1171
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 1,584 posts.
1172
1173
Instagram can track anything you do on any website in their in-app browser
I work with U.S. law firms as a non-testifying technical consulting expert on matters involving the Apple platform and iOS apps. Learn more about my litigation consulting.
1174
I Went to SQL Injection Court
Chicago argued that answering a FOIA request with a database query means creating a new record. Matt Chapman sued, I wound up on the stand explaining SQL, and now there's a bill to fix it.
1175
Confirmed: The NSA is Spying on Millions of Americans
Today, the Guardian newspaper confirmed what EFF (and many others) have long claimed: the NSA is conducting widespread, untargeted, domestic surveillance on millions of Americans. This revelation should end, once and for all, the government's long-discredited secrecy claims about its dragnet...
1176
1177
Use of Google Analytics declared illegal by French data protection authority
In reaction to the invalidation of the Privacy Shield in July 2020 by the Court of Justice of the European Union (CJEU), US President Joe Biden adopted on 7 October 2022 a new legal framework (Executive Order) to strengthen safeguards on the collection and use of personal data by US intelligence agencies.
1178
1179
Smartphones with Qualcomm chip secretly send personal data to Qualcomm
Nitrokey security research reveals that smartphones with Qualcomm chips secretly send device data to Qualcomm without user consent. NitroPhone is not affected.
1180
That Secret Service SIM farm story is bogus
It's just normal crime
1181
There is no WhatsApp 'backdoor'
Today, The Guardian published a story falsely claiming that WhatsApp’s end-to-end encryption contains a “backdoor.”
1182
How is NSA breaking so much crypto?
There have been rumors for years that the NSA can decrypt a significant fraction of encrypted Internet traffic. In 2012, James Bamford published an article quoting anonymous former NSA officials stating that the agency had achieved a “computing breakthrough” that gave them “the ability to crack current public…
1183
New study: Google manipulates users into constant tracking
Today, the Norwegian Consumer Council has filed a complaint against Google. Based on new research Google is accused of using deceptive design and misleading information, which results in users accepting to be constantly tracked
1184
Firefox 83 introduces HTTPS-Only Mode
Security on the web matters. Whenever you connect to a web page and enter a password, a credit card number, or other sensitive information, you want to be sure ...
1185
EFF sues Proctorio on behalf of student falsely DMCA'd
Phoenix, Arizona—The Electronic Frontier Foundation (EFF) filed a lawsuit today against Proctorio Inc. on behalf of college student Erik Johnson, seeking a judgment that he didn’t infringe the company’s copyrights when he linked to excerpts of its software code in tweets criticizing the software...
1186
The New York Times Is Now Available as a Tor Onion Service
Updated: March 4, 2025
1187
The All-Seeing “i”: Apple Just Declared War on Your Privacy
“Under His Eye,” she says. The right farewell. “Under His Eye,” I reply, and she gives a little nod.
1188
Delve – Fake Compliance as a Service
How Delve managed to falsely convince hundreds of customers they were compliant and then lied about it when exposed and called out
1189
1190
1191
1192
1193
Smuggling arbitrary data through an emoji
With ZWJ (Zero Width Joiner) sequences you could in theory encode an unlimited amount of data in a single emoji.
1194
Google Antigravity exfiltrates data via indirect prompt injection attack
An indirect prompt injection in an implementation blog can manipulate Antigravity to invoke a malicious browser subagent in order to steal credentials and sensitive code from a user’s IDE.
1195
The Insecurity Industry
The greatest danger to national security has become the companies claiming to protect it
1196
1197
The quiet renovation at Bitwarden
Back in March, I wrote about Bitwarden doubling their Premium price — and specifically how they did it. Buried in a feature announcement. Priced in fake...
1198
Password Rules Are Bullshit
Of the many, many, many bad things about passwords, you know what the worst is? Password rules. Let this pledge be duly noted on the permanent record of the Internet. I don’t know if there’s an afterlife, but I’ll be finding out soon enough, and I plan
1199
EUCLEAK Side-Channel Attack on the YubiKey 5 Series
Download the Writeup Illustration Romain Flamand – Flamingo Studio – flamandromain@gmail.com Abstract Secure elements are small microcontrollers whose main purpose is to generate/store secrets and then execute cryptographic operations. They undergo the highest level of security evaluations that exists (Common…
1200
The Problem with Perceptual Hashes
Apple just announced that they will use “perceptual hashing” to detect illegal photos on iPhones. I have some experience to share on this technology.