1291
Mitmproxy 9: WireGuard Mode
We’re excited to announce the release of mitmproxy 9, a free and open source interactive HTTPS proxy. This release brings support for raw UDP and DTLS, a new WireGuard proxy mode, and major usability improvements.
New
The latest blog posts to take off on Hacker News. 4,440 posts.
1292
Patch OpenSSL on November 1 to avoid “critical” security vulnerability
The GlobalSign blog is the top resource to see what's trending in public key infrastructure (PKI), SSL/TSL, digital signing solutions, cybersecurity & more!
1293
The Iran Firewall: A preliminary report
The Internet is easily censored. The neo-liberal's got their arses kicked. The big players like Google/Apple/AWS are partly to blame. China runs the GFI.
1294
Apple security bounty upgraded
Apple’s Security Bounty program has paid nearly $20 million in rewards to security researchers in just two and a half years. Our new site makes it easier than ever for researchers to submit reports on the web, get real-time updates from Apple engineering, and earn recognition for helping to improve security for the…
1295
Towards the next generation of XNU memory safety: kalloc_type
Improving software memory safety is a key security objective for engineering teams across the industry. Here we begin a journey into the XNU kernel at the core of iOS and explore the intricate work our engineering teams have done to harden the memory allocator and make our software much more difficult to exploit.
1296
Making an SSH client the hard way
Explore Tailscale SSH Console, a web-based SSH client that simplifies connecting to your devices. Learn how Tailscale integrates WebAssembly, WireGuard, and SSH for secure, password-free access right from your browser."
1297
Ad blocking is under attack (2017)
Well, this is huge, so I'd like to draw your attention to what's happening right now. This is a very alarming case, and it concerns every ad blocker user.
1298
Where did all the “reject” buttons come from?
More and more websites have added an option to say “no” to cookies and other tracking- as foreseen by the GDPR. Where did this trend come from?
1299
How to request removal of your contact info from Google search results
A new tool in Google Search can help you easily control whether your personally-identifiable information can be found in Search results.
1300
I recorded user behaviour on my competitor’s websites (2018)
A test that hijacked the Chrome back button to send visitors to a fake Google results page, then to mirrored competitor pages where heatmaps, sessions and typing were recorded. Google de-indexed the whole domain.
1301
Stranger Strings: An exploitable flaw in SQLite
Trail of Bits is publicly disclosing CVE-2022-35737, which affects applications that use the SQLite library API. CVE-2022-35737 was introduced in SQLite version 1.0.12 (released on October 17, 2000) and fixed in release 3.39.2 (released on July 21, 2022). CVE-2022-35737 is exploitable on 64-bit systems, and…
1302
Global Encryption Day: Demand End-to-End Encryption in DMs
Today is Global Encryption Day, a day to highlight why encryption is critical for a safe, private internet.
1303
Social engineering dos and don'ts
Another day, another success at sneaking into a building and pretending to be staff. I do so love drinking other people’s expensive office coffee. No fruit bowls though. Close, but no banana. It got me thinking, again, about what makes for good social engineering (SE), and what advice would I give my younger self…
1304
EasyList is in trouble and so are many ad blockers
One of the world’s most popular ad blocking filter lists, EasyList, has run into a serious issue that threatens to tank it, as well as many open-source projects that rely on it. See if this affects you personally, and how you can help.
1305
Brave browser now blocks cookie banners
New versions of Brave will hide—and, where possible, completely block—cookie consent notifications. Brave's approach is distinct and more privacy-preserving than similar systems used in other browsers.
1306
IDA cybersecurity software provider Hex-Rays acquired
Liège (BE), October 14, 2022 – Hex-Rays, a Belgian cybersecurity company that develops advanced reverse engineering software solutions, has been acquired by a consortium of investors led by Smartfin, a leading European venture capital and private equity investor, and including co-investors SFPIM and SRIW. Ilfak…
1307
Fine-grained personal access tokens for GitHub
Fine-grained personal access tokens offer enhanced security to developers and organization owners, to reduce the risk to your data of compromised tokens.
1308
Firefox Private Browsing mode upgrade
October is one of our favorite months of the year with autumn and Cybersecurity Awareness Month. We’re supporting Cybersecurity Awareness with Private Br
1309
Reverse Engineer’s Perspective on the Boeing 787 ‘51 days’ Directive
Uncover the implications of hacking a Boeing 787 as we analyze recent FAA directives and aviation technology concepts.
1310
1311
Chaos Computer Club saves the German healthcare system 400M Euros
Zur Verbindung mit dem Gesundheitsdatennetz „Telematik“ sind in deutschen Arztpraxen spezielle Router vorgeschrieben. Nach nur fünf Jahren Laufzeit soll nun ein Gerätetausch alternativlos sein – so...
1312
Disposable Root Servers
Unlimited, free and dedicated Kali Linux Root Shells - readily set up for hackers. Traffic via VPNs. Accessible directly or via TOR. NO LOGZ.
1313
Microsoft Office 365 Message Encryption Insecure Mode of Operation
This blogpost, written by WithSecure’s STINGR Group, presents the analysis of a security incident that happened in February 2026 and was investigated by the WithSecure Incident Response team.
1314
Toyota suffered a data breach by accidentally exposing a secret key on GitHub
On October 7th, Toyota revealed a partial copy of their T-Connect source code had been accidentally exposed for 5 years, including access to data for over 290,000 customers.
1315
Removing SMS support from Signal Android (soon)
For many years, the Signal app on Android has supported sending and receiving plaintext SMS and MMS messages in addition to Signal messages. SMS and MMS are standardized communication protocols that allow mobile devices to send and transmit messages, and most people picking up their phone to text...
1316
Security of Passkeys in the Google Password Manager
Posted by Arnar Birgisson, Software Engineer We are excited to announce passkey support on Android and Chrome for developers to test today, ...
1317
Bringing passkeys to Android and Chrome
developers can enroll in the Google Play Services beta and use Chrome Canary. Both features will be generally available on stable channels
1318
The State of AWS Security
We analyzed trends in the implementation of security best practices and took a closer look at various types of misconfigurations that contribute to the most common causes of security breaches.
1319
A Memory Safe Implementation of the Network Time Protocol
Folkert and the team at Tweede golf are helping us to build a memory safe NTP implementation. We asked them to share their experience in this blog post. Thank you for your partnership and contributions, Tweede golf team! Josh Aas, Head of ISRG’s Prossimo project For the last few months we at Tweede golf have been…
1320
Protect your privacy and your phone number with Firefox Relay
When you share your personal phone number with anyone outside your circle of family and friends, it essentially gives them permission to call you anytime o