an additional 25%.
183
DarkPulsar
After the “Lost in Translation” leak was revealed, we noticed that this leak contained a tool in the “implants” category called DarkPulsar. We analyzed it and understood that it is not a backdoor itself, but the administrative part only.
184
The silent CVE in the heart of Kubernetes apiserver
An overview into CVE-2018-1002105's root cause and a program to test if your clusters are affected
185
Improving DNS Privacy in Firefox
Domain Name Service (DNS) is one of the oldest parts of internet architecture, and remains one that has largely been untouched by efforts to make the web safer and more ...
186
Mozilla Announces Experimental Partnership with ProtonVPN
Mozilla has long played an important role in the online world, and we’re proud of the impact we’ve had. But we want to do even more, and that means exploring ...
187
TSA announces “biometrics vision for all commercial aviation travelers”
Today the US Transportation Security Administration released a detailed TSA Biometric Roadmap for Aviation Security & the Passenger Experience , making explicit the goal of requiring mug shots (to be used for automated facial recognition and image-based surveillance and control) as a condition of all domestic or…
188
An Update on Our Plans to Restrict Data Access on Facebook
Two weeks ago we promised to take a hard look at the information apps can use when you connect them to Facebook as well as other data practices. Today, we want to update you on the changes we're making to better protect your Facebook information.
189
TLS 1.3 Is an Opportunity for Amazon, Google and Microsoft to End Censorship
A new standard for cryptography is on the horizon, called Transport Level Security 1.3 (TLS 1.3). TLS 1.3 is a major update to cryptography, and
190
Digicert Withdraws from the CA Security Council
DigiCert is electing to withdraw from the CA Security Council (CASC) as we believe CASC is moving in a direction that DigiCert does not support. Read more.
191
How I hacked hundreds of companies through their helpdesk (2017)
UPDATE: The Next Web wrote a story about my findings…
192
193
The GDPR blog post
It was about 6 months ago that I was involved in my first GDPR meeting. Other people in our company had obviously been talking about it…
194
DigiCert Statement on Trustico Certificate Revocation
In communications today, Trustico has suggested that the certificate revocation is due to the upcoming Google Chrome distrust of Symantec roots. That is incorrect. DigiCert wants to make it clear that the certificates needed to be revoked because Trustico sent us the private keys; this has nothing to do with future…
195
Kernel RCE in iOS/macOS with ICMP
Today, GitHub code scanning has all of LGTM.com’s key features—and more! The time has therefore come to announce the plan for the gradual deprecation of LGTM.com.
196
197
198
Ransomware as a Service
Ransomware as a Service, Author: Xavier Mertens
199
A 100k Botnet Turns Home Routers to Email Spammers
This article was co-authored by Hui Wang and RootKiter. Since September 2018, 360Netlab Scanmon has detected multiple scan spikes on TCP port 5431, each time the system logged more than 100k scan sources, a pretty large number compared with most other botnets we have covered before. The interaction between the
200
201
Sunsetting Tor Messenger
In 2015, we introduced Tor Messenger, a cross-platform chat program that aimed to be secure by...
202
Requiring secure contexts for all new features
Since Let’s Encrypt launched, secure contexts have become much more mature. We have witnessed the successful restriction of existing, as well as new features to secure contexts. The W3C TAG ...
203
Amazon’s Disturbing Plan to Add Face Surveillance to Your Front Door
Recently, a patent application from Amazon became public that would pair face surveillance — like Rekognition, the product that the company is aggressively marketing to police and Immigration and Customs Enforcement — with Ring, a doorbell camera company that Amazon bought earlier this year.
204
Trustworthy Chrome Extensions, by default
Incredibly, it’s been nearly a decade since we launched the Chrome extensions system. Thanks to the hard work and innovation of our deve...
205
IP address errors lead to wrongful arrests
The Sophos Blog
206
Lawmakers Want to Block Pornography at the Expense of Free Speech and Privacy
More than 15 state legislatures are considering the “Human Trafficking Prevention Act” (HTPA). But don’t let the name fool you: this bill would do nothing to address human trafficking. Instead, it would only threaten your free speech and privacy in a misguided attempt to block and tax online...
207
Privacy not included: Holiday gift list for privacy and security
Privacy Not Included was launched in 2017 to help you understand the privacy risks of tech products that connect to the internet. We are continuing that work in the form of Product Reviews at our magazine Nothing Personal, where our privacy experts do hours of hands-on testing and research on the most popular consumer…
208
209
Protecting Mozilla’s GitHub Repositories from Malicious Modification
At Mozilla, we’ve been working to ensure our repositories hosted on GitHub are protected from malicious modification. As the recent Gentoo incident demonstrated, such attacks are possible. Mozilla’s original usage ...
210