New
The latest blog posts to take off on Hacker News. 4,441 posts.
Tor's Fall Harvest: The Next Generation of Onion Services
We are hyped to present the next generation of onion services! We've been working on this project non-stop for the past 4 years and we officially launched it two weeks ago by publishing our first alpha releases. All in all, the new system is a well needed improvement that fixes many shortcomings of the old design, and…
How Adversarial Attacks Work
Emil Mikhailov is the founder of XIX.ai [http://XIX.ai] (YC W17). Roman Trusov is a researcher at XIX.ai. Recent studies by Google Brain have shown that any machine learning classifier can be tricked to give incorrect predictions, and with a little bit of skill, you can get them to give pretty much any result you…
Yubico announces tiny, cheap YubiHSM 2
Learn more about what's happening within the tech and cybersecurity industry and the developments in our business and security keys within our Yubico Blog.
Trusting transferred root certificates
Mozilla’s Root Store Program has taken the position that trust is not automatically transferable between organizations. This is specifically stated in section 8 of our Root Store Policy v2.5, which ...
Standalone Signal Desktop
Signal Desktop is now available in a new, standalone form, and the Chrome App has been deprecated.
Do you need a VPN?
Early this year, the U.S. Congress rolled back Internet privacy rules, giving service providers free reign to track, store and sell browsing data. In July,
Firefox takes a bite out of the canvas ‘super cookie’
The Sophos Blog
The New York Times Is Now Available as a Tor Onion Service
Updated: March 4, 2025
Reasonably Secure Computing in the Decentralized World
Joanna Rutkowska recently gave a presentation titled “Reasonably Secure Computing in the Decentralized World (An Operating System Architect’s Perspective)” at a public event hosted by The Golem Project in Berlin, Germany called “Golem and Friends: Data, Security, Scaling and More….” The...
Why ProtonMail is more secure than Gmail
Proton Mail is a private email service takes a radically different approach to security. Find out how Proton Mail security compares to Gmail security.
The First PS4 Kernel Exploit: Adieu
Now we will step back a bit and explain how we managed to jump from the browser process into the kernel such that ps4-kexec et al. are usable.
Purism Librem Laptops Completely Disable Intel’s Management Engine
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
Browser security beyond sandboxing
Read the latest about Microsoft Defender for Cloud Apps, and find helpful solutions from the digital security experts at Microsoft Security Blog.
ACME Support in Apache HTTP Server Project
We’re excited that support for getting and managing TLS certificates via the ACME protocol is coming to the Apache HTTP Server Project (httpd). ACME is the protocol used by Let’s Encrypt, and hopefully other Certificate Authorities in the future. We anticipate this feature will significantly aid the adoption of HTTPS…
Infineon RSA Key Generation Issue
Learn more about what's happening within the tech and cybersecurity industry and the developments in our business and security keys within our Yubico Blog.
DAG Rosenstein’s “Responsible Encryption” Demand Is Bad
Deputy Attorney General Rod Rosenstein delivered a speech on Tuesday about what he calls “responsible encryption” today. It misses the mark, by far. Rosenstein starts with a fallacy, attempting to convince you that encryption is unprecedented: Our society has never had a system where evidence of...
Adguard found 220 sites that launch mining when a user opens their main page
AdGuard is the best way to get rid of annoying ads and online tracking and protect your computer from malware. Make your web surfing fast, safe and ad-free
Dutch Data Protection Authority: Microsoft breaches law with Windows 10
Met deze test controleren we of u een mens bent. Hiermee voorkomen we ongeoorloofd gebruik van deze dienst.
Exploiting the Wi-Fi Stack on Apple Devices
Posted by Gal Beniamini, Project ZeroIn this blog post we’ll complete our goal of achieving...
Why Constant-Time Crypto?
In 1996, Paul Kocher published a novel attack on RSA, specifically on RSA implementations , that extracted information on the private key by simply measuring the time taken by the private key operation on various inputs. It took a few years for people to accept the idea that such attacks were practical and could be…
Using Binary Diffing to Discover Windows Kernel Memory Disclosure Bugs
Posted by Mateusz Jurczyk of Google Project ZeroPatch diffing is a common technique of comparing ...
Disqus Security Alert: User Info Breach
More publishers trust us to engage, grow, and understand their audiences than any other. Build your on-site community with Disqus.
How to defeat Ed25519 and EdDSA using faults
The Latest News from Research at Kudelski Security
iOS 11's Misleading "Off-Ish" Setting for Radios Is Bad for User Security
Turning off your Bluetooth and Wi-Fi radios when you’re not using them is good security practice (not to mention good for your battery usage). When you consider Bluetooth’s known vulnerabilities, it’s especially important to make sure your Bluetooth and Wi-Fi settings are doing what you want them...