Networking software giant Citrix Systems says malicious hackers were inside its networks for five months between 2018 and 2019, making off with personal and financial data on company employees, contractors, interns, job candidates and their dependents. The disclosure comes almost a year after Citrix acknowledged that…
Starting from the “ones” position, we add 6 + 6 = 12, write down a 2 and carry a 1. We proceed to the left, one position at a time, until there are no more digits to add.
Matrix, the open protocol for secure decentralised communications
This is a story of a convoluted, not-very-useful method for extracting codez from unwitting JavaScript developers working on top secret…
If you work in tech, you probably have a YubiKey. I have this one, the YubiKey 5C Nano:
On November 3rd, 2019, we have reported a critical vulnerability affecting the Android Bluetooth subsystem. This vulnerability has been assigned CVE-2020-0022 and was now patched in the latest security patch from February 2020. The security impact is as follows:
This page was migrated from the old website and has not been manually reviewed, or is here for historical purposes. We make no guarantees that the content is up-to-date or reflects SIPB's current views. Contact sipb-www@mit.edu if anything is broken or you have other questions or feedback.
Baekdal is your premium site for media reports and trend analysis. Subscribe from €7.55/month
Hundreds of thousands of potentially sensitive files from police departments across the United States were leaked online last week. The collection, dubbed “ BlueLeaks ” and made searchable online, stems from a security breach at a Texas web design and hosting company that maintains a number of state law enforcement…
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
Encrypting data at rest is vital for Cloudflare with more than 200 data centres across the world. In this post, we will investigate the performance of disk encryption on Linux and explain how we made it at least two times faster for ourselves and our customers!
[What follows are my thoughts on some recent research in machine learning privacy. These are my thoughts, and do not represent those of others.]
Mass surveillance costs millions of Dollars. Yet, it does not improve security.
Way back in late 2019 , I dissected a Reolink B800 IP camera to demonstrate the various parts of an embedded Linux system. It’s fairly nice hardware, actually—it has a 4K video sensor, a microphone, power over Ethernet, and is nominally waterproof. And yes, it runs Linux.
Websites are scanning for open ports on your PC to help fight fraud, but this data also flows into a massive, global tracking database.
Initial Disclosure: After extensive research, we have taken a short position in shares of Nikola Corp. This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.
In February, KrebsOnSecurity told the story of a private citizen auctioning off the dangerous domain corp.com for the starting price of $1.7 million . Domain experts called corp.com dangerous because years of testing showed whoever wields it would have access to an unending stream of passwords, email and other…
On Monday, Oct. 26, KrebsOnSecurity began following up on a tip from a reliable source that an aggressive Russian cybercriminal gang known for deploying ransomware was preparing to disrupt information technology systems at hundreds of hospitals, clinics and medical care facilities across the United States. Today…
I’ve often said that if we convince ourselves that technology is magic, we risk becoming hostages to it . Just recently, I had a brush with this fate, but happily, I was saved by open source.
The Chromium project finds that around 70% of our serious security bugs are memory safety problems . Our next major project is to prevent such bugs at source.
With a questionable claim to copyright, Jay-Z ordered two deepfake audio parodies of his voice off YouTube. I talked to the video's creator about the future of AI for creative expression.
Linux is not a secure operating system . However, there are steps you can take to improve it. This guide aims to explain how to harden Linux as much as possible for security and privacy. This guide attempts to be distribution-agnostic and is not tied to any specific one. DISCLAIMER: Do not attempt to apply anything in…
Sexuality, relationships and online dating are all rather personal things. They're aspects of our lives that many people choose to keep private or at the very least, share only with people of our choosing. Grindr [https://www.grindr.com/] is "The World's Largest Social Networking App for Gay,
Personal Blog of Christian Haschek
In response to our Cloud Security Punch-Out! videos, Palo Alto Networks sent this cease and desist letter, demanding the comparison be removed. Here is my response.
Self-hosted and privacy-respecting blog software that puts the domain, data, and reader relationship back in your hands. Private alternatives to Medium, vetted since 2015.
A classically trained sysadmin shouting into the void.
