61
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 109 posts.
62
Why Telegram is insecure (2015)
Telegram, the encrypted messaging app loved by terrorists, has been in the news lately. Terrorists have long used existing commercial and…
63
FBI agent accidentally reveals own 8chan posts
Updated August 4, 2019: Added link to “A.C.L.U. Says F.B.I. Funded ‘Army’ To Terrorize Young War Dissidents” The unsealing of an application for a search warrant by the federal governme…
64
65
The Definitive Guide on Win32 to NT Path Conversion (2016)
Posted by James Forshaw, path’ological reverse engineer.How the Win32 APIs process file pat...
66
Block Fingerprinting with Firefox
Browser fingerprinting is a hidden way websites and third parties can identify your web browser based on a mix of device details, settings, and system characteristics. Firefox helps prevent browser fingerprinting with built-in protections designed to reduce that tracking and give you more control over your online…
67
68
69
I can see your local web servers
How many web servers are running on your machine right now? Do all of those development web servers have a secure login, and restrictive CORS permissions? You don’t know? Allow me to check for you:
70
Xfinity Is Man-in-the-Middle Attacking My Internet
Xfinity injected 581 lines of JavaScript into unencrypted traffic as a data-cap warning, creating MITM risks, accessibility failures, and slower loads.
71
72
EU Agencies Falsely Report More Than 550 Archive.org URLs as Terrorist Content
CORRECTION: This post previously identified the sender of the 550 falsely identified URLs as Europol's EU Internet Referral Unit (EU IRU). The sender was in fact, the French national Internet Referral Unit, using Europol's application, which sends the email from an @europol.europa.eu address. The EU IRU has informed…
73
My application ran away and called home from Redmond
I recently found a surprising leak vector in Windows 10 installations. We were porting our Beacon to Windows and for easy deployment…
74
75
I was seven words away from being spear-phished
Three weeks ago I received a very flattering email from the University of Cambridge, asking me to judge the Adam Smith Prize for Economics:
76
77
Microsoft finds privilege escalation vulnerability in Huawei driver
Our discovery of two privilege escalation vulnerabilities in a driver highlights the strength of Microsoft Defender ATP’s sensors. These sensors expose anomalous behavior and give SecOps personnel the intelligence and tools to investigate threats, as we did.
78
Password Managers: Under the Hood of Secrets Management
February 19, 2019
79
How does Apple privately find offline devices?
At Monday’s WWDC conference, Apple announced a cool new feature called “Find My”. Unlike Apple’s “Find my iPhone”, which uses cellular communication and the lost…
80
Critical Security Issue Identified in iTerm2
A security audit funded by Mozilla has discovered a critical security vulnerability in the widely used macOS terminal emulator iTerm2.
81
Modern Alternatives to PGP
Did your last Yubikey just break? Perhaps you forgot an offline backup password. Maybe you’re just tired of living like a spy and never using smartphones. Whatever it is, you’re here, and you’re finally ready to give up on PGP. That’s great! We’re here to help! No one was sending you encrypted emails anyway, so that’s…
82
ETS Isn't TLS and You Shouldn't Use It
The good news: TLS 1.3 is available, and the protocol, which powers HTTPS and many other encrypted communications, is better and more secure than its predecessors (including SSL). The bad news: Thanks to a financial industry group called BITS, there’s a look-alike protocol brewing called ETS (or...
83
Dear Search Guard Users
We’ve filed a lawsuit against the makers of Search Guard. Here is what we know, the actions we’re taking, and potential impact to Search Guard users.
84
85
Behind the One-Way Mirror: A Dive into the Technology of Corporate Surveillance
It's time to shed light on the technical methods and business practices behind third-party tracking. For journalists, policy makers, and concerned consumers, this paper will demystify the fundamentals of third-party tracking, explain the scope of the problem, and suggest ways for users and legislation to fight back…
86
New study: Google manipulates users into constant tracking
Today, the Norwegian Consumer Council has filed a complaint against Google. Based on new research Google is accused of using deceptive design and misleading information, which results in users accepting to be constantly tracked
87
China's New Cybersecurity Program: No Place to Hide
Chinese distributors can help foreign companies reach customers without setting up a business in China. The wrong agreement can leave a supplier locked into years of poor sales, trademark disputes, or regulatory problems. Here are ten issues we address before a client signs.
88
Sinkholed
On 26 Nov 2019 at 14:55 UTC, I logged into my server that hosts my website to perform a simple maintenance activity. Merely three minutes later, at 14:58 UTC, the domain name susam.in used to host this website was transferred to another registrant without any authorisation by me or without any notification sent to me…
89
Hey advertisers, track this
If it feels like the ads chasing you across the internet know you a little too well, it’s because they do (unless you’re an avid user of ad blockers, i
90
Elliptic Curve Cryptography Explained
Fang-Pen Lin's blog about programming