1
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 70 posts.
2
Technology Preview for secure value recovery
At Signal, we want to make privacy simple. From the beginning, we’ve designed Signal so that your information is in your hands rather than ours. Technologies like Signal Protocol secure your messages so that they are never visible by anyone but you and the intended recipients. Technologies like p...
3
Victory! Ruling in hiQ v. Linkedin Protects Scraping of Public Data
In a long-awaited decision in hiQ Labs, Inc. v. LinkedIn Corp., the Ninth Circuit Court of Appeals ruled that automated scraping of publicly accessible data likely does not violate the Computer Fraud and Abuse Act (CFAA). This is an important clarification of the CFAA’s scope, which should provide...
4
A deep dive into iOS Exploit chains found in the wild
Posted by Ian Beer, Project ZeroProject Zero’s mission is to make 0-day hard. We often work...
5
A proactive approach to more secure code
Microsoft Security Response Center Blog2019132 points28 commentscited by 17Security & Privacy details
What if we could eliminate an entire class of vulnerabilities before they ever happened?
6
Warp – Mobile VPN
Today we're excited to announce what we began to plan more than two years ago: the 1.1.1.1 App with WARP performance and security technology. We built Warp from the ground up to thrive in the harsh conditions of the modern mobile Internet.
7
RSA is a fragile cryptosystem
Here at Trail of Bits we review a lot of code. From major open source projects to exciting new proprietary software, we’ve seen it all. But one common denominator in all of these systems is that for some inexplicable reason people still seem to think RSA is a good cryptosystem to use. Let me save […]
8
Extracting Bitlocker Keys from a TPM
Extracting BitLocker keys sealed with a TPM by sniffing the LPC bus
9
An Update on Plugin Security
Learn about Figma's response to the security vulnerabilities that were reported in a 3rd-party library that we use for plugin security
10
Web Request and Declarative Net Request: Explaining the impact on Extensions
The Story So Far As part of an effort to increase user security and privacy, Chrome is planning a number of changes to the extensions pla...
11
Privacy-Preserving Ad Click Attribution for the Web
A typical website is made of numerous components coming from a wide variety of sources.
12
Why Rust for safe systems programming
In this series , we have explored the need for proactive measures to eliminate a class of vulnerabilities and walked through some examples of memory safety issues we’ve found in Microsoft code that could have been avoided with a different language. Now we’ll peek at why we think that Rust represents the best…
13
Sealed Rust: A plan to bring Rust to safety critical software domains
Part 1 - The Pitch
14
15
16
Tracking Prevention Policy
This document describes the web tracking practices that WebKit believes, as a matter of policy, should be prevented by default by web browsers.
17
WireGuard for Windows Pre-Alpha Is Available
Users of kernels < 5.6 may also choose wireguard-lts or wireguard-dkms + linux-headers , depending on which kernel is used.
18
The world’s most-surveilled cities
We've gathered data on CCTV cameras in use in 120 major cities across the globe to determine which cities have the most surveillance cameras per person.
19
SSL added and removed here ;-)
This post is part of our ongoing series about networks, privacy, governments and (of course) online security tools like Cloak. Last week, the Washington Post unleashed yet another bombshell revelation from the Snowden documents.
20
Technology Preview: Signal Private Group System
Groups are inherently social, and Signal is a social app. Whether you’re planning a surprise party, discussing last night’s book club meeting, exchanging photos with your family, or organizing something important, group messaging has always been a key feature of Signal. Signal provides private gr...
21
How Apps on Android Share Data with Facebook (2018)
Facebook routinely tracks users, non-users and logged-out users outside its platform through Facebook Business Tools. App developers share data with Facebook through the Facebook Software Development Kit (SDK), a set of software development tools that help developers build apps for a specific operating system. Using…
22
Google’s GDPR Workaround
Brave presents new RTB evidence, and has uncovered a mechanism by which Google appears to be circumventing its purported GDPR privacy protections.
23
WARP is here
Today, after a longer than expected wait, we're opening WARP and WARP+ to the general public. If you haven’t heard about it yet, WARP is a mobile app designed for everyone which uses our global network to secure all of your phone’s Internet traffic.
24
Cname cloaking, a disguise of third-party trackers
An in-depth exploration of a new method used by tracking companies to disguise their third-party trackers as first-party trackers.
25
Privacy Sandbox – Open standards to enhance privacy on the web
Chrome is announcing a new initiative to explore how to evolve the web in a way that advances privacy, while supporting publishers, and free and open content.
26
BoringTun, a Userspace WireGuard Implementation in Rust
Today we are happy to release the source code of a project we’ve been working on for the past few months. It is called BoringTun, and is a userspace implementation of the WireGuard® protocol written in Rust.
27
What’s Next in Making Encrypted DNS-over-HTTPS the Default
More than 70,000 users have already chosen on their own to explicitly enable DoH in Firefox Release edition. We are close to releasing DoH in the USA, and we have a few updates to share.
28
Understanding STIR/SHAKEN – New Anti-Robocalling Protocol
This whitepaper explains the basic technical details of STIR/SHAKEN call authentication and how it prevents caller ID spoofing.
29
Protections Against Fingerprinting and Crypto Mining in Firefox Nightly and Beta
We have added a feature to block fingerprinting and cryptomining in Firefox Nightly as an option for users to turn on.
30
The Fully Remote Attack Surface of the iPhone
Posted by Natalie Silvanovich, Project ZeroWhile there have been several rumours and reports of f...