301
Apple iMac Pro and Secure Storage
Explore the Duo Blog for expert tips, security insights, and resources to stay updated on the latest in security and access management trends.
302
Vectorized Emulation: fuzzing at 2 trillion instructions per second
This is the introduction of a multipart series. It is to give a high level overview without really deeply diving into any individual component.
303
Qualcomm’s Chain of Trust
Covering Qualcomm bootloader’s up to the point of Android being loaded
304
Reverse engineering Animal Crossing's developer mode
Last summer I began reverse engineering Animal Crossing for the GameCube to explore the possibility of creating mods for the game. I also wanted to document the process to create tutorials for people interested in ROM hacking and reverse engineering. In this post I explore the developer debugging features that are…
305
Removing Bad Actors on Facebook
We removed 32 Pages and accounts from Facebook and Instagram because they were involved in coordinated inauthentic behavior.
306
UK intelligence agency admits unlawfully spying on Privacy International
Thames House, Offices of MI5. Photo Credit: Wikimedia Commons
307
Australia’s Proposed Surveillance Laws Will Break the Trust Tech Depends On
In the last few years, we’ve discovered just how much trust — whether we like it or not — we have all been obliged to place in modern technology. Third-party software, of unknown composition and security, runs on everything around us: from the phones we carry around, to the smart devices with...
308
309
MacOS Caches Data from Encrypted Hard Drives
apple's 'quicklook' cache, may leak encrypted data
310
311
Vendors, Disclosure, and a bit of WebUSB Madness
Update 2018-06-19: Yubico updated their statement on 2018-06-18, apologizing and crediting us: https://twitter.com/Yubico/status/1008816076610625536
312
Address Verification and Full PGP Support
Address Verification allows you to be sure you are securely communicating with the right person, while PGP support adds encrypted email interoperability.
313
314
315
Making Light of the “Dark Web”
I'll start this post where I start many of my talks - what does a hacker look like? Or perhaps more specifically, what do people think a hacker looks like? It's probably a scary image, one that's a bit mysterious, a shady character lurking in the hidden depths
316
Potential Impact of Spectre on Processors in the Power family
View, search and download security bulletin information for individual IBM product versions and releases.
317
Tor Browser 8.0 released
We gave the world’s most private browsing experience a UX overhaul.
318
319
The Power to Revoke Lies with the Certificate Authority
For those that read my blog often you may have seen me talk about EV certificates before. From a technical perspective there are many things that I don't agree with about EV certificates and from a non-technical perspective there are many things I don't like about the
320
APFS encrypted plaintext password found in another log file
UPDATE: PLEASE HELP ME TEST At some point you just need to stop looking and be blissfully ignorant...this was not one of those days. In and update to my previously updated blog article , I have found another instance where the plaintext password was written to system logs. Thi
321
Improved fraud prevention with Radar 2.0
Radar 2.0 improves machine learning performance and reduces fraud by up to an additional 25%.
322
DarkPulsar
After the “Lost in Translation” leak was revealed, we noticed that this leak contained a tool in the “implants” category called DarkPulsar. We analyzed it and understood that it is not a backdoor itself, but the administrative part only.
323
Someone used my IPFS gateway for phishing
At 02:43 this morning, I received an abuse complaint email. It was sent by PhishLabs to DigitalOcean, and DigitalOcean forwarded it to me.
324
The silent CVE in the heart of Kubernetes apiserver
An overview into CVE-2018-1002105's root cause and a program to test if your clusters are affected
325
326
Improving DNS Privacy in Firefox
Domain Name Service (DNS) is one of the oldest parts of internet architecture, and remains one that has largely been untouched by efforts to make the web safer and more ...
327
Mozilla Announces Experimental Partnership with ProtonVPN
Mozilla has long played an important role in the online world, and we’re proud of the impact we’ve had. But we want to do even more, and that means exploring ...
328
TSA announces “biometrics vision for all commercial aviation travelers”
Today the US Transportation Security Administration released a detailed TSA Biometric Roadmap for Aviation Security & the Passenger Experience , making explicit the goal of requiring mug shots (to be used for automated facial recognition and image-based surveillance and control) as a condition of all domestic or…
329
An Update on Our Plans to Restrict Data Access on Facebook
Two weeks ago we promised to take a hard look at the information apps can use when you connect them to Facebook as well as other data practices. Today, we want to update you on the changes we're making to better protect your Facebook information.
330
TLS 1.3 Is an Opportunity for Amazon, Google and Microsoft to End Censorship
A new standard for cryptography is on the horizon, called Transport Level Security 1.3 (TLS 1.3). TLS 1.3 is a major update to cryptography, and