211
212
213
Xerox Alto zero-day: cracking disk password protection on a 45 year old system
We've been archiving a bunch of old Xerox Alto disk packs from the 1970s. A few of them turned out to be password-protected, so I needed ...
214
215
216
217
Bypassing website anti-scraping protections
Apify help & support
218
Things you must know before you can understand Meltdown as a developer
Meltdown is a cache-timing attack on Intel CPUs that allows all memory to be read by any process because of how they do Speculative Execution.
219
Windows NTFS Tricks Collection
In this blog post René Freingruber (@ReneFreingruber) from the SEC Consult Vulnerability Lab shares different filesystem tricks which were collected over the last years from various blog posts or found by himself.
220
Security Begins at the Home Router
In recent days, the VPNFilter malware has attracted attention, much of it in the wake of a May 25 public service announcement from the FBI, as well as a number of announcements from vendors and security companies....
221
222
Breaking the Ledger Security Model
In this post, I’m going to discuss a vulnerability I discovered in Ledger hardware wallets. The vulnerability arose due to Ledger’s use of a custom architecture to work around many of the limitations of their Secure Element.
223
224
Homeland Security’s New Database to Include Faces, DNA, and Relationships
So why do we know so little about it?The U.S. Department of Homeland Security (DHS) is quietly building what will likely become the largest database of biometric and biographic data on citizens and foreigners in the United States. The agency’s new Homeland Advanced Recognition Technology (HART)...
225
226
227
228
Hash-based Signatures: An illustrated Primer
Over the past several years I’ve been privileged to observe two contradictory and fascinating trends. The first is that we’re finally starting to use the cryptography that researchers h…
229
230
Introducing the Librem Key
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
231
Meltdown Initial Performance Regressions
KPTI/KAISER Meltdown Initial Performance Regressions
232
233
Keybase’s browser extension subverts its encryption
The Keybase browser extension subverts the app's end-to-end encryption. Keybase considers that "an acceptable risk" and not worth fixing.
234
EFF Sues to Invalidate FOSTA, an Unconstitutional Internet Censorship Law
We are asking a court to declare the Allow States and Victims to Fight Online Sex Trafficking Act of 2017 (“FOSTA”) unconstitutional and prevent it from being enforced. The law was written so poorly that it actually criminalizes a substantial amount of protected speech and, according to experts,...
235
The Lie Behind the Lie Detector
5th Edition of The Lie Behind the Lie Detector Released
236
237
Shutting Down the BGP Hijack Factory
Oracle Blog
238
Attacking Merkle Trees with a second preimage attack
Hacking, hardware, software, and general curiosities of computing machinery! Docendo discumus.
239
Meltdown and Spectre Linux Kernel Status
I keep getting a lot of private emails about my previous post about the latest status of the Linux kernel patches to resolve both the Meltdown and …
240
Removing Old Versions of TLS
In March of 2020, Firefox will remove support for TLS 1.0 and TLS 1.1.