331
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 1,584 posts.
332
Block AI Scrapers with Anubis proof-of-work
I got tired with all the AI scrapers that were bullying my git server, so I made a tool to stop them for good.
333
334
Google Shares, Monetizes, and Exploits Your Data Without 'Selling' It
"Google will never sell any personal information to third parties; and you get to decide how your information is used." - Sundar Pichai Sound familiar? Although big tech companies like Google keep the lights on by harvesting and monetizing your personal data, they can be quick to mince words and deny the strawman…
335
CVE-2026-98432: 9.8 CVE affecting all Ubuntu versions
Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things.
336
Threat Group 4127 Targets Hillary Clinton Presidential Campaign
Learn how Sophos CTU researchers tracked the activities of a Russian-based threat group targeting the Hillary Clinton Presidential Campaign.
337
A new layer of security for certified Android devices
Starting in 2026 and in select countries first, Android apps must be registered to a verified developer in order to be installed.
338
339
Meet Algo, the VPN that works
I think you’ll agree when I say: there’s no VPN option on the market designed with equal emphasis on security and ease of use. That changes now. Today we’re introducing Algo, a self-hosted personal VPN server designed for ease of deployment and security. Algo automatically deploys an on-demand VPN service in the cloud…
340
Tracking Firm LocationSmart Leaked Location Data for Customers of All Major U.S. Mobile Carriers Without Consent in Real Time Via Its Web Site
LocationSmart , a U.S. based company that acts as an aggregator of real-time data about the precise location of mobile phone devices, has been leaking this information to anyone via a buggy component of its Web site — without the need for any password or other form of authentication or authorization — KrebsOnSecurity…
341
F-Droid Security Issues
F-Droid is a popular alternative app repository for Android, especially known for its main repository dedicated to free and open-source software. F-Droid is often recommended among security and privacy enthusiasts, but how does it stack up against Play Store in practice? This write-up will attempt to emphasize major…
342
Deterministic Builds Part One: Cyberwar and Global Compromise
I've spent the past few months developing a new build system for the 3.0 series of the Tor...
343
I would like Debian to stop shipping XScreenSaver
If any of you reading this have decision-making ability along those lines, I would appreciate your assistance in making this happen. If you're wondering why: they are still shipping a version of my software that I released in 2014. Since that's roughly a decade in software years, it recently began popping up a single…
344
Tracking Prevention Policy
This document describes the web tracking practices that WebKit believes, as a matter of policy, should be prevented by default by web browsers.
345
Motorola announces a partnership with GrapheneOS
Motorola announces three new B2B solutions at MWC 2026, including GrapheneOS partnership, Moto Analytics and more.
346
Why Raspberry Pi Isn't Vulnerable to Spectre or Meltdown
Eben gives you a crash course in how modern processors work to explain why Raspberry Pi is unaffected by the Spectre and Meltdown security vulnerabilities.
347
Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
Some people enter the technology industry to build newer, more exciting kinds of technology as quickly as possible. My keynote will savage these people and will burn important professional bridges, likely forcing me to join a monastery or another penance-focused organization. In my keynote, I will explain why the…
348
Npm Audit: broken by design?
Found 99 vulnerabilities (84 moderately irrelevant, 15 highly irrelevant)
349
Who’s behind Wednesday’s epic Twitter hack?
Twitter was thrown into chaos on Wednesday after accounts for some of the world’s most recognizable public figures, executives and celebrities starting tweeting out links to bitcoin scams. Twitter says the attack happened because someone tricked or coerced an employee into providing access to internal Twitter…
350
351
Signal Desktop
Today we’re making the Signal Desktop beta available. Signal Desktop brings the trusted private messaging experience of Signal to the desktop, with a simplicity that allows you to seamlessly continue conversations back and forth between your mobile device and your desktop computer.
352
NAT Slipstreaming
exploit NAT/firewalls to access TCP/UDP services bound to any system behind victim's NAT
353
LastPass Security Notice
error
354
LastPass user vaults stolen in recent hack
Please refer to the latest article for updated information.nbs[..]
355
Typosquatting programming language package managers
Edit: It seems that the blog post and the thesis caused quite some interest. Please contact me under the following mail address: admin [|[at]|] incolumitas [[|dot|]] com In this blog post, it is demonstrated how 17000 computers were forced to execute arbitrary code by typosquatting programming language…
356
PHP2Shell: AI uncovers critical RCE in PHP
Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.
357
Recall: Stealing everything you've ever typed or viewed on your own Windows PC
Photographic memory comes to Windows, and is the biggest security setback in a decade.
358
Over the Air: Exploiting Broadcom’s Wi-Fi Stack
Posted by Gal Beniamini, Project ZeroIt’s a well understood fact that platform security is ...
359
Mullvad: Diskless infrastructure using stboot in beta
Diskless infrastructure using stboot (in beta) is now available on a pair of WireGuard servers in Sweden.
360
Firefox exploit found in the wild
Yesterday morning, August 5, a Firefox user informed us that an advertisement on a news site in Russia was serving a Firefox exploit that searched for sensitive files and uploaded ...