| 1. | | FBI Admits It Controlled Tor Servers Behind Mass Malware Attack (wired.com) |
| 671 points by floodcow on Sept 13, 2013 | 262 comments |
|
| 2. | | New NSA Leak Shows MITM Attacks Against Major Internet Services (schneier.com) |
| 656 points by chopin on Sept 13, 2013 | 139 comments |
|
| 3. | | Google knows nearly every Wi-Fi password in the world (computerworld.com) |
| 503 points by brennannovak on Sept 13, 2013 | 299 comments |
|
| 4. | | USB Condoms (usbcondoms.com) |
| 376 points by lukashed on Sept 13, 2013 | 140 comments |
|
| 5. | | How is Docker.io different from a normal virtual machine? (stackoverflow.com) |
| 308 points by jaynate on Sept 13, 2013 | 106 comments |
|
| 6. | | NIST "strongly" suggests dropping its own encryption standard (arstechnica.com) |
| 291 points by fejr on Sept 13, 2013 | 56 comments |
|
| 7. | | No more CSS and HTML, just JS (ojjs.org) |
| 283 points by colinmegill on Sept 13, 2013 | 184 comments |
|
| 8. | | E-ZPasses Get Read All Over New York (Not Just At Toll Booths) (forbes.com/sites/kashmirhill) |
| 269 points by jmcintyre on Sept 13, 2013 | 164 comments |
|
| 9. | | Happy Programmers' Day (wikipedia.org) |
| 245 points by alagappanr on Sept 13, 2013 | 65 comments |
|
| 10. | | Drug addiction: The complex truth (mindhacks.com) |
| 231 points by carey on Sept 13, 2013 | 134 comments |
|
| 11. | | Semantic UI – A language for sharing UI (semantic-ui.com) |
| 230 points by knes on Sept 13, 2013 | 81 comments |
|
| 12. | | Being poor changes your thinking about everything (washingtonpost.com) |
| 216 points by ph0rque on Sept 13, 2013 | 189 comments |
|
| 13. | | Click here, save a life, for real (salon.com) |
| 157 points by pg on Sept 13, 2013 | 116 comments |
|
| 14. | | JSFuck – Write any JavaScript with 6 Characters: []()!+ (jsfuck.com) |
| 157 points by lukashed on Sept 13, 2013 | 71 comments |
|
| 15. | | Json.human.js: Json Formatting for Human Beings (marianoguerra.github.io) |
| 155 points by marianoguerra on Sept 13, 2013 | 69 comments |
|
| 16. | | Sea Change – The Pacific's Perilous Turn (seattletimes.com) |
| 156 points by tylerwr on Sept 13, 2013 | 171 comments |
|
| 17. | | Building Clojure Services at Scale (josephwilk.net) |
| 149 points by r4vik on Sept 13, 2013 | 21 comments |
|
| 18. | | List of Wall Street CEOs prosecuted for the financial crisis (washingtonpost.com) |
| 147 points by gere on Sept 13, 2013 | 137 comments |
|
| 19. | | We scanned the Internet for port 22 (erratasec.com) |
| 126 points by yammesicka on Sept 13, 2013 | 78 comments |
|
| 20. | | [dupe] Duck Duck Go is blowing up again (duckduckgo.com) |
| 126 points by MatthewPhillips on Sept 13, 2013 | 60 comments |
|
| |
|
|
| 22. | | Trig Functions Your Math Teachers Never Taught You (scientificamerican.com) |
| 111 points by RougeFemme on Sept 13, 2013 | 27 comments |
|
| |
|
|
| 24. | | No Bread, Beer or Biscuits: How I Lost 63lbs in 100 Days (chuff.it) |
| 110 points by hiccup on Sept 13, 2013 | 116 comments |
|
| 25. | | Your name is way too long for your ID (nationalpost.com) |
| 103 points by bpierre on Sept 13, 2013 | 163 comments |
|
| 26. | | The Trie: A Neglected Data Structure (toptal.com) |
| 99 points by bbeneschott on Sept 13, 2013 | 82 comments |
|
| 27. | | GitHub Zen API (api.github.com) |
| 97 points by bencevans on Sept 13, 2013 | 52 comments |
|
| 28. | | DC cancels tax lien sales (washingtonpost.com) |
| 92 points by growupkids on Sept 13, 2013 | 32 comments |
|
| 29. | | Fog Creek’s Remote Work Policy (fogcreek.com) |
| 91 points by MattRogish on Sept 13, 2013 | 124 comments |
|
| 30. | | Google Founders' Jet Fleet Loses a Pentagon Fuel Perk (wsj.com) |
| 92 points by anigbrowl on Sept 13, 2013 | 62 comments |
|
|
| More |
In the current state of the world, we're all dependent on CA signatures for each connection we make to a website. TACK is a layer of indirection away from CA certificates, such that we'd only be dependent on CA signatures the very first time we contacted a website. It doesn't introduce any new authorities or change the default UX at all.
After the Comodo breaches a few years ago, I put together a talk about these types of attacks, where the fundamental problems lie, and why approaches like DANE are similarly ineffective:
http://youtu.be/8N4sb-SEpcg?t=4m47s