Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 900 posts.
An indirect prompt injection in an implementation blog can manipulate Antigravity to invoke a malicious browser subagent in order to steal credentials and sensitive code from a user’s IDE.
Download the Writeup Illustration Romain Flamand – Flamingo Studio – flamandromain@gmail.com Abstract Secure elements are small microcontrollers whose main purpose is to generate/store secrets and then execute cryptographic operations. They undergo the highest level of security evaluations that exists (Common…
The new Outlook now appears to be a data collection service for Microsoft’s 801 external partners for targeted advertising.
Microsoft Security Response Center Blog2020676 points384 commentscited by 3Security & Privacy details
As we said in our recent blog , we believe the Solorigate incident is an opportunity to work together in important ways, to share information, strengthen defenses and respond to attacks. Like other SolarWinds customers, we have been actively looking for indicators of the Solorigate actor and want to share an update…
We're sharing details of recent incidents on the npm registry, our investigations, and how we’re continuing to invest in the security of npm.
Chinese distributors can help foreign companies reach customers without setting up a business in China. The wrong agreement can leave a supplier locked into years of poor sales, trademark disputes, or regulatory problems. Here are ten issues we address before a client signs.
Yesterday, the BBC ran a story with the factually untrue headline, “Cellebrite claimed to have cracked chat app’s encryption.” This is false. Not only can Cellebrite not break Signal encryption, but Cellebrite never even claimed to be able to. Since we weren’t actually given the opportunity to co...
Learn how Tailscale's partnership with Mullvad enables secure, private browsing with Mullvad’s VPN servers as exit nodes. Protect your internet traffic, maintain privacy, and enjoy fast, encrypted browsing worldwide. Discover how to configure Mullvad with Tailscale for ultimate security.
tl;dr: A vandal deleted NewsBlur’s MongoDB database during a migration. No data was stolen or lost.
Last week, for about three days, the macOS video transcoding app HandBrake was compromised . One of the two download servers for HandBrake was serving up a special malware-infested version of the app, that, when launched, would essentially give hackers remote control of your computer.
Matrix, the open protocol for secure decentralised communications
The Tor Project has learned that there may be an attempt to incapacitate our network in the next...
The publishing world may finally be facing its “rootkit scandal.” Two independent reports claim that Adobe’s e-book software, “Digital Editions,” logs every document readers add to their local “library,” tracks what happens with those files, and then sends those logs back to the mother-ship, over...
If it feels like the ads chasing you across the internet know you a little too well, it’s because they do (unless you’re an avid user of ad blockers, i
17 out of 20 popular VPNs exit traffic from different countries than they claim. Dig into what that means and why it matters in our VPN report.
Use Dagster, dbt, and BigQuery to analyze suspicious GitHub star activity and protect open-source credibility.
Your phone is an essential tool, but it also represents a huge risk to your privacy and security. Understanding these best practices when it comes to securing your smartphone will help keep you and your data safe.
Web Extension version of the Firefox Lightbeam add-on - mozilla/lightbeam-we
We loved what Apple used to do about security. During the past years, the company managed to build a complete, multi-layer system to secure its hardware and sof
If you’ve been keeping up on the latest tech news, you’ve undoubtedly heard about the CPU security flaw that Google’s Project Zero disclosed last Wednesday. On Friday, w…
Please refer to the latest article for updated information.nbs[..]
The online advertising industry is behind comprehensive illegal collection and indiscriminate use of personal data, research from the Norwegian Consumer Council shows.
What if I told you that on nearly every single website you visit, data about you was transmitted to dozens or even hundreds of companies, all so that the w
Outpourings of grief and calls for change continue to flood the Internet after the suicide of Aaron Swartz, only 26 years old. Aaron was one of our community's best and brightest, and he acheived great things in his short life. He was a coder, a political activist, an entrepreneur, a contributor to...
On Thursday, September 3rd, 2020, Let’s Encrypt issued six new certificates: one root, four intermediates, and one cross-sign. These new certificates are part of our larger plan to improve privacy on the web, by making ECDSA end-entity certificates widely available, and by making certificates smaller. Given that we…
Proton Mail is a private email service takes a radically different approach to security. Find out how Proton Mail security compares to Gmail security.
Signal Desktop is now available in a new, standalone form, and the Chrome App has been deprecated.
