1381
VRchat bans mods, embraces EAC
In VRChat 2022.2.2, we’re introducing two major improvements to the security of VRChat — Easy Anti-Cheat and Secure Instances.
New
The latest blog posts to take off on Hacker News. 4,440 posts.
1382
Dutch schools must stop using Google's email and cloud due to privacy concerns
Dutch Personal Data Authority raised concerns about Google's GDPR compliance.
1383
1384
Anti-Interdiction on the Librem 5 USA
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
1385
DNS-over-HTTP/3 in Android
Posted by Matthew Maurer and Mike Yu, Android team To help keep Android users’ DNS queries private, Android supports encrypted DNS. I...
1386
FCC: TikTok is unacceptable security risk and should be removed from app stores
According to the FCC commissioner, TikTok is a video app in "sheep's clothing", suggesting a wolf hides underneath those funny videos.
1387
New documents reveal scale of US Government’s cell phone location data tracking
Thousands of previously unreleased records illustrate how government agencies sidestep our Fourth Amendment rights.
1388
Microsoft open sources Salus software bill of materials (SBOM) generation tool
Salus is a general purpose, enterprise-proven, build-time SBOM generator. It works across platforms including Windows, Linux, and Mac, and uses the standard Software Package Data Exchange (SPDX) format.
1389
Microsoft Windows Network File System v4 Remote Code Execution
In this excerpt of a Trend Micro Vulnerability Research Service vulnerability report, Guy Lederfein and Quintin Crist of the Trend Micro Research Team detail a recently patched remote code execution vulnerability in the Microsoft Windows operating system, originally discovered and reported by Yuki C
1390
We must protect our ability to transact privately online (2019)
Without cryptocurrency, a cashless society is a surveillance society
1391
Someone is impersonating us in a recruiting scam
Our startup was recently the center of an elaborate recruiting scam. What do other companies do if they realize that someone is impersonating them to attack vulnerable job seekers? This article gives advice to job seekers and shares our story.
1392
Are Magic Links Outdated?
Are magic links are still viable as an authentication method or are you better off using newer passwordless alternatives?
1393
Gambling and Adult content DNS blocking using Mullvad VPN
We have expanded our DNS blocking service with Gambling and Adult content filters!
1394
Rolling-PWN vulnerability affects all Honda vehicles
Modern vehicles are often equipped with a remote keyless entry system. These RKE systems allow unlocking or starting the vehicle remotely. The goal of our research was to evaluate the resistance of a modern-day RKE system. Our research disclosed a Rolling-PWN attack vulnerability affecting all Honda vehicles currently…
1395
Element (Matrix) launches Chatterbox, end-to-end encrypted embedded chat
We’re outrageously pleased to launch Chatterbox, an end-to-end encrypted embedded chat built on Matrix!
1396
SOC2: The screenshots will continue until security improves
We got SOC2 certified so now you have to pay us more.
1397
Meta Accounts: A New Login for VR
Today we’re introducing Meta accounts: a new way for people to log into their VR headsets that doesn’t require a Facebook account. When we announced that we would start requiring people to log into Meta Quest using a Facebook account, we received a lot of feedback from the Quest community. We took that feedback into…
1398
Taking action against scraping for hire
An update on what we're doing to protect people from scraping data on Facebook and Instagram.
1399
Apple previews Lockdown Mode
Apple today detailed two initiatives to help protect users who may be personally targeted by sophisticated digital threats.
1400
1401
We can't check the app permissions on Google Play anymore
Yep, Google removed the permissions list from Play Store, and we can no longer check the app permissions on it.
1402
Google now deleting health clinic searches from location history automatically
Editor's note – May 12, 2023Last year, we launched an important update to Location History. We remain committed to improving the experience and making it as helpful…
1403
Hardening attack surfaces with formally proven binary format parsers
With an eye toward performance, interoperability, or legacy concerns, low-level system software often must parse binary encoded data formats. Few tools are available for this task, especially since the formats involve a mixture of arithmetic and data dependence, beyond what can be handled by typical parser generators…
1404
Kaspersky: Poorly detected backdoor targeting governments and NGOs around globe
Kaspersky experts have brought to light a poorly detected SessionManager backdoor that was set up as a malicious module within the Internet Information Services (IIS), a popular web server edited by Microsoft. Once propagated, SessionManager enables a wide range of malicious activities, starting from collecting emails…
1405
EU Digital ID wallet is coming
As you were browsing something about your browser made us think you were a bot. There are a few reasons this might happen:
1406
TikTok updated privacy policy to collect faceprints and voiceprints (2021)
TikTok has violated privacy regulations before, and they are in position to share millions of American users' data with the Chinese government.
1407
De-anonymizing ransomware domains on the dark web
* We have developed three techniques to identify ransomware operators' dark websites hosted on public IP addresses, allowing us to uncover previously unknown infrastructure for the DarkAngels, Snatch, Quantum and Nokoyawa ransomware groups. * The methods we used to identify the public internet IPs involved matching…
1408
Detecting unauthorized physical access with beans, lentils and colored rice (2021)
strengthening digital self-defense | research and development | providing privacy-focused goods and services
1409
Memory safety for the world’s largest software project
Rust for Linux and Prossimo The Rust for Linux project aims to bring a new system programming language into the Linux kernel. Rust has a key property that makes it very interesting to consider as the second language in the kernel: it guarantees no undefined behavior takes place (as long as unsafe code is sound)…
1410
PyPI: Python packets steal AWS keys from users
Multiple Python packages caught by Sonatype were seen uploading secrets such as AWS keys and environment variables to a web endpoint.