811
Centralised DoH is bad for privacy
Recently, Mozilla announced it would be moving Firefox DNS lookups to Cloudflare by default, for its American audience.
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 900 posts.
812
How the modern containerization trend is exploited by attackers
This MacKeeper report will tell you about 6 major data breaches that happened in 2018.
813
Preliminary Post Incident Review
Read the preliminary post incident report regarding the CrowdStrike Falcon content update affecting Windows hosts.
814
Australian Government Scrambles to Authorize Mass Surveillance
This week, Australian Prime Minister Tony Abbott used recent terrorist threats as the backdrop of a dire warning to Australians that “for some time to come, the delicate balance between freedom and security may have to shift. There may be more restrictions on some, so that there can be more...
815
Teenager Who Reads News Online? According to the DoJ, You May Be a Criminal
During his first term, President Barack Obama declared October 2009 to be “National Information Literacy Awareness Month,” emphasizing that, for students, learning to navigate the online world is as important a skill as reading, writing and arithmetic. It was a move that echoed his predecessor's...
816
Dutch Data Protection Authority: Microsoft breaches law with Windows 10
Met deze test controleren we of u een mens bent. Hiermee voorkomen we ongeoorloofd gebruik van deze dienst.
817
The Case of the Modified Binaries
SUMMARY After creating and using a new exitmap module, I found downloaded binaries being patched through a Tor exit node in Russia. Tor is a wonderful tool for protecting the identity of journalists, their sources, and even regular users around the world; however, anonymity does
818
819
SSH has no Host header
A dive into how we share IPs between VMs while making SSH work.
820
Removing PGP from PyPI
PyPI has removed support for uploading PGP signatures with new releases.
821
Finding Pwned Passwords with 1Password
1Password integrates with Pwned Passwords, a feature of Have I Been Pwned that allows you to check if your passwords have been leaked on the Internet.
822
How Etsy Manages HTTPS and SSL Certificates for Custom Domains on Pattern
In April of 2016 Etsy launched Pattern, a new product that gives Etsy sellers the ability to create their own hosted e-commerce...
823
ProtonDrive Security Model
Learn how Proton Drive uses end-to-end encryption to protect your photos, documents, and other sensitive data.
824
Confidential VMs
Google Cloud will now offer the ability to encrypt data in use, while it’s being processed in a Google data center
825
The USA Freedom Act: What's to Come and What You Need to Know
Update, Nov 18: The USA Freedom Act does not renew the entirety of the Patriot Act, which consisted of over 100 sections changing numerous electronic surveillance laws. The USA Freedom Act does extend three provisions of the Patriot Act: the "lone wolf" provision, the "roving wire tap" provision,...
826
How I was able to track the location of any Tinder user
By Max Veytsman At IncludeSec we specialize in application security assessment for our clients, that means taking applications apart and finding really crazy vulnerabilities before other hackers do. When we have time off from client work we like to analyze popular apps to see what we find. Towards the end of 2013 we…
827
GitHub Actions update: Helping maintainers combat bad actors
The trustworthiness of our platform is crucial, and our team is committed to developer productivity and Actions performing the way we intended.
828
Disqus Security Alert: User Info Breach
More publishers trust us to engage, grow, and understand their audiences than any other. Build your on-site community with Disqus.
829
A Technical Perspective on the Apple iPhone Case
The legal dispute between Apple and the FBI might prove pivotal in the long-running battle to protect users' privacy and right to use uncompromised encryption. The case has captured the public imagination. Of course, EFF supports Apple's efforts to protect its users. The case is complicated...
830
Playpen: The Story of the FBI’s Unprecedented and Illegal Hacking Operation
In December 2014, the FBI received a tip from a foreign law enforcement agency that a Tor Hidden Service site called “Playpen” was hosting child pornography. That tip would ultimately lead to the largest known hacking operation in U.S. law enforcement history. The Playpen investigation—driven by...
831
Hyperlight: Virtual machine-based security for functions at scale
The Microsoft Azure Core Upstream team is excited to announce the Hyperlight project, an open-source Rust library you can use to create very small VMs for embedded functions. Learn more.
832
833
834
Improved fraud prevention with Radar 2.0
Radar 2.0 improves machine learning performance and reduces fraud by up to an additional 25%.
835
Protecting democratic elections through secure, verifiable voting
Today, at the Microsoft Build developer conference, CEO Satya Nadella announced ElectionGuard, a free open-source software development kit (SDK) from our Defending Democracy Program. ElectionGuard will make voting secure, more accessible, and more efficient anywhere it’s used in the United States or in democratic…
836
837
Security Through Transparency
Posted by Ryan Hurst and Gary Belvin, Security and Privacy Engineering Encryption is a foundational technology for the web. We’ve spent a l...
838
An Update on Our Plans to Restrict Data Access on Facebook
Two weeks ago we promised to take a hard look at the information apps can use when you connect them to Facebook as well as other data practices. Today, we want to update you on the changes we're making to better protect your Facebook information.
839
How I hacked hundreds of companies through their helpdesk (2017)
UPDATE: The Next Web wrote a story about my findings…
840
DOMPurify bypass: XSS via HTML namespace confusion
Securitum is a pure pentesting company specialising in the security of IT systems. We have experience in performing security audits (including penetration tests) - mainly for financial/e-commerce/industrial sectors. We have performed penetration tests and cyber security services for leading European banks (see…