631
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 900 posts.
632
An Update on SolarWinds
We’d like to provide a further update to our customers in regards to the SolarWinds breach. At this point we reiterate the message we posted yesterday – we have not played any role in this breach, nor are we aware of any vulnerabilities in TeamCity that may have led to this breach, as we are also not aware of any…
633
Cisco's Talos team analysis of WannaCry worm
By Martin Lee, Warren Mercer, Paul Rascagneres, and Craig Williams. Executive Summary A major ransomware attack has affected many organizations across the world reportedly including Telefonica in Spain, the National Health Service in the UK, and FedEx in the US. The malware responsible for this attack is a ransomware…
634
Digital ID, a new way to create and present an ID in Apple Wallet
Digital ID is a new way for users to create an ID in Apple Wallet using their U.S. passport, and present it with the privacy of iPhone or Apple Watch.
635
636
637
Auth is now available in Supabase (YC S20)
Authenticate and authorize your users with Supabase Auth
638
Fuzzing rust-minidump for Embarrassment and Crashes – Part 2
For the last year, we've been working on the development of rust-minidump. The final part in this series takes you through fuzzing rust-minidump.
639
DNS-over-HTTP/3 in Android
Posted by Matthew Maurer and Mike Yu, Android team To help keep Android users’ DNS queries private, Android supports encrypted DNS. I...
640
Drone hijacked by UT hackers with $1,000 spoofer
The Sophos Blog
641
642
The Linux Backdoor Attempt of 2003
Josh wrote recently about a serious security bug that appeared in Debian Linux back in 2006, and whether it was really a backdoor inserted by the NSA. (He concluded that it probably was not.) Today I want to write about another incident, in 2003, in which someone tried to backdoor the Linux kernel. This one […]
643
Privacy Badger Is Changing to Protect You Better
Privacy Badger was created to protect users from pervasive non-consensual tracking, and to do so automatically, without relying on human-edited lists of known trackers. While our goals remain the same, our approach is changing. It is time for Privacy Badger to evolve.Thanks to disclosures from...
644
Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
Any website can use a simple API to replace CAPTCHAs with our invisible alternative, whether they’re on the Cloudflare network or not.
645
EFF: Online Speech is Only as Strong as the Weakest Intermediary
Co-authored by Rainey Reitman and Marcia Hofmann The First Amendment to the Constitution guarantees freedom of expression against government encroachment — but that doesn't help if the censorship doesn't come from the government. The controversial whistle-blower website WikiLeaks, which has begun...
646
Americans Disapprove of Government Surveillance Programs
More Americans disapprove (53%) than approve (37%) of the government program that obtained telephone call logs and Internet communication records. Americans are split on whether leaker Edward Snowden did the right or wrong thing.
647
648
Re: Proposed Statement on "HTTPS everywhere for the IETF"
Search IETF mail list archives
649
YouTube starts to require a credit card or ID to verify the age in EU (2020)
We’ve taken important steps to make YouTube a safer place for families. We’re announcing a continuation of these efforts.
650
Detecting and countering misuse of AI
Anthropic's August 2025 threat intelligence report on AI cybercrime and other abuses.
651
Good Bad ISPs
Defend yourself against tracking and surveillance. Circumvent censorship. | Good Bad ISPs
652
Dear Search Guard Users
We’ve filed a lawsuit against the makers of Search Guard. Here is what we know, the actions we’re taking, and potential impact to Search Guard users.
653
House Keys copyable from 200 ft away via camera
UC San Diego Jacobs School of Engineering2011133 points69 commentscited by 4Security & Privacy details
 UC San Diego computer scientists have built a software program that can perform key duplication without having the key. Instead, the computer scientists only need a photograph of the key.
654
Unusual login activity was due to bug
As part of our commitment to security, we regularly monitor our services for actual, suspected, or attempted malicious or unusual activity. We recently investigated reports of an uptick of users recei[..]
655
Clio: A system for privacy-preserving insights into real-world AI use
Anthropic's new system, Clio, analyzes how people use AI while maintaining their privacy.
656
657
A vulnerability in WebLogic, WebSphere, JBoss, Jenkins, OpenNMS and others
By @breenmachine What? The most underrated, underhyped vulnerability of 2015 has recently come to my attention, and I’m about to bring it to yours. No one gave it a fancy name, there were no …
658
OpenAI models secretly generate instructions to ignore constraints
Research on aligning AI with human values and intent, and reports documenting model failures.
659
Security vulnerabilities fixed in Firefox 72.0.1 and ESR 68.4.1
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw.
660
