1261
Facebook tracking is illegal in Europe
Meta must pay 1.2 billion euros for violating the EU regulation GDPR.
New
The latest blog posts to take off on Hacker News. 4,440 posts.
1262
Introducing passkeys in Chrome
We announced in October that passkey support was available in Chrome Canary. Today, we are pleased to announce that passkey support is now ...
1263
Google Zanzibar Through Our Eyes
Understanding Google's Zanzibar paper the way the Authzed team does.
1264
Pulling MikroTik into the Limelight Demystifying and Jailbreaking RouterS
A comprehensive guide to MikroTik internals, including IPC, hand-rolled cryptography, and a novel post-authentication jailbreak
1265
Tor Browser 12.0
Tor Browser 12.0 is now available. This new release updates Tor Browser to Firefox Extended Support Release 102.
1266
Telegram: No-SIM Signup, Auto-Delete All Chats, Topics 2.0 and more
With this update, you can have a Telegram account without a SIM card and set up a global timer to automatically delete messages in all new chats. Topics in groups are now even more powerful – and available for groups with 100+ members.
1267
A Year-End Letter from our Executive Director
This letter was originally published in our 2022 annual report. The past year at ISRG has been a great one and I couldn’t be more proud of our staff, community, funders, and other partners that made it happen. Let’s Encrypt continues to thrive, serving more websites around the world than ever before with excellent…
1268
Passwordless Authentication – Access Your Bitwarden Web Vault Without a Password
Logging into your Bitwarden vault just got easier! A new passwordless experience enables you to access your Bitwarden vault with another device.
1269
Why We’re Suing NSO
Some of the most courageous journalists in the world write for El Faro, a Salvadoran news organization whose fearless, independent reporting about corruption, violence, and human rights abuses in Central America has earned it the gratitude of readers all over the world—and the enmity of criminal gangs and…
1270
The clever reason scammers can’t spell (2019)
Anybody who doesn’t fall off their chair laughing is exactly who they want to talk to – Cormac Herley, Microsoft computer scientist.
1271
Memory Safe Languages in Android 13
Posted by Jeff Vander Stoep For more than a decade, memory safety vulnerabilities have consistently represented more than 65% of vulnerab...
1272
LastPass owner GoTo has been hacked
We recently concluded our investigation into the security incident first shared with customers in November of 2022 regarding unauthorized activity in a third-party cloud storage environment. We eliminated the threat actor’s access to the environment and found no evidence of additional compromise or threat actor…
1273
We found critical vulnerabilities in Hive Social
Dieser Artikel ist auch auf deutsch erschienen. Update: The vulnerabilities are currently no longer exploitable because Hive deactivated their servers. More details Following the Twitter takeover, a number of services promising to be an alternative gained traction. One of those is “Hive Social”, which reached more…
1274
New details on commercial spyware vendor Variston
The Threat Analysis Group shares new information on the commercial spyware vendor Variston.
1275
Lastpass Security Incident
Please refer to the latest article for updated information.nbs[..]
1276
1277
Meta’s Adversarial Threat Report, Third Quarter 2022
We’re sharing details about three deceptive networks we took down during the last quarter.
1278
Apple is becoming an ad company despite privacy claims
Apple’s ad business is growing fast. It tracks you in its apps and uses that data to sell ads despite its privacy claims.
1279
Investigating a backdoored PyPI package targeting FastAPI applications
In this post, we analyze a malicious PyPI package attempting to backdoor FastAPI applications.
1280
Spiral’s Homomorphic Encryption – Is This the Future of Privacy?
Find out how homomorphic encryption works and why it could be the future of (crypto) data privacy
1281
Hardening unused (sub)domains
Proper implementation of email hardening techniques can be beneficial even to (sub)domains that are not intended to be used with email.
1282
GitHub Copilot isn't worth the risk
Copilot may be a glimpse into the future of AI, but it comes with a lot of legal and security baggage.
1283
GrapheneOS attestation compatibility guide
Guide on using remote attestation in a way that's compatible with GrapheneOS.
1284
French court: refusing to disclose mobile passcode to law enforcement is a crime
The French Court of Cassation has ruled that people who are suspected or accused of a crime are obliged to reveal the passcode of their mobile phone to the investigative authorities.
1285
Portmaster 1.0 – Open-Source Network Monitor and Privacy Firewall
Portmaster is a free and open-source application that puts you back in charge over all your computer's network connections. Increase your privacy and security. Get peace of mind.
1286
1287
An AWS account just for getting into other AWS accounts
“An AWS account just for getting into other AWS accounts” has moved to https://src-bin.com/substrate/blog/an-aws-account-just-for-getting-into-other-aws-accounts/ .
1288
1289
A few of my favourite things about the OpenBSD Packet Filter tools
Guest Post: How to use PF features and tools.
1290
OpenSSL 3.0.7 fixes X.509 email address buffer overflows
Today we published an advisory about CVE-2022-3786 (“X.509 Email Address Variable Length Buffer Overflow”) and CVE-2022-3602 (“X.509 Email Address 4-byte Buffer Overflow”).