Daily Security News
PacketStorm
Millions Of Golfers Land In Privacy Hazard After Cloud Misconfig new- Team Viewer Hit By Chinese Hackers In 2016 new
- Huawei Faces Break With UK Chip Giant ARM new
- Google G Suite Glitch Left Some Passwords Stored In Plain Text For 14 Years new
- Unsecure Chtrbox AWS Database Exposes Data On 49 Million Instagram Influencers, Accounts
- Huawei's Microchip Vulnerability Explained
- Linux Variant Of Winnti Malware Spotted In Wild
- Baltimore Ransomware Nightmare Could Last Weeks More
- Trump's U.S. Golf Association Account Got Hacked
- Instagram Hacker Forum Gets Hacked By Hackers
- Slack Bug Allows Remote File Hijacking, Malware Injection
- Over 20k Linksys Routers Leak Every Device Ever Connected
The Register
- US Air Force probes targeted malware attack, blames... er, the US Navy? What? new
- Bug-hunter reveals another 'make me admin' Windows 10 zero-day – and vows: 'There's more where that came from'
- G Suite'n'sour: Google resets passwords after storing some unhashed creds for months, years
- iPhone gyroscopes, of all things, can uniquely ID handsets on anything earlier than iOS 12.2
- Sophos tells users to roll back Microsoft's Patch Tuesday run if they want PC to boot
- Boeing admits 737 Max sims didn't accurately reproduce what flying without MCAS was like
- Let adware be treated as malware, Canuck boffins declare after breaking open Wajam ad injector
- CIA traitor spy thrown in the clink for selling secrets to China. Stack Overflow, TeamViewer admit: We were hacked...
- Giga-hurts radio: Terrorists build Wi-Fi bombs to dodge cops' cellphone jammers
- It's not chicken feed: Million-dollar meal deal for livestock sabotaged by hackers... and, er, exchange rates
- Get out of Huawei, it's an avalanche of news from everyone's favourite Chinese bogeyman
- Good heavens, is it time to patch Cisco kit again? Prime Infrastructure root privileges hole plugged
Reddit - NetSec
- Love is in the air: Reverse Engineering a shitty drone :: EzequielTBH Blog's new
- How to Create a Malware Detection System With Machine Learning new
- Multithreaded powershell script to exfiltrate data securely new
- Write-up | WD My Cloud RCE new
- No, 2FA Does Not Stop Credential Stuffing Attacks new
- Fuzz a WebSocket with the Python Kitty Fuzzing Framework (OWASP ZAP didn't work for this case) new
- Introducing py-ews: A cross-platform Python package to interact with eDiscovery endpoints using Exchange Web Services for Exchange 2010 to 2019 and Office 365 new
- New Windows 10 zero-day gets published to Github by SandboxEscaper new
- Building backdoors for Apache (PoC inside with socks5 support, root shell, hiding logs...) new
- Sophisticated Phishing Using Homograph Attacks new
- My first professional article: "Static Code Analysis — A Personal Research Story" new
- Possible Windows 10 Zero Day LPE PoC Code Released new
Bleeping Computer
- Google Tracks Purchases For Paying G Suite Users, Doesn’t Show It new
- GetCrypt Ransomware Brute Forces Credentials, Decryptor Released new
- You're Not At Fault, Google Search Tripped and Broke Its Index new
- BestMixer.io Service Shut Down For Laundering $200 Million+ new
- Volume of Signed Malware Increases, CAs Need Better Vetting new
- Researchers Demo PoC For Remote Desktop BlueKeep RCE Exploit new
- Zebrocy Operators Also Look for Browser and Email Databases new
- New Zero-Day Exploit for Bug in Windows 10 Task Scheduler
- Google Stored Unhashed G Suite Passwords for Over a Decade
- Tor Browser 8.5 for Android Released On The Google Play Store
- JSWorm 2.0 Ransomware Decryptor Gets Your Files Back For Free
- Hackers Steal Payment Card Data Using Rogue Iframe Phishing
Threat Wire
Exploits
Packet Storm Exploits
- Blue Prism Robotic Process Automation (RPA) Privilege Escalation new
- Microsoft Windows Task Scheduler .job Import Arbitrary DACL Write new
- WordPress Memphis Documents Library 3.9.19 Cross Site Request Forgery
- WordPress Inkblot Theme 4.9.10 Cross Site Request Forgery
- FreeBSD rtld execl() Privilege Escalation
- Mac OS X Feedback Assistant Race Condition
- Shopware createInstanceFromNamedArguments PHP Object Instantiation
- XNU Stale Pointer Use-After-Free
- Visual Voicemail For iPhone IMAP NAMESPACE Use-After-Free
- Darktrace Enterpise Immune System 3.0.9 / 3.0.10 Cross Site Request Forgery
- XNU stf_ioctl Bad Cast
- Microsoft Windows CmKeyBodyRemapToVirtualForEnum Arbitrary Key Enumeration
Exploit-DB Webapps
- [webapps] Moodle Jmol Filter 6.1 - Directory Traversal / Cross-Site Scripting
- [webapps] eLabFTW 1.8.5 - Arbitrary File Upload / Remote Code Execution
- [webapps] Interspire Email Marketer 6.20 - 'surveys_submit.php' Remote Code Execution
- [webapps] DeepSound 1.0.4 - SQL Injection
- [webapps] CommSy 8.6.5 - SQL injection
- [webapps] Legrand BTicino Driver Manager F454 1.0.51 - Cross-Site Request Forgery / Cross-Site Scripting
- [webapps] D-Link DWL-2600AP - Multiple OS Command Injection
- [webapps] Sales ERP 8.1 - Multiple SQL Injection
- [webapps] PasteShr 1.6 - Multiple SQL Injection
- [webapps] Schneider Electric U.Motion Builder 1.3.4 - 'track_import_export.php object_id' Unauthenticated Command Injection
- [webapps] SOCA Access Control System 180612 - Information Disclosure
- [webapps] SOCA Access Control System 180612 - Cross-Site Request Forgery (Add Admin)
Exploit-DB Local and Privilege Escalation
- [local] Solaris 10 1/13 (Intel) - 'dtprintinfo' Local Privilege Escalation
- [local] Solaris 7/8/9 (SPARC) - 'dtprintinfo' Local Privilege Escalation (1)
- [local] Huawei eSpace 1.1.11.103 - DLL Hijacking
- [local] Solaris 7/8/9 (SPARC) - 'dtprintinfo' Local Privilege Escalation (2)
- [local] Iperius Backup 6.1.0 - Privilege Escalation
- [local] JetAudio jetCast Server 2.0 - 'Log Directory' Local SEH Alphanumeric Encoded Buffer Overflow
- [local] VMware Workstation 15.1.0 - DLL Hijacking
- [local] MiniFtp - 'parseconf_load_setting' Buffer Overflow
- [local] Admin Express 1.2.5.485 - 'Folder Path' Local SEH Alphanumeric Encoded Buffer Overflow
- [local] NSClient++ 0.5.2.35 - Privilege Escalation
- [local] DeviceViewer 3.12.0.1 - 'user' SEH Overflow
- [local] Lavavo CD Ripper 4.20 - 'License Activation Name' Buffer Overflow (SEH)
Exploit-DB DoS
- [dos] Huawei eSpace 1.1.11.103 - 'ContactsCtrl.dll' / 'eSpaceStatusCtrl.dll' ActiveX Heap Overflow
- [dos] Encrypt PDF 2.3 - Denial of Service (PoC)
- [dos] docPrint Pro 8.0 - Denial of Service (PoC)
- [dos] PCL Converter 2.7 - Denial of Service (PoC)
- [dos] BulletProof FTP Server 2019.0.0.50 - 'DNS Address' Denial of Service (PoC)
- [dos] AbsoluteTelnet 10.16 - 'License name' Denial of Service (PoC)
- [dos] BulletProof FTP Server 2019.0.0.50 - 'Storage-Path' Denial of Service (PoC)
- [dos] Huawei eSpace 1.1.11.103 - Image File Format Handling Buffer Overflow
- [dos] Huawei eSpace Meeting 1.1.11.103 - 'cenwpoll.dll' SEH Buffer Overflow (Unicode)
- [dos] Sandboxie 5.30 - 'Programs Alerts' Denial of Service (PoC)
- [dos] CEWE Photoshow 6.4.3 - 'Password' Denial of Service (PoC)
- [dos] CEWE Photo Importer 6.4.3 - '.jpg' Denial of Service (PoC)
Exploit-DB Shellcode
- [shellcode] Linux x86_64 - Delete File Shellcode (28 bytes)
- [shellcode] Linux/x86 - /sbin/iptables -F Shellcode (43 bytes)
- [shellcode] Linux/x86 - execve /bin/sh Shellcode (20 bytes)
- [shellcode] Linux/x86 - Multiple keys XOR Encoder / Decoder execve(/bin/sh) Shellcode (59 bytes)
- [shellcode] Linux/x86 - shred file Shellcode (72 bytes)
- [shellcode] Linux/x86 - Reverse Shell Shellcode (91 Bytes) + Python Wrapper
- [shellcode] Linux/x86 - Openssl Encrypt Files With aes256cbc Shellcode (185 bytes)
- [shellcode] Linux/x86 - Rabbit Shellcode Crypter (200 bytes)
- [shellcode] Linux/ARM - Password-Protected Reverse TCP Shellcode (100 bytes)
- [shellcode] Linux/x86 - MMX-PUNPCKLBW Encoder Shellcode (61 bytes)
- [shellcode] Linux/x86 - Cat File Encode to base64 and post via curl to Webserver Shellcode (125 bytes)
- [shellcode] Linux/x86 - Add User (sshd/root) to Passwd File Shellcode (149 bytes)
Exploit-DB Papers
Exploit-DB Remote
- [remote] Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass) new
- [remote] GetSimpleCMS - Unauthenticated Remote Code Execution (Metasploit)
- [remote] PHP-Fusion 9.03.00 - 'Edit Profile' Remote Code Execution (Metasploit)
- [remote] Lotus Domino 8.5.3 - 'EXAMINE' Stack Buffer Overflow DEP/ASLR Bypass (NSA's EMPHASISMINE)
- [remote] PostgreSQL 9.3 - COPY FROM PROGRAM Command Execution (Metasploit)
- [remote] Oracle Weblogic Server - 'AsyncResponseService' Deserialization Remote Code Execution (Metasploit)
- [remote] Google Chrome 72.0.3626.119 - 'FileReader' Use-After-Free (Metasploit)
- [remote] Xitami Web Server 2.5 - Remote Buffer Overflow (SEH + Egghunter)
- [remote] LG Supersign EZ CMS - Remote Code Execution (Metasploit)
- [remote] Windows PowerShell ISE - Remote Code Execution
- [remote] Blue Angel Software Suite - Command Execution
- [remote] Ruby On Rails - DoubleTap Development Mode secret_key_base Remote Code Execution (Metasploit)
Hak5
Vulnerabilities
Security Focus Vulnerabilities
- More rss feeds from SecurityFocus new
- Bugtraq: [SECURITY] [DSA 4267-1] kamailio security update new
- Bugtraq: [CVE-2018-12584] Heap overflow vulnerability in reSIProcate through 1.10.2 new
- Bugtraq: [SECURITY] [DSA 4268-1] openjdk-8 security update new
- Bugtraq: [SECURITY] [DSA 4269-1] postgresql-9.6 security update new
- Vuln: Intel Microarchitectural Data Sampling Multiple Local Information Disclosure Vulnerabilities
- Vuln: Siemens SIMATIC Products ICSA-19-134-08 Multiple Security Vulnerabilities
- Vuln: Apache Camel CVE-2019-0188 XML External Entity Injection Vulnerability
- Vuln: Mozilla Firefox/Thunderbird/Firefox ESR Multiple Security Vulnerabilities
- Vuln: Mitsubishi Electric MELSEC-Q Series PLCs CVE-2019-10977 Remote Denial of Service Vulnerability
- Vuln: Mozilla Firefox Multiple Security Vulnerabilities
- Vuln: Linux Kernel CVE-2018-7191 Local Denial of Service Vulnerability
Bugtraq
- [SYSS-2019-002] Blue Prism Robotic Process Automation (RPA) - Privilege Escalation new
- [slackware-security] mozilla-firefox (SSA:2019-141-01) new
- [REVIVE-SA-2019-002] Revive Adserver Vulnerability
- CSRF in Darktrace Enterprise Immune System <=3.0.10
- WebKitGTK and WPE WebKit Security Advisory WSA-2019-0003
- Advisory: security controls configured in php.ini could be bypassed on Linux
- Emerson Network Power Cross Site Scripting(XSS) Vulnerability
- local privilege escalation via CDE dtprintinfo
- [RT-SA-2019-002] Directory Traversal in Cisco Expressway Gateway
- [slackware-security] rdesktop (SSA:2019-135-01)
- FreeBSD Security Advisory FreeBSD-SA-19:07.mds [REVISED]
- FreeBSD Security Advisory FreeBSD-SA-19:07.mds
Full Disclosure
- Emerson Network Power Cross Site Scripting(XSS) Vulnerability
- Blackhole for Bad Bots WordPress Plugin 2.5 - Detection Bypass
- Epic Web Honeypot 2.0a - Fingerprinting Vulnerability
- Re: GAT-Ship Web Module >1.30 - Unauthenticated Information Disclosure Vulnerability
- local privilege escalation via CDE dtprintinfo
- [CVE-2019-11880] CommSy <= 8.6.5 - SQL injection
- GAT-Ship Web Module >1.30 - Unauthenticated Information Disclosure Vulnerability
- [RT-SA-2019-002] Directory Traversal in Cisco Expressway Gateway
- SEC Consult SA-20190515-0 :: Authorization Bypass in RSA NetWitness (@sec_consult)
- [CVE-2018-7841] Schneider Electric U.Motion Builder <= 1.3.4 track_import_export.php object_id Unauthenticated Command Injection
- Re: System Down: A systemd-journald exploit
- APPLE-SA-2019-5-13-5 Safari 12.1.1
Tools
CyberPunk nowhere.net
- NSA Software Reverse Engineering Framework: Ghidra
- Semi-Automated Network Penetration Testing Framework: Legion
- Graphical User Interface for Metasploit Meterpreter and Session Handler: Kage
- Automated Dynamic Application Penetration Testing: ADAPT
- Scalable Fuzzing Infrastructure: ClusterFuzz
- Target Reconnaissance Framework: Pown Recon
- Post-Exploitation Framework for Linux Written in Bash: Orc
- Securely and Anonymously Send and Receive Files: OnionShare
- Flexible and Powerful Reverse Proxy: Modlishka
- A Framework for Secure and Scalable Network Traffic Analysis: Netcap
- Phishing Campaign Toolkit: King Phisher
Reversing/I like ASM
Reddit - Reverse Engineering
- [Squally] - New Mini-Game to Teach x86/x64 Registers, Pointers, Segfaults, Addressing new
- Decompiling Binaries into LLVM IR Using McSema and Dyninst new
- 16Shop: Commercial Phishing Kit Has A Hidden Backdoor
- Get full visibility into Windows 10 OS' boot mechanisms from UEFI to Kernel with timeless analysis technology.
- Exploiting CVE-2019-0752 without shellcode - details of a write-what-where vulnerability in IE (with PoC)
- Sojobo - Yet another binary analysis framework
- Recent MuddyWater-associated BlackWater campaign shows signs of new anti-detection techniques
- Here is the third installment in my ghidra tutorial series. This is about solving an intermediate crackme
- Basic disassembly with libopcodes
- Reverse engineering Colony Wars Playstation models
- Reverse engineering and bypassing exam surveillance software
- Reversing Golang Binaries: Part-2
Reddit - Exploit Dev
- Crash from fuzzing. Next steps?
- Need help to bypass stack cookie
- Some help with ROPemporium?
- Books on ROP?
- CVE-2018-18500: Write-after-free vulnerability in Firefox, analysis and exploitation
- How to dev exploit kit
- CVE-2019-9810/CVE-2019-9813: The Story of Two Winning Pwn2Own JIT Vulnerabilities in Mozilla Firefox
- Generating shellcode’s on the fly with pwntools
- On Eggs and Egg-hunters (Linux/x64) - @syscall59
- What's the job like?
- Anyone here doing Corelan Exploit Dev training this year or done it previously?
- Heap Exploitation Part 2: Understanding the Glibc Heap Implementation
Reddit - REGames
- Call internal function on key press new
- Any general steps/tips for RE an online game client to get a server code?
- Want to decompile some of my old Game Maker 4 games
- Modifying executable file with hex editor
- need help reverse engineering
- Need help with Heat Online aka Project Torque aka Level R
- Not sure where to start decompiling a game.
- Where to find tutorials on game hacking?
- Does anyone have knowledge how to deobfuscate these game files? And create a tool to extract?
- ''Extracting'' PS1 Games' 3D models with debugger ripped polygon data, help needed.
- Question about creating custom XWB files for a game that uses DirectX 9
- Extract sprite sheet from java game
StackExchange - ReverseEngineering
- Is this a trap? new
- How to export to *.so file after patching in ghidra new
- x86 shellcode leads to segmentation fault new
- Translating a Korean Exclusive PS2 game ~ hangeul encoding?
- All referenced strings using ollydbg
- Which file system is this? file type 0x00, folder type 0x01
- GetProcAddress with 0 as lpProcName
- Which decoding is used by x32dbg durring debuging a file?
- C# exe program decrypt
- Find out if address store in heap or stack
- How does holdem indicator know that I play with real money on PokerStars? [on hold]
- convert C assembly to pseudocode
Metasploit Minute
Malware/APT
Reddit - Malware
- Objective by the sea v2 sponsored by Malware AiroAV new
- AiroAV - Antivirus by malware company
- Obtaining Malware Signature Database
- Linux variant of Winnti malware spotted in wild
- I wasn't eligible for bug bounty.
- Machine Learning on MIST data
- Can a malware written in a new programming language again affect the effectiveness of an antivirus?
- Image XSS Payload Using Python
- Fake Game of Thrones Video Files Embedded with Malware
- Banking malware in latest release of Fing network discovery app for android.
- M is for Malware Children's Book!
- want to know if this is safe
Unit42
- New Python-based payload MechaFlounder used by Chafer
- Farseer: Previously Unknown Malware Family bolsters the Chinese armoury
- Multiple ArtraDownloader Variants Used by BITTER to Target Pakistan
- Unit 42 Vulnerability Research Team Discovers 23 New Vulnerabilities February 2019 Disclosures – Adobe and Microsoft
- New BabyShark Malware Targets U.S. National Security Think Tanks
FireEye Threat Research
- APT39: An Iranian Cyber Espionage Group Focused on Personal Information
- Bypassing Network Restrictions Through RDP Tunneling
- Cryptocurrency and Blockchain Networks: Facing New Security Paradigms
- A Nasty Trick: From Credential Theft Malware to Business Disruption
- Global DNS Hijacking Campaign: DNS Record Manipulation at Scale
- Digging Up the Past: Windows Registry Forensics Revisited
- OVERRULED: Containing a Potentially Destructive Adversary
- What are Deep Neural Networks Learning About Malware?
- FLARE Script Series: Automating Objective-C Code Analysis with Emulation
- Obfuscated Command Line Detection Using Machine Learning
Crypto
Reddit - Crypto
- Why is encryption so much faster than compression? new
- On Verifiable Delay Functions - How to Slow Burning the Planet Down (Verifiably) new
- Difference between a MIC and PTK
- how are repeated IV's used to crack the key?
- WEP and its keysize
- twitter drama: a peek into how systemd does randomness
- How Do I Verify The Signature From This Situation?
- Hi everyone! May i ask how can i learn cryptography from scratch online (and for free)? Thanks! And i`m sorry bother you
- 079104032119111119046046046032073039109032115111032105109112114101115115101100
- Formatter Free - The hub for free online encoding, cryptographic tools: Base64, MD5, SHA1, SHA256, SHA512...
- RSA factorization . What is the computational complexity?
- Using ED25519 signing keys for encryption
StackExchange - Crypto
- RSA Decryption, given $n$, $c$, and $e$ new
- Signing a message using SPHINCS Hash-based Signature scheme new
- RSA and possible range of $phi(n)$ new
- Binary Cryptography Problem [on hold] new
- Is it possible to verify the requesting user for a REST transaction secured by JWT at a later date? new
- Does lagrange interpolation work with points in an elliptic curve? new
- EC Key Compression new
- How to guess the algorithm used in cryptography? new
- How to securely store encryption keys in android? [migrated] new
- How to encrypt data when send over https new
- What makes the quadratic residuosity problem hard?
- Algorithm of Mixed Lopez Dahab-Affine Point Addition for Binary Elliptic Curves
Podcasts
Security Weekly
- May 21, 2019 – Hack Naked News #219
- Application News – Application Security Weekly #62
- Cody Wood, Signal Sciences – Application Security Weekly #62
- Leadership Articles – Business Security Weekly #129
- Discovering Applications, Netsparker – Business Security Weekly #129
- Singapore, Cisco, and Israeli Spyware – Paul’s Security Weekly #604
- Fixing Identity and Access Management – Paul’s Security Weekly #604
- Julian Zottl, Raytheon – Paul’s Security Weekly #604
- SysDig, In-Q-Tel, NextGen, & SIEM – Enterprise Security Weekly #137
- Centralization of Web Security, Netsparker – Enterprise Security Weekly #137
- Firewalls, Paul Asadoorian – Enterprise Security Weekly #137
- WhatsApp, Linux Kernel, & Marcin Szary – Hack Naked News #218
Risky.Biz
- Risky Business #542 -- Confusion reigns over Huawei ban
- Risky Biz Soap Box: Signal Sciences on serverless, app-layer deception and more
- Risky Business #541 -- NSO Group makes global headlines. What next?
- Risky Business #540 -- In depth: Hamas cyber unit destroyed in air strike
- Snake Oilers 9 part 2: Rapid7 talks SOAR, Trend Micro on its API-based email security play
- Risky Business #539 -- Docker Hub owned, Cloudflare, Bloomberg under fire
- Risky Business #538 -- Marcus Hutchins is a milkshake duck, Iranian APTs doxxed and more
- Snake Oilers 9 part 1: The best Snake Oilers edition we've ever run
- Risky Business #537 -- Assange arrested, WordPress ecosystem on fire
- Risky Business #536 -- Mar-a-Lago arrest, ASUS supply chain attack and more
- Risky Biz Soap Box: All about WebAuthn with Duo Security
- Risky Business #535 -- Stop giving Cloudflare money
The CyberWire
- Fancy Bear fingered, again. Warnings for travelers. Political parties get a cybersecurity grade. Updates on US restrictions on Chinese companies. new
- BlackWater snoops through the Middle East. TeamViewer hacked. Android app behaving badly. A misconfigured database with scraped Instagram data. Ransomware notes. Huawei updates.
- Huawei agonistes. Hacktivism is way down. New EU sanctions regime. Facebook goes after more coordinated inauthenticity. Salesforce still fixing its fix. OGuser hacked.
- Elfin APT group targets Middle East energy sector — Research Saturday
- Slack closes a vulnerability. Email tracking in a court martial. Restrictions on doing business with Huawei come into place. A case of responsible disclosure.
- US Executive Order aimed at China, and Huawei. Hunting backdoors in Dutch networks. Spyware proliferation. Cipher stunting. Titan key spoofing. Meaconing warning. Exposed PII in…
- Sharing espionage tools and infrastructure. Speculative execution flaws found in Intel chips. A big Patch Tuesday. CrowdStrike’s IPO. WhatsApp exploitation. Cyber Solarium. Ransomware in Baltimore.
- Russians hacked two Florida counties. Fxmsp targets named. WhatsApp patches spyware-enabling flaws. Breach costs. Cisco patches routers. Endless Mayfly’s endless hogwash.
- Security companies allegedly hacked by Fxmsp remain unidentified. SharePoint bug exploited in the wild. G7 preps major cyber exercise. Anthem hack motive? Amnesty takes NSO…
- Steganography enables sophisticated OceanLotus payloads — Research Saturday
- Breaches at AV companies? Pyongyang’s ElectricFish. Symantec’s CEO steps down. Calls to break up Facebook and regulate the pieces. US Federal indictments for leaks and…
- Someone is after Tehran’s hackers. GitLab misconfiguration. AI’s attack potential. Amazon pursues hackers who defrauded sellers. DeepDotWeb indictments. Evil Clippy. Lunch hacks in San Mateo.
Cyber Security Interviews
- #070 – Lorrie Cranor: Help Open The Doors
- #069 – Ben Johnson: Break Down The Problems
- #068 – Deborah Blyth: Security Is Everybody’s Job
- #067 – Fred Kneip: Compliance Doesn’t Equal Security
- #066 – Alissa Torres: A Well Balanced Approach
- #065 – Lizzie Cookson: Attackers Adapt With Us
- #064 – Georgia Weidman: Cyber Security Lion Repellent
- #063 – Dean Sysman: You Are Swamped With Data
Threat Intel
Reddit - Onions
- Does anyone have any archives/alternative sites to BB Compendium? new
- C guides new
- Abandoning account new
- Hey guys so I'm really new to this stuff I tried going to darknetfornoobs but it's been bann so can you help me out new
- Friendly newbie questions! new
- Mexican Salsa new
- Dread registration
- why my update deleted Tor from my Mac?
- Looking to download some rare black metal on TOR
- Is darkweblinks to be trusted?
- Newbie Tuesdays - Don't know where to start? Worried about your security? Other questions? Post in here!
- Hawaii or other crypto-restrictive areas?
Reddit - Pwned
- HHS joins medical records dump investigation - More than 20 boxes of records belonged to former Today’s Vision patients and employees, including their Social Security… new
- Two more Microsoft zero-days uploaded on GitHub | ZDNet new
- Baltimore City Government Ransomware Attack: Move Beyond Protection at the Perimeter new
- Has there been any recent breach on anywhere ? I've been getting A TON of emails recently. new
- Google G-Suite - Notifying Administrators About Unhashed Password Storage
- Skimmer acts as payment service provider via rogue iframe - Malwarebytes Labs
- 16Shop: Commercial Phishing Kit Has A Hidden Backdoor - Akamai Security Intelligence and Threat Research Blog
- Open Enrollment: How HCL Exposed Employee Passwords and Project Data
- Louisville Regional Airport Authority hit by 'ransomware' attack
- Millions of Instagram influencers had their contact data scraped and exposed – TechCrunch
- Account Hijacking Forum OGusers Hacked
- Report Reveals TeamViewer Was Breached By Chinese Hackers In 2016
Privacy/VPNs
Reddit - Privacy
- Google faces first investigation by its European lead authority for “suspected infringement” of the GDPR, following formal complaint from Brave. new
- Runbox vs Protonmail (both paid services) new
- How to force Google to automatically delete the information it saves about what you do online new
- Privacy focused ISP new
- Is there such thing as a privacy oriented cell phone carrier? new
- I have a question about YubiKey. What happens if I lose it? Am I out of luck or is there some sort of backup method? new
- Is it possible to run a shopify store without customers knowing your personal information? new
- Now Cities: Skylines is tracking my data? new
- In search of a modern private desktop printer (for printing paper documents) new
- how in the world do you protect your data privacy when in china, or other nations like this? all these softwares seem like they're under… new
- Google Play Music and Privacy new
- Google’s lead EU regulator opens formal privacy probe of its adtech new
Reddit - VPN
- What ISP can see regarding domains when VPN off? new
- Any experience with prepaid cards with VPN subscriptions ? new
- Mudfish VPN packet loss issues. new
- Can ISP encryption or handshake? new
- Android Chrome Casting Champions League Final on BT Sport YouTube Outside of Europe new
- VPN service that provides Russian IP addresses suitable for Netflix? new
- Beginners questions about IPs and locations new
- VPN query I have always wanted to know. new
- Local files need for .ovpn connection (Linux/Tunnelblick)
- Does anyone have any experience with Mullvad?
- Is there any point in paying for a VPN anonymously?
- Make sense to sign up for a VPN while USING another VPN?
Help Wanted
Reddit - AskNetSec
- What is your honest opinion of Black Hills Info Sec? new
- How to check email origin? (email could be potential fraud) new
- Mobile forensics and surveillance software question new
- Infosec Intake Assessment/Questionnaire Template(Checklist) needed new
- Question about 1password and browser plugins new
- How do you beat user enumeration scripts on SSH? new
- Can you recall messages sent externally through an encryption service? new
- Connecting the backend of 2 Saas applications new
- specific Software mitigation plan new
- Physical Security(Domains) for CISSP new
- Unable to deploy OSSIM HIDS agents to my DMZ new
- New Security Manager in an industry that is a bit behind.. looking for help with efficiency new
Reddit - Netsec Students
- PTSv4 anyone? new
- SSCP practice tests? new
- I wrote a blog on return-to-libc attacks
- Leading VPN now has pretty big discount going on ! Browse web safely with it
- Introduction to Networking | Network Basics for Beginners - Authentication
- How to bypass Respondus Lockdown browser
- OSI model made simple (with memory friendly graphics)
- In search of OSCP PWK book/ebook
- Universities you recommend?
- Introduction to Networking | Network Basics for Beginners - VPN Protocols (IPSec)
- Setting up home labs for red team skills
- How much homework do college courses normally have?
Stackoverflow - Security
- Is Object.entries vulnerable to object injection attacks? new
- How can my information be stolen if I hide sensitive data inside a PHP file? new
- quotes on xmlhttp post json data(javscript) giving some errors when send inside another json variable new
- What's the securest way to validate upload file types in PHP? new
- Using an AWS Network ACL versus an SG for access control? new
- Running a Java application on Windows lock screen new
- How to check if X509 server certificate signature corresponds to a specific PKI? new
- Signing and verifying data is giving wrong result in Java new
- Understanding Entity ID when URI is URL should I use HTTP or HTTPS new
- Cannot fix "Could not create SSL/TLS secure channel" making webrequest new
- How to make a file encrypted and save it in destination folder using php? new
- How to validate that a Pod is running privileged new
Stack Exchange
- What PC should i use as a base for my FIPS SED workstation? new
- Malware propagation to new drives [on hold] new
- Security implications of client TLS termination new
- Nuke it from orbit - surely can only mean bin and buy replacement? new
- How do ISPs send their own pages when a user is trying to access a blocked site? new
- Creating X509 certificate in C using post-quantum public key algorithm? new
- How can the Same Origin Policy protect the user in times of CORS headers? new
- Is it easy to hijack browser session if you have access to someone else computer new
- windivert programm not working with ethernet connection new
- FIDO2: will FIDO foundation MDS 1.0 metadata statements be migrated to MDS 2.0? new
- Execute internal penetration test without touching Active Directory new
- What mechanism does Firefox use to remember the in-session logins, after entering the Master Password? new
Locks/Social Engineering
Reddit - Lockpicking
- Abus TI 80/50 Picked new
- American 1100 is made of hate new
- Friend said he had some locks for me. Top to bottom master lock 17, master lock 140, and master lock 3. new
- Struggling with SC1 Keyway new
- Took down my first Abus 55/40 new
- Did it twice to make sure it wasn’t just pure luck. new
- Sparrows Hooker Set & heavy bar vs Abus 83/45 lock new
- Future picker. new
- My bedroom was mysteriously locked, and I can’t get in. Can someone help me? new
- I love those double sided tension wrenches new
- How To Optimize Spool Pin Placement new
- My lock collection new
Reddit - Social Engineering
- The Difference Between Persuade, Convince, and Coerce new
- How To Get People To Listen To You: 8 Best Things You Can Do new
- Why You Should Show Love to Who / What They Already Love new
- Lincoln on How to Handle Criticism
- Why You Should Label Your Statements As Opinions, Not Truth
- Why You Should Label Your Statements As Opinions, Not Truth
- Hospital Social Engineering
- What It Means To Be Flexible Within Reasons
- SE.NET Invites
- Your company is socially engineering you to increase your loyalty and maximize your output
- Seven signs of the charlatan
- A taxonomy of information warfare
Security Blogs
Security Bloggers Network
- Emsisoft releases a free decrypter for the GetCrypt Ransomware new
- The UK Government Huawei Dilemma and the Brexit Factor new
- How the “Diamond Model” Can Help SOC Analysts Boost Incident Response new
- Newsletter 5/19: Premium Support, RADIUS MFA, and More! new
- XKCD, Westerns new
- What are public and private key pairs and how do they work new
- Legal Threats Make Powerful Phishing Lures new
- Visiting the NSA new
- Protect your legacy and modern applications using a single solution new
- NolaCon 2019, Damon J. Small’s ‘C 13 The Jazz Improv Of Infosec’ new
- Private Tunnel Has a New Pricing Plan new
- What is a Hash? (And How Does It Work?) new
ThreatPost
- WannaCry-Infested Laptop Starts at $1.13M in Art Auction new
- Critical Flaws in Khan Academy Opened Door to Account Takeovers new
- Windows Zero-Day Drops on Twitter, Developer Promises 4 More new
- Google Stored G Suite Passwords in Plaintext Since 2005 new
- Mozilla Tackles Two Critical Flaws with Firefox 67 Release
- Intel Fixes Critical, High-Severity Flaws Across Several Products
- Data Security in the Cloud: How to Lock Down the Next-Gen Perimeter
- Cisco Starts Patching Firmware Bug; Millions of Devices Still Vulnerable
- HCL Exposes Customer, Personnel Info in Wide-Ranging Data Leak
- Millions of Golfers Land in Privacy Hazard After Cloud Misconfig
- Sharing Threat Intelligence: Time for an Overhaul
- Windows 10 Update Bricks PCs, Microsoft Offers Workarounds
ISC SANS
- ISC Stormcast For Thursday, May 23rd 2019 https://isc.sans.edu/podcastdetail.html?id=6510, (Wed, May 22nd) new
- An Update on the Microsoft Windows RDP "Bluekeep" Vulnerability (CVE-2019-0708) [now with pcaps], (Wed, May 22nd) new
- ISC Stormcast For Wednesday, May 22nd 2019 https://isc.sans.edu/podcastdetail.html?id=6508, (Tue, May 21st)
- Using Shodan Monitoring, (Tue, May 21st)
- ISC Stormcast For Tuesday, May 21st 2019 https://isc.sans.edu/podcastdetail.html?id=6506, (Mon, May 20th)
- CVE-2019-0604 Attack, (Mon, May 20th)
- ISC Stormcast For Monday, May 20th 2019 https://isc.sans.edu/podcastdetail.html?id=6504, (Sun, May 19th)
- Is Metadata Only Approach, Good Enough for Network Traffic Analysis?, (Sun, May 19th)
- ISC Stormcast For Friday, May 17th 2019 https://isc.sans.edu/podcastdetail.html?id=6502, (Fri, May 17th)
- The Risk of Authenticated Vulnerability Scans, (Thu, May 16th)
- ISC Stormcast For Thursday, May 16th 2019 https://isc.sans.edu/podcastdetail.html?id=6500, (Thu, May 16th)
- ISC Stormcast For Wednesday, May 15th 2019 https://isc.sans.edu/podcastdetail.html?id=6498, (Wed, May 15th)
digitalmunition
- Open banking establishes new access to banks’ networks, creating additional security issues
- The Good Guys Protecting You before the Bad Guys StrikeDATAQUEST
- Mahara up to 17.10.7/18.04.3/18.10.0 Collection Title cross site scripting
- Executing a multi-cloud strategy: Crawl, walk, run
- Ethical Hacking: Meet Cybersecurity’s White-Hat Warriors
- Phoenix Contact FL SWITCH up to 1.34 Web UI Credentials weak encryption
- WinPwn- Automation For Internal Windows Penetration Testing
- Is curiosity killing patient privacy?
- Huduma Namba has not been hacked – Nairobi News
- Phoenix Contact FL SWITCH up to 1.34 Web UI cross site request forgery
- BEC fraud losses almost doubled last year
- Firefox Disabled Add-Ons Fiasco Fixed As Mozilla Released Firefox 66.0.4
eHacking News
Wired - Security
- Facial Recognition Has Already Reached Its Breaking Point new
- Google Has Stored Some Passwords in Plaintext Since 2005
- Political Parties Still Have Cybersecurity Hygiene Problems
- We Are Tenants on Our Own Devices
- Bluetooth's Complexity Has Become a Security Risk
- Google Tracks What You Buy Online With Gmail
- The False Promise of “Lawful Access” to Private Data
- Goznym Takedown Shows the Anatomy of a Modern Cybercriminal Supply Chain
- The FCC's Robocall Plan Sounds Awfully Familiar
- Google Will Replace Titan Security Key Over a Bluetooth Flaw
- Microsoft’s First Windows XP Patch in Years Is a Very Bad Sign
- WhatsApp Was Hacked, Your Computer Was Exposed, and More News
Krebs on Security
- Legal Threats Make Powerful Phishing Lures new
- Account Hijacking Forum OGusers Hacked
- Feds Target $100M ‘GozNym’ Cybercrime Network
- A Tough Week for IP Address Scammers
- Microsoft Patches ‘Wormable’ Flaw in Windows XP, 7 and Windows 2003
- Nine Charged in Alleged SIM Swapping Ring
- What’s Behind the Wolters Kluwer Tax Outage?
- Feds Bust Up Dark Web Hub Wall Street Market
- Credit Union Sues Fintech Giant Fiserv Over Security Claims
- Data: E-Retail Hacks More Lucrative Than Ever
- P2P Weakness Exposes Millions of IoT Devices
- Who’s Behind the RevCode WebMonitor RAT?
Naked Security
- Cache of 49 million Instagram records found online new
- Some Androids don’t call 911 when you tell them to call an ambulance new
- Don’t break Windows 10 by deleting SID, Microsoft warns new
- Most hackers for hire are scammers, research shows new
- Deep Packet Inspection a threat to net neutrality, say campaigners
- Amnesty sues maker of Pegasus, the spyware let in by WhatsApp zero day
- Rats leave the sinking ship as hackers’ forum gets hacked
- WordPress plugin sees second serious security bug in six weeks
- CEO told to hand back 757,000 fraudulently obtained IP addresses
- Brave browser concerned that Client Hints could be abused for tracking
- Facebook bans accounts of fake news firm
- Bots rigged Russian finale of ‘The Voice Kids’ talent show
Schneier on Security
- Visiting the NSA new
- Fingerprinting iPhones new
- How Technology and Politics Are Changing Spycraft
- The Concept of "Return on Data"
- Friday Squid Blogging: On Squid Intelligence
- Why Are Cryptographers Being Denied Entry into the US?
- More Attacks against Computer Automatic Update Systems
- Another Intel Chip Flaw
- WhatsApp Vulnerability Fixed
- International Spy Museum Reopens
- Upcoming Speaking Engagements
- Cryptanalysis of SIMON-32/64
Linux Security
Dark Reading
- Alphabet's Chronicle Explores Code-Signing Abuse in the Wild new
- New Software Skims Credit Card Info From Online Credit Card Transactions new
- Data Asset Management: What Do You Really Need? new
- Baltimore Email, Other Systems Still Offline from May 7 Ransomware Attack new
- Proving the Value of Security Awareness with Metrics that 'Deserve More' new
- DDoS Attacks Up in Q1 After Months of Steady Decline new
- Google Alerts Admins to Unhashed Password Storage new
- The 3 Cybersecurity Rules of Trust new
- Consumer IoT Devices Are Compromising Enterprise Networks new
- Learn to Hack Non-Competes & Sell 0-Days at Black Hat USA new
- What You Need to Know About Zero Trust Security new
- Satan Ransomware Adds More Evil Tricks
Securelist
Whitehat Security Blog
HITB News
- WannaCry? Hundreds of US schools still haven’t patched servers
- Apple Is Finally Fixing the Keyboards on MacBook Pros
- The US DOC gives Huawei a 90-day window to support existing devices
- Middle East-linked hacking group is working hard to mask its moves
- Google Glass still exists: Meet Google Glass Enterprise Edition 2
- Security researchers discover Linux version of Winnti malware
- Steve Jobs first proposed an Apple credit card in 2004
- Windows 10 Update Bricks PCs, Microsoft Offers Workarounds
- Microsoft wants to apply AI ‘to the entire application developer lifecycle’
- Opera Reborn 3: No modern browser is perfect, but this may be as close as it gets
- New Intel firmware boot verification bypass enables low-level backdoors
- How Hackers Broke WhatsApp With Just a Phone Call
Securiteam
The RISKS Digest
- Re: Is curing patients a sustainable business model?
- Re: Gregory Travis's article on the 737 MAX
- Re: Healthcare spending
- GozNym cyber-crime gang which stole millions busted
- Ransomware Is Putting a Damper on Our Smart City Future
- Poll says that 56% of Americans don't want kids taught Arabic numerals. We have some bad news.
- New speculative execution bug leaks data from Intel chips' internal buffers
- San Francisco Bans Facial Recognition Technology
- Britain_risks_heading_to_US_levels_of_inequality, warns_top_economist
- Israeli TV Eurovision webcast hacked with fake missile alert
- CRYPTO-GRAM, May 15, 2019
- Missing Author
Forbes - Security
- The Russia Investigation's Intelligence Is 'A Triumph' -- Trump Should Trust It
- Here's What Hackers Do With All Your Stolen Passwords
- '@JeffBezos: We need to talk ASAP' - Congress Gets A Demonstration of Facial Recognition's Biases
- Microsoft Updates Microsoft 365 With Free Teams, Workspace Analytics, AI Enhancements And Nudges
- Biggest Blood Testing Lab In The U.S. Breached By Hackers
Kaspersky Blog
- 5 travel security tips for the slightly paranoid new
- Game of Thrones online streamings are a minefield of scams
- Top 10 epic Facebook fails
- Evaluating threat intelligence sources
- Uncovering fake news bots
- One call on WhatsApp is enough to establish surveillance
- Transatlantic Cable podcast, episode 92
- Don’t let this Airbnb scam fool you
- Transatlantic Cable podcast, episode 91
- Dear YouTubers, phishers are after your accounts
- Why buying a “smart” padlock is a bad idea
- Is it possible to guard against GPS attacks?
ErrataSec
Adam Shostack & friends
- Episode 9 Spoilers
- Workshop on Serious Games for Cyber Security
- 3 Arguments for Threat Modeling
- The White Box Essays (Book Review)
- Science of Security, Science for Security
- ‘No need’ to tell the public(?!?)
- Hayabusa!
- Books Worth Your Time (Q1 2019)
- Leave Those Numbers for April 1st
- 20 Years of STRIDE: Looking Back, Looking Forward
- Cybersecurity is not very important
- Threat Modeling in 2019
Graham Cluley
- Fingerprinting iPhones with the built-in gyroscope new
- Google stored business customers’ passwords in plaintext on its servers… for 14 years new
- Data on millions of Instagram accounts spills onto the internet new
- Mining cryptocurrency at work lands Australian civil servant in court
- Free eBook: A Business Owner’s Guide to Cybersecurity
- Don’t have your account hijacked. Secure your online accounts with more than a password, says Google
- Firms, stop sending out automated emails that look suspicious as hell!
- $100 million GozNym cybercrime network dismantled as suspects charged
- Forbes subscribers warned of Magecart threat skimming credit card details
- Oh, the irony… Malware spread via Best of the Web security seals
- Smashing Security #128: Shackled ankles, photo scrapes, and SIM card swaps
- Israeli TV’s Eurovision webcast hijacked by hackers. Hamas blamed
Rapid7
- Investigating the Plumbing of the IoT Ecosystem (R7-2018-65, R7-2019-07) (FIXED)
- Metasploit Wrap-Up
- The Last Chip
- How SOAR Is Disrupting Traditional Vulnerability Management
- Patch Tuesday - May 2019
- WannaCry, Two Years On: Current Threat Landscape, Forgotten Lessons, and Hope for the Future
- Medical Device Security, Part 3: Putting Safe Scanning into Practice
- Metasploit Wrap-Up
- Take Advantage of Hands-On Learning Opportunities at Rapid7's Boost 2019 Customer Conference
- Your Pocket Guide for Cloud SIEM Evaluation
- Key Concepts and Findings from the 2019 Verizon Data Breach Investigations Report
- A Match Made in ChatOps Heaven: InsightConnect Now Integrates with Slack
Security in Mainstream Media
Google News Hacking
- US officials say foreign election hacking is inevitable - Washington Post new
- Why Hacking Your CPAP Is Not A Good Idea - Psychology Today new
- Britain Helped 16 NATO Allies Tackle Russia Hacking Attempts: Foreign Minister - RadioFreeEurope/RadioLiberty new
- Cryptopia hackers continue to move funds to Etherdelta and Huobi - Chepicap new
- Hacking Life: How helpful are strategies that promise to help us improve our productivity and efficiency? - News@Northeastern new
- Hacking Grad School | GradHacker - Inside Higher Ed new
- If Hackers Hit Pittsburgh, Peduto Says The City Won't Pay - 90.5 WESA new
- US official says foreign election hacking is 'inevitable' - Spectrum News 1 new
- US official says foreign election hacking is 'inevitable' - Dayton Daily News new
- Hackers Are Holding Baltimore Hostage: How They Struck and What’s Next - The New York Times new
- Four held for hacking eatery owner to death - Deccan Herald new
- Cybersecurity Campaign Aid Approved to Prevent Future Hacking - Bloomberg GOV - Bloomberg Government new
Google Cyber Security
- Legislators propose cybersecurity bills | Local/State Headlines - The Franklin Sun new
- Cyber security roles set to flourish in SA - Brand SA News new
- DELANEY PROPOSES CABINET LEVEL NATIONAL CYBER SECURITY POST - KSCJ new
- Proposed Idaho powerline could help US cybersecurity efforts - Post Register new
- U.S. election cybersecurity agency staff 'strained to the breaking... - Reuters new
- U.S. election cybersecurity agency staff 'strained to the breaking point' - Reuters new
- Evans High School all-girls cyber-security team will compete in Nationals - WJBF-TV new
- Equifax just became the first company to have its outlook downgraded for a cyber attack - CNBC new
- Equifax just became the first company to have its outlook downgraded for a cyber attack - CNBC new
- Best Strategies to Communicate Cybersecurity Risk to the Board - Xtelligent Healthcare Media new
- Gov. DeSantis directs Secretary of State to evaluate cyber security of elections in Florida - WWSB new
- Gov. DeSantis directs Secretary of State to evaluate cyber security of elections in Florida - WWSB new
Thirsty for more
YCombinator
- The Art of Command Line new
- Codeguppy.com for P5.js Connoisseurs new
- Amazon Shareholders Rejected Employees' Call to Respond to Climate Change new
- iPhones, Armed Robbery, and Hacking (2018) new
- Thousands of vulnerable TP-Link routers at risk of remote hijack new
- The Common Lisp Cookbook new
- OP-Z Synthesizer new
- Japan Begins Experiment of Opening to Immigration new
- Google has been storing G Suite user passwords in plain text for 14 years new
- Airport Made Fence Holes for Planespotting Photographers new
- Study Pinpoints Source of Banned Gas That Saps Ozone Layer: Eastern China new
- China, Leverage, and Values new
Digg - Hack
Slashdot - Rights
- Huawei Executive Accused of Helping Steal Trade Secrets new
- Phones Can Now Tell Who Is Carrying Them From Their Users' Gaits new
- Millions of Golfers Land In Privacy Hazard After Cloud Misconfig new
- Shareholder Efforts To Curb Amazon Facial Recognition Tech Fall Short new
- Facial Recognition is Making Its Way To Cruise Ships new
- EPA Plans To Get Thousands of Pollution Deaths Off the Books by Changing Its Math new
- US Judge Says Qualcomm Violated Antitrust Law new
- Trump Administration Considers Banning Another Major Chinese Firm new
- Washington Becomes First State To Legalize Human Composting new
- 'Car Owners Should Control Data Collected By Cars'
- New Proposal Would Let Companies Further Screw You Over With Terms of Service
- Comcast Is Reportedly Developing a Device That Would Track Your Bathroom Habits
Reddit - Cyberpunk
- It could go with some Cyberpunk art or animation: Electric Youth - A Real Hero new
- Wonderful advertisement in the Detroit airport new
- Cyberpunk 2077 - "Fashi" by concept artist Eugene Golovanchuk new
- cyborg new
- wicked city new
- Doing the rounds on the ship new
- Hello Darkness by Ching Yeh. new
- Tiger Glitch by Hydro74 http://hydro74.com/ new
- The World's First Prosthetic Tattoo Gun new
- Street fighters vs. Police. My newest illustration, inspired by Akira riot scene. What you guys think. new
- “Do I Look Civilized to You?” – the John Wick Series’ Parallels to the Cyberpunk Genre new
- "Neo Red light District" by Tom Hisbergue @tom_hisbergue_art new
Reddit - Security CTF
- HackTheBoxw Writeup for Irked
- HackTheBox - Irked CTF Video Walkthrough
- Irked: Hack The Box Walkthrough
- Help building simple beginner CTF
- Hacker 101 CTF - level 4 - "Photo Gallery" help
- Hacker 101 CTF Level 2 MicroCMS V2
- Ret2 Systems Battle Quest - Seeking help
- Help for solving exercise
- breakingin: Reverse engineering a custom VM architecture and writing a proxy to bypass a firewall
- Broken image
- Teacher: Hack The Box Walkthrough
- HackTheBox: Teacher - write-up by Khaotic
Reddit - Sysadmin
- Group Policy to enforce B&W printing default new
- Security training done right. Here's my slideshow with notes. new
- VMware script to migrate VM from one vCenter to another new
- Help with fail2ban - Banning real Google bot (Apache-fakegooglebot) new
- Oracle T3 Filter and slow performance new
- Thickheaded Thursday - May 23, 2019 new
- VOIP phone accessory that provides better speaker phone? new
- Inserting Images into Word/Outlook Message/etc.. displaying odd new
- My IT Director just told me he accepted another position. That leaves me alone... advice? new
- Beginner Question new
- Has anyone ever been asked to re-install BIOS/Firmware? new
- Why is this such a sh!t show? Venting. new
Reddit - Bitcoin
- Why Is Bitcoin's Price And Its Popularity Rising? new
- Exchange options for non-US citizen residing in the US new
- Importing old bitcoins help new
- Local Project need of Lightning Guidance new
- More Than Money: Bitcoin Blockchain As Global Data Verification System new
- How can I purchase $50 worth of bitcoin without being 18 new
- I'm Out (mostly) new
- Best lightning nodes to make a channel with? new
- Current e-mail SCAM going on. new
- What Buttcoiners feel like new
- US Copyright Office Says It Does Not ‘Recognize’ Craig Wright as Satoshi new
- REKT: US Copyright Office Says It Does Not ‘Recognize’ Craig Wright as Satoshi new
Reddit - CryptoCurrency
- As of right now Walton has two "mainnets" running. new
- BTC Is Rising Becase Of A Worsening US-China Trade War, Digital Currency Group CEO Claims new
- Should we publish a guide on registering as satoshi using the trademark system, to undermine Criags recent attempt? If we are all satoshi, then no… new
- Australian SEC Warns Against New Crypto Scam new
- Basically every post on why fiat doesn't work new
- SEC Shuts Down Ponzi Scheme Which Duped 300 Into ‘Diamond-Backed’ Cryptocurrency new
- BUSTED: Police shut down crypto ‘mixing’ operation new
- Venezuelan here. NYT published this article "Nonprofits Turn to Cryptocurrency to Help Needy Venezuelans" new
- What privacy really means... new
- Daily Discussion - May 23, 2019 (GMT+0) new
- Tether Invested Some of Its Reserves Into Bitcoin new
- Mark Yusko of Morgan Creek Capital: "Bitcoin is a great diversifying asset... it should be in everyone's portfolio." new
Lobste.rs
- Need help figuring out a new engineering direction new
- Metacode - autogenerated snippets for Swift and iOS new
- Encode numbers and strings into emoji (base 1024) new
- Perfect and Fast Random Floating Point Numbers new
- How to Create a Malware Detection System With Machine Learning new
- Using `<details>` tags for HTML-only UI toggles new
- Mozilla's new Fenix browser comes to the Play Store as a limited beta new
- Basis Universal GPU Texture Codec new
- Alan Kay Did Not Invent Objects new
- g2k19 hackathon report from Claudio Jeker new
- Cardano’s formula new
- srcery - Dark Color Scheme new
Hackaday
- Wolfram Engine Now Free… Sort Of new
- Playing NES Games On An Industrial EL Display new
- Dummy Security Camera Is Smarter Than It Looks new
- Modern Evolution of the Classic Water Rocket new
- From Dirt To Space, Backyard Iron Smelting Hackerspace Style new
- A Very Modern Flying Spot Scanner new
- Zork And The Z-Machine: Bringing The Mainframe To 8-bit Home Computers new
- Novice Coders Can Create Classic Game Boy Games new
- Set Your Nuts (and Bolts) Free with this Induction Heater new
- Bringing PalmOS Back To Life
- By The Numbers: Which Rapper’s Rhymes Are The Freshest?
- New Part Day: Espressif Announces ESP32-S2 With USB
Ars Technica
- Serial publisher of Windows 0-days drops exploits for 3 more unfixed flaws new
- Billion-year-old fossils may be early fungus new
- Anti-abortion clinics that try to trick women face new Google ad policy new
- Amazon made video games for its workers to reduce tedium of warehouse jobs new
- Apple’s WWDC 2019 keynote will detail iOS 13, macOS 10.15, and more on June 3 new
- Mario Kart Tour beta hands-on: Microtransactions land like a nasty blue shell new
- Seattle makes history with electric garbage truck new
- Superconductivity reported at the temperature of a good freezer new
- ARM is the latest partner to shun Huawei, so how will it design chips? new
- Consumer Reports: Latest Autopilot “far less competent than a human” new
- T-Mobile/Sprint merger faces big trouble at DOJ despite FCC approval new
- Belgian loot box decision takes down some of Nintendo’s mobile games new
Wired
- Las Vegas Orders Up a Boring Company Loop new
- A Critical Hit to Huawei, the Student Space Race, and More News new
- Facial Recognition Has Already Reached Its Breaking Point new
- Judge Finds Qualcomm's Pricing Policy Violates Antitrust Law new
- Social Issues Raised by Amazon Investors Aren't Going Away new
- Scientists Go Back in Time to Find More Troubling News About Earth's Oceans new
- A Rocket Built by Students Reached Space for the First Time new
- If Huawei Loses ARM's Chip Designs, It's Toast new
- Logan Broadbent Shows Us How to Throw a Boomerang Like a Pro new
- Netflix's 'See You Yesterday' Challenges the Meaning of Time Travel new
- Measles Had Been Eliminated. Now It’s Nearly a Daily Threat new
- Far-Right Propaganda Floods Facebook Ahead of EU Elections
Slashdot
- EPA Plans To Get Thousands of Pollution Deaths Off the Books by Changing Its Math new
- US Judge Says Qualcomm Violated Antitrust Law new
- ARM Memo Tells Staff To Stop Working With Huawei new
- Trump Administration Considers Banning Another Major Chinese Firm new
- SpaceX's Starhopper Moves Closer To Its First Flight new
- Washington Becomes First State To Legalize Human Composting new
- 'Car Owners Should Control Data Collected By Cars'
- A Solution For Loneliness: Get Out and Volunteer, Research Suggests
- Cable TV Customer Satisfaction Falls Even Further Behind Streaming Video
- Some New Chevrolet Models Temporarily Won't Move Until Teen Drivers Buckle Up
- New Proposal Would Let Companies Further Screw You Over With Terms of Service
- Comcast Is Reportedly Developing a Device That Would Track Your Bathroom Habits
DZone Security
- Securing Couchbase Data Platform With TLS Certs new
- Database Script Cripples Salesforce Services new
- JKS: Extending a Self-Signed Certificate new
- How to Keep Your Site Secure When You Have a Remote Team new
- Secure Your JHipster App With Social Login
- The Four Most Common VPN Protocols Explained and Compared
- In the Dark About Software Supply Chain Vulnerabilities
- Tidy Up Your Tech
- Encryption, Part 3: Hybrid Encryption
- New System of Encryption of User Data in Android 5.0
- Encryption, Part 1B: Symmetric Encryption of Voluminous Files
- An Overview of the Team Messaging App Security, Increasing Concerns and Emerging Solutions