121
Facebook's GDPR consent bypass reaches Austrian Supreme Court
Austrian Supreme Court may refer case to Court of Justice, questioning the basis of Facebook's business model in Europe.
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 138 posts.
122
Security keys are now supported for SSH Git operations
You can now use FIDO2 security keys to authenticate over SSH for remote Git operations, providing a higher level of account security.
123
GitHub Actions update: Helping maintainers combat bad actors
The trustworthiness of our platform is crucial, and our team is committed to developer productivity and Actions performing the way we intended.
124
Representing SHA-256 Hashes as Avatars
How to turn 256 bits of entropy into a beautiful, avatar-friendly circular SVG: the Hashvatar.
125
The case of the recursive resolvers: What happened during Slack’s DNSSEC rollout
On September 30th 2021, Slack had an outage that impacted less than 1% of our online user base, and lasted for 24 hours. This outage was the result of our attempt to enable DNSSEC — an extension intended to secure the DNS protocol, required for FedRAMP Moderate — but which ultimately led to a series of…
126
Serial swatter who caused death gets five years in prison
A 18-year-old Tennessee man who helped set in motion a fraudulent distress call to police that led to the death of a 60-year-old grandfather in 2020 was sentenced to 60 months in prison today.
127
Project Jengo Redux: Cloudflare’s Prior Art Search Bounty Returns
On March 15th, 2021, Cloudflare was sued by a patent troll called Sable Networks. Today, we are launching our efforts to fight back.
128
No, RSA Is Not Broken
I have been seeing this paper by cryptographer Peter Schnorr making the rounds: “Fast Factoring Integers by SVP Algorithms.” It describes a new factoring method, and its abstract ends with the provocative sentence: “This destroys the RSA cryptosystem.” It does not. At best, it’s an improvement in factoring—and I’m not…
129
Cross-Account Container Takeover in Azure Container Instances
Affecting Azure Container Instances, Azurescape is the first known cross-account container takeover in the public cloud.
130
Clover Health: How Chamath Lured Retail Investors into a Broken Business
Initial Disclosure: This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report. We have no position (short or long) in Clover Health because we think in this moment for public markets, it is more important for people to…
131
Reading the AGPL
a guided introduction for first-timers
132
How Not to Redact a Warhead
How the wrong settings on a photocopier has let us have a glimpse at a forbidden image of a modern thermonuclear warhead.
133
Limiting Private API Availability in Chromium
During a recent audit, we discovered that some third-party Chromium based browsers were able to integrate Google features, such as Chrome sy...
134
135
Arti, a pure-Rust Tor implementation
Greetings! Today I'm happy to announce a new era in Tor implementation. Over the past year or so, we've been working on "Arti", a project to rewrite Tor in Rust. Thanks to funding from Zcash Open Major Grants (ZOMG), we can finally put the Arti project up in our priorities list, and devote more time to it. Below I'll…
136
TPM Sniffing
TL;DR : we reproduced Denis Andzakovic’s proof-of-concept showing that it is possible to read and write data from a BitLocker-protected device (for instance, a stolen laptop) by sniffing the TPM key from the LCP bus.
137
The security scanner that cried wolf
If you’ve ever been alarmed by how many security vulnerabilities your Docker image has, even after you’ve installed security updates, here’s what’s going on.
138
