1171
New macOS malware steals info, including a user's entire Keychain database
ThreatDown detects new macOS malware like MacStealer that targets Keychain databases and steals sensitive user information. Talk to our security team.
New
The latest blog posts to take off on Hacker News. 4,440 posts.
1172
Supabase Auth: SSO, Mobile, and Server-Side Support
Supacharging Supabase Auth with Sign in with Apple on iOS, Single-Sign-On support with SAML 2.0, and PKCE for server-side rendering and mobile auth.
1173
Deploying key transparency at WhatsApp
WhatsApp has launched a new cryptographic security feature to automatically verify a secured connection based on key transparency. The feature requires no additional actions or steps from users an…
1174
Firefox rolls out Total Cookie Protection by default to more users
Updated Aug. 28, 2024. Take back your privacy Firefox is rolling out Total Cookie Protection by default to more Firefox users worldwide, making Firefox the
1175
1176
What happens when you leak AWS credentials and how AWS minimizes the damage
I heard multiple times that AWS scans public GitHub repositories for AWS credentials and informs its users of the leaked credentials.
1177
Was there a U.S. nuclear weapons accident at a Dutch air base?
A photo in a Los Alamos National Laboratory (LANL) student briefing from 2022 shows four people inspecting what appears to be a damaged B61 nuclear bomb.
1178
Germany opposes client-side scanning planned by EU
Germany opposes client-side scanning planned by EU - it would create an unprecedented surveillance monster that violates fundamental rights.
1179
1180
AAD misconfiguration led to Bing.com results manipulation, account takeover
How Wiz Research found a common misconfiguration in Azure Active Directory that compromised multiple Microsoft applications, including a Bing management portal
1181
Spyware vendors use 0-days and n-days against Android, iOS and Chrome
Google’s Threat Analysis Group (TAG) tracks actors involved in information operations (IO), government backed attacks and financially motivated abuse. For years, TAG has…
1182
Messaging layer security: Secure and usable end-to-end encryption
The IETF has approved publication of Messaging Layer Security (MLS), a new standard for end-to-end security that will make it easy for apps to provide the highest level of security to their users. End-to-end encryption is an increasingly important security feature in Internet applications. It keeps users’ information…
1183
1184
EU Commission doesn't understand what's written in its own chat control bill
Ylva Johansson is the EU Commissioner in charge of the Chat Control Bill. In recent days she has taken part in several interviews in Swedish media and also spoken in front of EU parliament members.
1185
The chat control proposal does not belong in democratic societies
The European Commission is working on a legislative proposal called chat control. If the law goes into effect, all EU citizens will have their communications monitored and audited. Now is the time to stop it.
1186
Reliability via Automated Renewal Information
The Let’s Encrypt team is excited to announce that ACME Renewal Information (ARI) is live in production! ARI makes it possible for our subscribers to handle certificate revocation and renewal as easily and automatically as the process of getting a certificate in the first place. With ARI, Let’s Encrypt can signal to…
1187
We updated our RSA SSH host key
At approximately 05:00 UTC on March 24, out of an abundance of caution, we replaced our RSA SSH host key used to secure Git operations for GitHub.com.
1188
Block: Inflated user metrics and “frictionless” fraud facilitation
Initial Disclosure: After extensive research, we have taken a short position in shares of Block, Inc. (NYSE: SQ). This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.
1189
Supreme Court asked to strike down immunity for police who brutally beat student
ARLINGTON, Va.—A new cert petition before the United States Supreme Court asks the Justices to strike down an immunity recognized by a lower court for […]
1190
Tracking the Fake GitHub Star Black Market
Use Dagster, dbt, and BigQuery to analyze suspicious GitHub star activity and protect open-source credibility.
1191
1192
What happens when your phone is spying on you
Smartphone spyware apps that allow people to spy on each other are not only hard to notice and detect, they also will easily leak the sensitive personal information they collect, says a team of computer scientists from New York and San Diego.
1193
1194
Vulnerabilities in the TPM 2.0 reference implementation code
In this blog post we discuss the details of two vulnerabilities we discovered in the Trusted Platform Module (TPM) 2.0 reference implementation code. These two vulnerabilities, an out-of-bounds write (CVE-2023-1017) and an out-of-bounds read (CVE-2023-1018), affected several TPM 2.0 software implementations (such as…
1195
The threat on your desk: Building an evil USB-C dock
BadUSB attacks have been a threat for years, but is the USB-C dock sitting on your desk the latest threat in disguise?
1196
Malvertising on Google Ads
Criminals are disguising malware as popular software, so users need to think twice before clicking the download button.
1197
Remote Code Execution as a Service
Learn how Earthly Compute, a remote code execution as a service, was built to handle bursty workloads and provide secure and fast remote execution ...
1198
Young people in 13 EU countries refuse surveillance of online communication
Poll: the 80% would not feel comfortable being politically active or exploring their sexuality if authorities can monitor their communication.
1199
Norway takes a stance against Google Analytics
Norway is the latest country to declare Google Analytics in violation with the GDPR
1200
Mullvad becomes highest level of Tor Member (Shallot)
Mullvad has been a Tor Project Vidalia Onion Member since 2021 and has now become a Shallot Onion Member of Tor.