| Date | Title | Description |
| Sign up to see | Sign up to see | Sign up to see |
| Mar 3, 2026 | 15 онлайн-сервисов, которые должен знать каждый сисадмин | Продолжаю серию статей про полезные инструменты для сисадминов. Сегодня расскажу про зарубежные сайты, которые точно должны быть в вашем шорт-листе. Читайте под катом и делитесь своими онлайн-сервисами по мониторингу, тестированию и оптимиз... |
| Jul 28, 2025 | Настройка TLS в Angie: безопасность и скорость | Сегодня использование HTTPS стало практически обязательным для большинства веб‑приложений. Angie позволяет эффективно обрабатывать HTTPS‑трафик, обеспечивая при этом высокий уровень безопасности. В новых протоколах HTTP/2 и HTTP/3 использов... |
| Dec 16, 2024 | Argus — мощный инструмент для разведки | Введение
Argus — это универсальный инструмент на Python, созданный для упрощения процесса сбора информации и проведения разведки. Благодаря удобному интерфейсу и набору мощных модулей, Argus позволяет эффективно и результативно исследовать ... |
| Nov 25, 2024 | Как работает RSA и почему ему угрожают квантовые компьютеры | Представьте себе 70-е годы прошлого века: мир активно подключается к открытым каналам связи, а защита данных становится вопросом первостепенной важности. В то время три профессора-математика Массачусетского технологического института — Рона... |
| Mar 17, 2024 | Обнаружение SSH-туннелей по размеру пакетов | Иллюстрация из книги «Справочник киберсантехника»
Протокол SSH — очень мощный инструмент, который используется для удалённой консоли или передачи файлов (scp, sftp). Есть менее известная функция перенаправления портов. Такие SSH-туннели исп... |
| Mar 27, 2023 | Не все TLS-сканеры одинаково полезны | Получив рейтинг A+ за настройки администрируемого веб-сервера от одного из популярных TLS-сканеров, вы можете впасть в эйфорию, и совершенно безосновательно.
Например, вот этому веб-серверу два самых популярных TLS-сканера присваивают рейти... |
| Jun 17, 2022 | Сам себе PKI: Теория на примере Let’s Encrypt. (Статья 1) | ТерминыPKI (Public Key Infrastructure)
Системы PKI построены на криптографии, которая использует пару ключей: публичный (public key) и приватный (private key). Глобальная цель систем PKI - связать пользователей и соответствующие публичные к... |
| Apr 25, 2022 | И снова про App Transport Security: что это и зачем | Привет, Хабр!
Меня зовут Юрий Шабалин, и, как я пишу в начале каждой своей статьи, мы разрабатываем платформу анализа защищенности мобильных приложений iOS и Android.
В этой статье мне бы хотелось затронуть тему безопасной конфигурации сете... |
| Dec 16, 2021 | OSINT или разведка по открытым источникам | Поиск по открытым источникам — это методология сбора и анализа данных, находящихся в открытом доступе, для получения дополнительной информации о цели.
В данной статье расскажем о том, какими методами и средствами можно собирать информацию и... |
| Oct 26, 2021 | 25 твитов об SSL-сертификатах | SSL сертификаты. Для чего они нужны, какие бывают, от чего защищают, кто использует, как долго действуют, есть ли гарантия? Разберем основные вопросы – кратко, в режиме твиттера – не более 280 символов на ответ.
1. Что такое SSL?
SSL означа... |
| Apr 19, 2021 | 13 сервисов для технического аудита сайта в 2021 | У вашего сайта хорошая техничка? Если нет, то вы многое теряете. 13 сервисов, которые сделают ваш сайт технически совершенным прямо сейчас.
7 комментариев
12 769 просмотров
Преимущества плохого технического состояния сайта:
SEO эффект хуже
... |
| Jul 18, 2019 | My browser, the spy: How extensions slurped up browsing histories from 4M users | Enlarge
Aurich Lawson / Getty reader comments 180 with 132 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
When we use browsers to make medical appointments, share tax returns with accountants, or a... |
| Dec 3, 2018 | Marriott’s breach response is so bad, security experts are filling in the gaps — at their own expense | Last Friday, Marriott sent out millions of emails warning of a massive data breach — some 500 million guest reservations had been stolen from its Starwood database.
One problem: the email sender’s domain didn’t look like it came from Marrio... |
| Oct 16, 2018 | Apple, Google, Microsoft, and Mozilla come together to end TLS 1.0 | Enlarge
Indigo girl / Flickr reader comments 84 with 55 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Apple, Google, Microsoft, and Mozilla have announced a unified plan to deprecate the use of TL... |
| Sep 14, 2018 | Three years later, Let’s Encrypt has issued over 380 million HTTPS certificates | Bon anniversaire, Let’s Encrypt!
The free-to-use nonprofit was founded in 2014 in part by the Electronic Frontier Foundation and is backed by Akamai, Google, Facebook, Mozilla and more. Three years ago Friday, it issued its first certificat... |
| Apr 28, 2018 | Настройка SSL. Полезные советы | Veronica Yudina 28 апреля 2018, 13:41 Настройка SSL. Полезные советы
Оставить комментарий |
| Sep 8, 2017 | Why the Equifax breach is very possibly the worst leak of personal info ever | US Navy reader comments 259 with 187 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
It's a sad reality in 2017 that a data breach affecting 143 million people is dwarfed by other recent hacks—for i... |
| Sep 7, 2017 | Equifax website hack exposes data for ~143 million US consumers | Enlarge
Michael Theis / Flickr reader comments 156 with 108 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Equifax, a provider of consumer credit reports, said it experienced a data breach affectin... |
| Aug 10, 2017 | “Pretty egregious” security flaw raises questions about Pacer | Enlarge
Penn State / Flickr reader comments 24 with 16 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
The Pacer court document service used by more than a million journalists and lawyers has raked ... |
| Feb 8, 2017 | Security products endanger customers through poor TLS interception | Popular security products such as anti-viruses and middleboxes put customers at risk through poor transport layer security (TLS) interception implementations, researchers have found.
A group of researchers from United States universities as... |
| Mar 16, 2016 | OPM Left Internal System Vulnerable to a Known Attack for Weeks | The Office of Personnel Management (OPM), which was infamously hacked last year, today announced it fixed a serious vulnerability affecting a potentially sensitive part of its network after being informed of it by Motherboard.
An encryption... |
| Mar 7, 2016 | It’s 2016, and we’re still not using HTTPS properly | Disclaimer: I’m a big fan of Pandora. I’ve been a listener for a decade or more, and I started paying for an annual subscription even before there was any real incentive to do so, solely because I loved the service and wanted it to succeed.... |
| Mar 7, 2016 | It’s 2016, and we’re still not using HTTPS properly | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
Disclaimer: I’m a big fan of Pandora. I’ve been a... |
| Jan 26, 2016 | Chrome gets a security panel to help developers deploy HTTPS | Did you miss a session from GamesBeat Summit 2022? All sessions are available to stream now. Learn more.
Google today launched a new security panel in the DevTools section of Chrome 48, promising it will roll out over the next few days. The... |
| Jan 8, 2016 | At Least Half of UK Banks Have 'Insecure' Logins, Research Says | Even though a quarter of the encrypted web is about to be broken, over half of login pages for UK online banking sites are insecure. That's according to a survey of banks, building societies, and foreign banks operating in the UK carried ou... |
| Jun 10, 2015 | White House mandates HTTPS-only govt websites | The United States government chief information office has published a set of technical guidelines that state the administration's many different websites should use the encrypted HTTPS only.
The memorandum - published by US government CIO T... |
| Mar 17, 2015 | HTTPS-crippling FREAK exploit affects thousands of Android and iOS apps | Enlarge / The plaintext communications extracted from an unidentified smartphone app that's vulnerable to the recently disclosed FREAK exploit.
FireEye reader comments 69 with 47 posters participating, including story author
Share this stor... |
| Dec 10, 2014 | Australian sites vulnerable to new POODLE attack | Researchers have discovered a new variant of the vulnerability in the third version of the SSL (secure sockets layer) web encryption protocol, dubbed POODLE, which has left many different websites open to man-in-the-middle attacks.
Google s... |
| Dec 9, 2014 | Meaner POODLE bug that bypasses TLS crypto bites 10 percent of websites | Living in Monrovia reader comments 35 with 27 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Some of the world's leading websites—including those owned or operated by Bank of America, VMware, the U... |
| Aug 8, 2014 | What Google’s New Ranking Signal Means For You | This week, Google introduced the webmaster and SEO world to a new ranking signal. Webmasters using HTTPS (HTTP over TLS, or Transport Layer Security) to make their sites more secure will be looked upon more favorably than those that don’t i... |
| Aug 7, 2014 | In major shift, Google boosts search rankings of HTTPS-protected sites | reader comments 146 with 67 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
In a shift aimed at fostering wider use of encryption on the Web, Google is tweaking its search engine to favor sites that... |
| Aug 7, 2014 | Google Says Website Encryption – Or Lack Thereof – Will Now Influence Search Rankings | Google will begin using website encryption, or HTTPS, as a ranking signal – a move which should prompt website developers who have dragged their heels on increased security measures, or who debated whether their website was “important” enou... |
| Aug 7, 2014 | Google Announces New Ranking Signal | Google announced that HTTPS is now a ranking signal used in its algorithm. The company has been pushing the use of HTTPS (HTTP over TLS/Transport Layer Security) for quite some time, and called for “HTTPS everywhere” at Google I/O, so this ... |
| Jun 10, 2014 | Is this Website Vulnerable to Hacking? A New Index can Tell You | Image: Kevin Teague/Flickr
Following broad security scares like that caused by the Heartbleed bug, it can be frustratingly difficult to find out if a site you use often still has gaping flaws. But a little known community of software develo... |
| Apr 18, 2014 | Trend Micro releases free Heartbleed scanners for Android, Chrome | Trend Micro has announced the availability of two free scanners for the Heartbleed bug, meant for Google Chrome and Android. The first, a browser add-on, allows users to enter and check any specific URL.
The second, an Android app, is a lit... |
| Apr 10, 2014 | Protect Yourself Against Heartbleed, The Web’s Security Disaster | The recently discovered Heartbleed bug exposed a gaping hole in the security software that’s supposed to keep your information private while shopping, managing your finances or sending and reading email. While there still aren’t any signs t... |
| Feb 23, 2014 | Revealed: The Secrets of YIFY-Torrents’ Network | Needing little introduction, YIFY (now correctly called YTS) is one of the world’s most popular sharing sites. At the start of 2014 it was the 5th most popular torrent site in the world and according to brand new figures provided to us yest... |
| Mar 9, 2013 | After leaving users exposed, Apple fully HTTPS-protects iOS App Store (Updated) | Image from video demonstrating a password attack that was possible because Apple didn't fully encrypt traffic traveling between its App Store and end users.
Elie Bursztein reader comments 57 with 44 posters participating, including story au... |
| Nov 7, 2012 | Patent suits target Google, Intel, hundreds more for encrypting web traffic | Enlarge / A figure from the patent that has been asserted against Intel, Google, and hundreds of other companies providing SSL and TLS on their websites.
USPTO reader comments 47 with 45 posters participating
Share this story
Share on Faceb... |
| Sep 13, 2012 | Crack in Internet’s foundation of trust allows HTTPS session hijacking | A screen shot from a video showing CRIME decrypting the contents of an encrypted cookie used to authenticate a dropbox.com user account. reader comments 40 with 29 posters participating, including story author
Share this story
Share on Face... |
| Jun 18, 2012 | Microsoft Windows Update SSL certificate gets failing grade | The SSL certificate for update.windows.com as viewed by the Windows Certificate viewer.
Unmitigatedrisk.com reader comments 16 with 14 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit Flame
Revealed:... |
| Feb 26, 2012 | SSL fix aims to mend huge cracks in ‘Net’s foundation of trust | Under the Mutually Endorsing CA Infrastructure proposal, end users would rely on Notaries to confirm the validity of digital certificates presented by Google Mail and other SSL-protected websites.
Illustration by Kai Engert reader comments ... |
| Исследование веб-сайтов в рамках OSINT | Привет Хабр. Сегодня мы поговорим о том, какую информацию можно получить с веб-ресурса для последующего использования в OSINT. Какие сервисы для этого есть и какую конкретно информацию они для нас нароют. Данная информация и методики будут ... |