1321
Call for Participation to Chaos Computer Club’s 37C3
The Chaos Communication Congress is the Chaos Computer Club’s (CCC) annual symposium and hacker party.
New
The latest blog posts to take off on Hacker News. 4,440 posts.
1322
What can we learn from leaked Insyde's BIOS for Intel Alder Lake
Leaked story timeline According to the timestamp of the github repository, an unidentified user uploaded the Insyde’s partial firmware solution (4.
1323
Signal is secure, as proven by hackers
Users of the Signal messaging app got hit by a hacker attack. We analyze what happened and why the attack demonstrates that Signal is reliable.
1324
SimulaVR Has Been Subpoenaed by Meta Platforms, Inc
A few days ago we received a large packet in the mail from Meta's legal team informing us that SimulaVR has been subpoenaed for their antitrust case FTC vs. Meta Platforms , in relation to the government's recent injunction against their acquisition of a VR fitness company.
1325
1326
Ignore 98% of dependency alerts: introducing Semgrep Supply Chain
An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.
1327
Have lots of AWS accounts
“You should have lots of AWS accounts” has moved to https://src-bin.com/substrate/blog/you-should-have-lots-of-aws-accounts/ .
1328
New Pegasus spyware abuses identified in Mexico
Mexican digital rights organization R3D, with technical support from the Citizen Lab, has determined that Mexican journalists and a human rights defender were infected with Pegasus between 2019 and 2021. The infections occurred years after the first revelations of Pegasus abuses in Mexico, and after Mexico’s current…
1329
Microsoft bakes a VPN into Edge and turns it on
Microsoft has bundled a VPN with its Edge browser, and we expect others to follow suit. But can a built-in VPN replace a full-fledged VPN service, and is it a good example to follow? We give our take.
1330
Private profiles are now generally available on GitHub
Private profiles (now generally available) enables users to turn their GitHub profile "private", which gives users control over features that share user data across the GitHub platform. When a profile…
1331
Why to not use JWT (2021)
We build advanced web apps
1332
JWT vs. Opaque Tokens
In this article, you'll learn why you need JWT and opaque tokens, what the differences are between the two, and in which case you should select one or the other.
1333
Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
Any website can use a simple API to replace CAPTCHAs with our invisible alternative, whether they’re on the Cloudflare network or not.
1334
How Underground Groups Use Stolen Identities and Deepfakes
The growing appearance of deepfake attacks is significantly reshaping the threat landscape. These fakes brings attacks such as business email compromise (BEC) and identity verification bypassing to new levels.
1335
Zero Trust SIM
We’re announcing the first Zero Trust SIM: the next major part of Cloudflare One, combining both software and hardware layers to rethink mobile device security for organizations
1336
Manifest V3, webRequest, and ad blockers
Vivaldi comes with its own built-in Ad and Tracker Blocker, tons of customization options, a built-in Mail and Calendar, and more. Will it follow Google’s strict reliance on Manifest V3?
1337
9M Australians affected by Optus data breach
Optus notifies customers of a cyberattack that has allowed unauthorised access to customers personal information.
1338
1339
Google removed our website from search because it uses YouTube-dl
Update: Google accepted our DMCA counter notice and reinstated all 317 Kapwing webpages that they took down. In the week that the takedown was in effect, our website traffic was down 30%. A week ago, we received an email that every website owner dreads - a notification of a DMCA
1340
How to Bypass Cloudflare: A Comprehensive Guide
Learn the best hands-on techniques to bypass Cloudflare Bot Management. Understand how it works, its sensor data, and evade detection.
1341
Malvertising on Microsoft Edge's news feed pushes tech support scams
While Google Chrome still dominates as the top browser, Microsoft Edge, which is based on the Chromium source code, is gradually gaining more...
1342
The definitive guide to “modulo bias” and how to avoid it (2020)
The Latest News from Research at Kudelski Security
1343
1344
Attacking Firecracker: AWS' MicroVM Monitor Written in Rust
Why are more security teams adopting Firecracker? How secure is it, and how suitable is it for your organization? This guide dives into this trending innovation.
1345
A New Life for Certificate Revocation Lists
This month, Let’s Encrypt is turning on new infrastructure to support revoking certificates via Certificate Revocation Lists. Despite having been largely supplanted by the Online Certificate Status Protocol for over a decade now, CRLs are gaining new life with recent browser updates. By collecting and summarizing CRLs…
1346
Vulnerability Management for Go
Announcing vulnerability management for Go, to help developers learn about known vulnerabilities in their dependencies.
1347
Bitwarden raises $100M
A message from the Bitwarden CEO on accelerating value for Bitwarden users and customers.
1348
Peter Eckersley, co-creator of Let’s Encrypt, dies at just 43
The Sophos Blog
1349
Blocking Kiwifarms
We have blocked Kiwifarms. Visitors to any of the Kiwifarms sites that use any of Cloudflare's services will see a Cloudflare block page and a link to this post.
1350
The quantum state of Linux kernel garbage collection
A deep dive into an in-the-wild Android exploit Guest Post by Xingyu Jin, Android Security Resea...