151
Rally, a novel privacy-first data sharing platform
Mozilla teams up with Princeton University researchers to enable crowdsourced science for public good; collaborates with research groups at Princeton, Stan
152
International coalition calls for action against surveillance-based advertising
Groups in Europe and U.S. ask for action to end practices that threaten citizens’ rights.
153
NATO Classified Cloud Platform Compromised
Hackers attempted to use the data in an extortion scheme, joking about altering the source code or sending it to Russian intelligence
154
155
CVE-2021-3011: Key recovery on Google Titan Key
Download the Writeup Illustration made by Romain Flamand Abstract The Google Titan Security Key is a FIDO U2F hardware device proposed by Google (available since July 2018) as a two-factor authentication token to sign in to applications (e.g. your Google account). Our work describes a side-channel attack that targets…
156
macOS 11’s hidden security improvements
A deep dive into macOS 11's internals reveals some security surprises that deserve to be more widely known.
157
New campaign targeting security researchers
Details on an ongoing campaign, which we attribute to a government-backed entity based in North Korea, targeting security researchers working on vulnerability research a…
158
How Iran Uses Bitcoin Mining to Evade Sanctions and “Export” Oil
The US imposes an almost total economic embargo on Iran, including a ban on all Iranian imports and sanctions on Iranian financial institutions.
159
Van Buren is a victory against overbroad interpretations of the CFAA
The Supreme Court’s Van Buren decision today overturned a dangerous precedent and clarified the notoriously ambiguous meaning of “exceeding authorized access” in the Computer Fraud and Abuse Act, the federal computer crime law that’s been misused to prosecute beneficial and important online...
160
Browser Fuzzing at Mozilla
Mozilla has been fuzzing Firefox for a while. It has proven to be one of the most efficient ways to identify quality and security issues.
161
Mozilla rolls out DoH to Canadian users of Firefox
CIRA Joins Firefox’s Trusted Recursive Resolver Program In a few weeks, Firefox will start the by-default rollout of DNS over HTTPS (or DoH for short) to
162
Preparing Rustls for Wider Adoption
It’s time for the Internet to move on to more secure software, and that’s why our Memory Safety Initiative is coordinating work to make further improvements to the Rustls TLS library.
163
EFF's reply to cease-&-desist letter – “Virtual Coachella” parody video
eff_ltr_to_rico_mgmt_re_krazam_llc.pdf
164
165
Claude Shannon: The Mathematical Theory of Cryptography
The foundation of modern cryptography.
166
A deeper dive into our May 2019 security incident
We take a detailed look at a hacking incident that gave a user unauthorized access to our code and data.
167
NodeJS security cheat sheet
Website with the collection of all the cheat sheets of the project.
168
Protected Content, Delete by Date, Device Management and more
Today's update brings tools to prevent others from saving content from groups and channels, the ability to delete messages for specific periods of time, new ways to manage your connected devices, post anonymously in public groups on behalf of your channel and more.
169
Simple Linux kernel memory corruption bug can lead to complete system compromise
An analysis of current and potential kernel security mitigations Posted by Jann Horn, Project ...
170
(Very) Basic Intro to Elliptic Curve Cryptography
Learn cryptography in Go by building ciphers, hashes, password security, and encryption tools. Understand security beneath the library call.
171
Container security best practices: Ultimate guide
Container security is critical as companies use them more often for AI workloads and cloud workloads. Learn about 17 container security best practices here.
172
Intent to issue €2.5M fine to Disqus over GDPR breaches
The Norwegian Data Protection Authority has notified Disqus Inc. (Disqus) that we intend to issue an administrative fine of NOK 25 000 000 for not complying with the GDPR rules on accountability, lawfulness, and transparency.
173
174
The reason Okta spent $6.5B on Auth0
Explore the business drivers behind Okta's acquisition of Auth0, including market positioning, strategic goals, and the future of authentication providers.
175
The Patriot Act Has Threatened Freedom for 20 Years
In passing the PATRIOT Act, Congress enacted a “solution” to preventing another 9/11-like debacle without having any evidence that a lack of surveillance powers was what allowed Osama bin Laden’s suicide hijackers to succeed in killing nearly 3,000 Americans.
176
Briar 1.4 – Offline sharing, message transfer via SD cards and USB sticks
Press release The Briar Project released version 1.4 of its Android app today. This release adds a couple of new features, highlighted below. First of all, users can now share the app offline. Prior to this release, the only way to get the app was to to download it from the internet, which requires an internet…
177
Security keys are now supported for SSH Git operations
You can now use FIDO2 security keys to authenticate over SSH for remote Git operations, providing a higher level of account security.
178
Preparing to Issue 200M Certificates in 24 Hours
On a normal day Let’s Encrypt issues nearly two million certificates. When we think about what essential infrastructure for the Internet needs to be prepared for though, we’re not thinking about normal days. We want to be prepared to respond as best we can to the most difficult situations that might arise. In some of…
179
A bug related to handling of authenticated sessions
On the evening of March 8, we invalidated all authenticated sessions on GitHub.com created prior to 12:03 UTC on March 8 out of an abundance of caution.
180
