Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 1,584 posts.
More Americans disapprove (53%) than approve (37%) of the government program that obtained telephone call logs and Internet communication records. Americans are split on whether leaker Edward Snowden did the right or wrong thing.
Search IETF mail list archives
The domain name registrar Freenom , whose free domain names have long been a draw for spammers and phishers, has stopped allowing new domain name registrations. The move comes after the Dutch registrar was sued by Meta , which alleges the company ignores abuse complaints about phishing websites while monetizing…
Scope. To talk about C++’s current safety problems and solutions well, I need to include the context of the broad landscape of security and safety threats facing all software. I chair the ISO C++ s…
We’ve taken important steps to make YouTube a safer place for families. We’re announcing a continuation of these efforts.
Anthropic's August 2025 threat intelligence report on AI cybercrime and other abuses.
Joe Duffy's Blog | Adventures in the high-tech underbelly
Lately, there's been an resurgence of new programs written for retro computers—everything from a Slack client to many Wordle clones, to a Mastodon client. But most of these programs, if they connect to the Internet, require a proxy running on a modern computer to handle the SSL/TLS connection, which almost all APIs…
Let's start with a quick quiz: Take a look at haveibeenpwned.com [https://haveibeenpwned.com/] (HIBP) and tell me where the traffic is encrypted between: You see HTTPS which is good so you know it's doing crypto things in your browser, but where's the other end of
Defend yourself against tracking and surveillance. Circumvent censorship. | Good Bad ISPs
We’ve filed a lawsuit against the makers of Search Guard. Here is what we know, the actions we’re taking, and potential impact to Search Guard users.
UC San Diego Jacobs School of Engineering2011133 points69 commentscited by 4Security & Privacy details
 UC San Diego computer scientists have built a software program that can perform key duplication without having the key. Instead, the computer scientists only need a photograph of the key.
As part of our commitment to security, we regularly monitor our services for actual, suspected, or attempted malicious or unusual activity. We recently investigated reports of an uptick of users recei[..]
Anthropic's new system, Clio, analyzes how people use AI while maintaining their privacy.
Robert O'Callahan. Christian. Kiwi. Software guy. All content human-authored unless otherwise noted.
Software engineer, Free, Open Source Software Consultant, Innovator, Fedora & Debian Developer
HTTP Public Key Pinning is a very powerful standard that allows a host to instruct a browser to only accept certain public keys when communicating with it for a given period of time. Whilst HPKP can offer a lot of protection, it can also cause a lot of harm too.
By @breenmachine What? The most underrated, underhyped vulnerability of 2015 has recently come to my attention, and I’m about to bring it to yours. No one gave it a fancy name, there were no …
Research on aligning AI with human values and intent, and reports documenting model failures.
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw.
A Ukrainian hacker who once hatched a plot to have heroin sent to my Virginia home and then alert police when the drugs arrived had his first appearance in a U.S. court today, after being extradited to the United States to face multiple cybercrime charges.
New paper: “Security Analysis of Pseudo-Random Number Generators with Input: /dev/random is not Robust, by Yevgeniy Dodis, David Pointcheval, Sylvain Ruhault, Damien Vergnaud, and Daniel Wichs. Abstract: A pseudo-random number generator (PRNG) is a deterministic algorithm that produces numbers whose distribution is…
New directive targets “anti-Christian,” “anti-American,” and “anti-capitalism” opinions
It's time to shed light on the technical methods and business practices behind third-party tracking. For journalists, policy makers, and concerned consumers, this paper will demystify the fundamentals of third-party tracking, explain the scope of the problem, and suggest ways for users and legislation to fight back…
Posted by Sam Schillace, Gmail Engineering Director In 2008, we rolled out the option to always use https — encrypting your mail as it trav...
