361
Face ID and Touch ID for the Web
People often see passwords are the original sin of authentication on the web.
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 900 posts.
362
Unpacking Google’s Web Environment Integrity specification
Why Vivaldi browser thinks Google’s new proposal, the Web-Environment-Integrity spec, is a major threat to the open web and should be pushed back.
363
The EARN IT Act Violates the US Constitution
Since senators introduced the EARN IT Act (S. 3398) in early March, EFF has called attention to the many ways in which the bill would be a disaster for Internet users’ free speech and security. We’ve explained how the EARN IT Act could be used to drastically undermine encryption. Although the bill...
364
Protections Against Fingerprinting and Crypto Mining in Firefox Nightly and Beta
We have added a feature to block fingerprinting and cryptomining in Firefox Nightly as an option for users to turn on.
365
Journalists Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit
Government operatives used NSO Group’s Pegasus spyware to hack 36 personal phones belonging to journalists, producers, anchors, and executives at Al Jazeera. The journalists were hacked by four Pegasus operators, including one operator MONARCHY that we attribute to Saudi Arabia, and one operator SNEAKY KESTREL that we…
366
How to Compromise the Enterprise Endpoint
Posted by Tavis Ormandy.Symantec is a popular vendor in the enterprise security market, their fla...
367
NIST’s new password rules – what you need to know
The Sophos Blog
368
How to Safely Store Your Users' Passwords in 2016
Salted Password Hashing with Argon2, Scrypt, Bcrypt, and PBKDF2
369
Looking back at how Signal works
In the midst of world-wide protests against racism and police brutality, a lot of people are becoming more immediately aware and concerned about the security of their data and online communication. We’ve gotten a lot of questions at Signal over the past week, so we wanted to briefly recap how it ...
370
Third High Severity CVE in Log4j Is Published
The Logging Services Security Team takes security seriously. This allows our users to place their trust in Log4j for protecting their mission-critical data. On this page, we will help you find guidance on security-related issues and access to known vulnerabilities.
371
372
The Fully Remote Attack Surface of the iPhone
Posted by Natalie Silvanovich, Project ZeroWhile there have been several rumours and reports of f...
373
What Spectre and Meltdown Mean for WebKit
Security researchers have recently uncovered security issues known as Meltdown and Spectre.
374
Dark Patterns at Scale: Findings from a Crawl of 11K Shopping Websites (2019)
Dark patterns are user interface design choices that benefit an online service by coercing, steering, or deceiving users into making unintended and potentially harmful decisions. We conducted a large-scale study, analyzing ~53K product pages from ~11K shopping websites to characterize and quantify the prevalence of…
375
Disrupting the first reported AI-orchestrated cyber espionage campaign
A report describing a highly sophisticated AI-led cyberattack and how we disrupted it.
376
Breaking open the Mt. Gox case, part 1
The official blog of WizSec, a group of bitcoin security specialists, and their investigation into MtGox.
377
Best of show – abuse of libc
printf machine. 2020 IOCCC entry carlini - Best of Show - abuse of libc
378
V8: A Year with Spectre
The V8 team details their analysis and mitigation strategy for Spectre, one of the top computer security issues of 2018.
379
380
Police search homes of Zwiebelfreunde board members and OpenLab in Augsburg
On June 20th, board members of the „Zwiebelfreunde“ association in multiple German cities had their homes searched under the dubious pretence that they were „witnesses“ while their computers and...
381
382
LibreSSL: More Than 30 Days Later
LibreSSL was officially announced to the world just about exactly five months ago. Bob spoke at BSDCan about the first 30 days. For those who weren't there, I'll quickly rehash some of that material. Also, it's always best to start at the beginning, but then I'll try to focus on some new material and updates.
383
Open Whisper Systems Partners with Google on End-To-end Encryption for Allo
At Open Whisper Systems, our goal is to make private communication simple. The foundation of our technology is Signal Protocol, a modern, open source, strong encryption protocol for asynchronous messaging systems. It is built from the ground up to make seamless end-to-end encrypted messaging poss...
384
Postmortem for Malicious Packages Published on July 12th, 2018
A pluggable and configurable linter tool for identifying and reporting on patterns in JavaScript. Maintain your code quality with ease.
385
Swift Homomorphic Encryption
We’re excited to announce a new open source Swift package for homomorphic encryption in Swift: swift-homomorphic-encryption.
386
NPM package compromised by author: erases files on RU / BY computers on install
Vue.js users using the dependency “node-ipc” are experiencing a supply chain attack protesting the invasion of Ukraine, from a package named “peacenotwar”.
387
388
389
Why (blank) gets you root
tracking down the cause of a serious authentication flaw
390
