Darknet is a news site covering hacking tools, security vulnerabilities, and penetration testing topics.
HN links it for security news, such as the LastPass Chrome extension password leak, and for a repost of the classic worm-writing article.
I am open source agnostic but I will not allow someone else to control what apps I can install.
Scammy stuff will still exists and only difference will be that customer will never know about it[1] and is going to live under false security.Companies will try to ban every person trying to expose vulnerabilities.
[1]http://www.darknet.org.uk/2011/11/apple-bans-security-researcher-charlie-miller-for-exposing-ios-exploit/
Do you thing a small set of employees sitting in a company's approval department are experts of every single thing that can be ever conceived by a developer?
I am not against the idea of sand-boxing if it is built in the OS API. How approving a sand-boxed application is going to improve the security?
There is a high possibility that Google's server is 10 times more secure than any average Joe's mail server. Even more secure than a security expert's server as well: http://www.darknet.org.uk/2009/08/dan-kaminsky-kevin-mitnick-hacked/
Do you have time to manage and keep your server secure? Can you patch a new 0day in an hour, possibly not.
On the other hand when men-in-black asks to Google yes they might give it away, which is another story.
GSM was cracked a long while ago, but now after Karsten Nohl has published his 1.7 TB rainbow tables via torrents, script kiddies will eventually be able to hack into your phones..
http://www.darknet.org.uk/2010/08/gsm-hacking-coming-to-the-masses-script-kiddy-style/
Has anyone thought of what is gonna replace our broken A5/1 GSM privacy the next couple of years? Will we need new handsets to provide us with the next-gen cellphone encryption?
Did some Googling myself and found some related links:
https://www.wsj.com/articles/a-hacker-and-the-perils-of-dorking-1459536135
https://pentestmag.com/zeus-scanner-advanced-dork-searching/
https://github.com/E4rr0r4/XGDork
https://github.com/GuestGuri/dork-scanner
https://www.darknet.org.uk/2017/10/sqliv-sql-injection-dork-scanning-tool/
https://wiki.softwink.com/bin/view/Main/SaganFAQ#Why_Sagan
http://www.darknet.org.uk/2010/07/sagan-real-time-system-event-log-syslog-monitoring-system/
Pretty good system to correlate different events to get a better picture of a potential intrusion. If you're familiar with Snort I recommend checking it out.
We've known that this is possible for years (http://crypto.stanford.edu/ssl-mitm/ http://www.darknet.org.uk/2009/08/sslsniff-v0-6-released-ssl-mitm-tool/), but the fact that it's now a commercial product indicates that it is actually happening for real.