31
Pledge() and unveil() in SerenityOS (2020)
This post describes the implementation and use of pledge() and unveil() in SerenityOS.
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 94 posts.
32
Firefox rolls out Total Cookie Protection by default to all users
Updated Aug. 28, 2024. Take back your privacy Firefox is rolling out Total Cookie Protection by default to more Firefox users worldwide, making Firefox the
33
How Go mitigates supply chain attacks
Go tooling and design help mitigate supply chain attacks at various stages.
34
Apple is becoming an ad company despite privacy claims
Apple’s ad business is growing fast. It tracks you in its apps and uses that data to sell ads despite its privacy claims.
35
Bitwarden raises $100M
A message from the Bitwarden CEO on accelerating value for Bitwarden users and customers.
36
37
NPM package compromised by author: erases files on RU / BY computers on install
Vue.js users using the dependency “node-ipc” are experiencing a supply chain attack protesting the invasion of Ukraine, from a package named “peacenotwar”.
38
SSH Agent Restriction (new in OpenSSH 8.9)
OpenSSH agent restriction
39
Privacy preserving attribution for advertising
Advertising provides critical support for the Web. We’ve been looking to apply privacy preserving advertising technology to the attribution problem, so t
40
Privacy Friendly Apps – improved privacy protection on the smartphone
We use our smartphone for private conversations, store our contacts and organise our meetings with it. The access to all this sensitive data is handled with the so-called permissions. It means, for example, that each app that requires the smartphone camera needs to get the corresponding permission first. Many of the…
41
Google now deleting health clinic searches from location history automatically
Editor's note – May 12, 2023Last year, we launched an important update to Location History. We remain committed to improving the experience and making it as helpful…
42
See what JavaScript commands get injected through an in-app browser
I work with U.S. law firms as a non-testifying technical consulting expert on matters involving the Apple platform and iOS apps. Learn more about my litigation consulting.
43
Detecting unauthorized physical access with beans, lentils and colored rice (2021)
strengthening digital self-defense | research and development | providing privacy-focused goods and services
44
OpenSSL 3.0.7 fixes X.509 email address buffer overflows
Today we published an advisory about CVE-2022-3786 (“X.509 Email Address Variable Length Buffer Overflow”) and CVE-2022-3602 (“X.509 Email Address 4-byte Buffer Overflow”).
45
Hackers gaining power of subpoena via fake “emergency data requests”
There is a terrifying and highly effective “method” that criminal hackers are now using to harvest sensitive customer data from Internet service providers, phone companies and social media firms. It involves compromising email accounts and websites tied to police departments and government agencies, and then sending…
46
SOC2: The screenshots will continue until security improves
We got SOC2 certified so now you have to pay us more.
47
Brave browser now blocks cookie banners
New versions of Brave will hide—and, where possible, completely block—cookie consent notifications. Brave's approach is distinct and more privacy-preserving than similar systems used in other browsers.
48
Final thoughts on Ubiquiti
Last year, I posted a series of articles about a purported “breach” at Ubiquiti. My sole source for that reporting was the person who has since been indicted by federal prosecutors for his alleged wrongdoing – which includes providing false information to the press.
49
GDPR enforcer rules that IAB Europe’s consent popups are unlawful
EU data protection authorities find that the consent popups that plagued Europeans for years are illegal. All data collected through them must be deleted. This decision impacts Google’s, Amazon’s and Microsoft’s online advertising businesses.
50
DuckDuckGo email protection beta now open
DuckDuckGo Email Protection is a free email forwarding service that removes multiple kinds of trackers and lets you create unique private email addresses.
51
LogJ4 Security Inquiry – Response Required
On Friday January 21, 2022 I received this email. I tweeted about it and it took off like crazy. The email comes from a fortune-500 multi-billion dollar company that apparently might be using a product that contains my code, or maybe they have customers who do. Who knows? My guess is that they do this … Continue…
52
53
Bitcoin's fungibility graveyard
Where the pipe-dream of Bitcoin’s real-world fungibility goes to die.
54
Tailnet Lock
Use this article learn how to decide who to trust when it comes to your tailnet’s coordination server and how nodes are added to your tailnet.
55
Prompt injection attacks against GPT-3
Riley Goodside, yesterday: Exploiting GPT-3 prompts with malicious inputs that order the model to ignore its previous directions. pic.twitter.com/I0NVr9LOJq- Riley Goodside (@goodside) September 12, 2022 Riley provided several examples. Here’s …
56
Signing Git commits with your SSH key (2021)
You could always sign Git commits with a GPG key, but now your SSH key is just as powerful!
57
Universal's Audible Watermark (2012)
This is my personal blog. The views expressed on this page are mine alone. Update, April 8, 2013: Can you hear it? Take the watermark listening test. Update, January 14, 2015: Check out the results of the listening test. A while ago, I wrote about my confusion regarding Weird Spotify Compression Artifacts. It turns…
58
Interoperability without sacrificing privacy: Matrix and the DMA
Matrix, the open protocol for secure decentralised communications
59
A Yubico FAQ about passkeys
Delve into Yubico's comprehensive guide about passkeys, a term encapsulating FIDO/WebAuthn credentials that offer a secure, passwordless experience.
60
Where did all the “reject” buttons come from?
More and more websites have added an option to say “no” to cookies and other tracking- as foreseen by the GDPR. Where did this trend come from?