1411
Fuzzing rust-minidump for Embarrassment and Crashes – Part 2
For the last year, we've been working on the development of rust-minidump. The final part in this series takes you through fuzzing rust-minidump.
New
The latest blog posts to take off on Hacker News. 4,440 posts.
1412
The curious tale of a fake Carrier.app
Posted by Ian Beer, Google Project Zero NOTE: This issue was CVE-2021-30983 was fixed in iOS 15...
1413
Reverse Engineering Google Colab
Take a peek into the internals of Google Colab, and discover how we can bend the rules of Colab a little in order to adapt it to our MLOps workflow
1414
Tailscale SSH
Use this guide to setup Tailscale SSH. Learn how it transforms SSH connectivity by using your Tailscale identity for authentication. Enjoy simplified setup, added security with WireGuard®, and customizable access with ACLs. Ideal for managing secure connections across your tailnet.
1415
Are blockchains decentralized?
A new Trail of Bits research report examines unintended centralities in distributed ledgers Blockchains can help push the boundaries of current technology in useful ways. However, to make good risk decisions involving exciting and innovative technologies, people need demonstrable facts that are arrived at through…
1416
SSO should be table stakes
Withholding security for money feels a little gray-hat.
1417
We are removing the option to create new subscriptions
In order to store less data we will no longer accept NEW PayPal and Credit card subscriptions (recurring payments). One-time payments are not affected.
1418
Linux Threat Hunting: ‘Syslogk’ a kernel rootkit found in the wild
Syslogk Rootkit Revealed: Analysis
1419
A Quick Look at QUIC Censorship
An introduction to QUIC and its potential for censorship resistance, as well as a survey of current QUIC blocking in China, India, Russia and Uganda.
1420
Apple’s macOS Ventura – New Security Changes
With macOS 13, Apple have made some bold and potentially disruptive changes to Mac security. We explore them here.
1421
Bunny fonts – privacy respecting drop-in replacement for Google Fonts
Strengthen your privacy, improve your performance and give your website a personality by using Bunny Fonts. The only fully GDPR fonts powered by a CDN!
1422
Exploiting a heap overflow in the FreeBSD wi-fi stack
In April of this year, FreeBSD patched a 13-year-old heap overflow in the Wi-Fi stack that could allow network-adjacent attackers to execute arbitrary code on affected installations of FreeBSD Kernel. This bug was originally reported to the ZDI program by a researcher known as m00nbsd and patched in
1423
Protecting Against Browser-Language Fingerprinting
Brave has further strengthened its fingerprinting protections by preventing users from being identified based on preferred browser language. Starting with version 1.39, Brave randomizes how your browser informs sites of what language(s) you’ve set as default, and what fonts you have installed on your system.
1424
Retrofitting Temporal Memory Safety on C++
Eliminating use-after-frees vulnerabilities in Chrome with heap scanning.
1425
“Crypto drainer” template facilitates theft
Crypto Drainers are phishing pages that lure victims into signing malicious transactions that allow the attacker to siphon their crypto and NFTs.
1426
Firefox rolls out Total Cookie Protection by default to all users
Updated Aug. 28, 2024. Take back your privacy Firefox is rolling out Total Cookie Protection by default to more Firefox users worldwide, making Firefox the
1427
Making popular Ruby packages more secure
News and updates from the RubyGems team — releases, security advisories, and project announcements.
1428
Developer's Guide to SaaS Compliance
This article reviews what kinds of compliance certifications and regulations exist, what they mean for developers, and how to begin the certification process.
1429
If OpenSSL were a GUI
What if OpenSSL were a GUI program? Here's what it might look like.
1430
Important PostgreSQL 14 update to avoid silent corruption of indexes
Join thousands of people who own a premium domain. Affordable financing available.
1431
1432
Bluetooth signals can be used to identify and track smartphones
A team of engineers at the University of California San Diego has demonstrated for the first time that the Bluetooth signals emitted constantly by our mobile phones have a unique fingerprint that can be used to track individuals’ movements.
1433
Public CDNs Are Useless and Dangerous
Once upon a time, loading common scripts & styles from a public CDN like cdnjs or Google's Hosted Libraries was a 'best practice' - a great way to instantly...
1434
Private Access Tokens: eliminating CAPTCHAs on iPhones and Macs with open standards
Today we’re announcing Private Access Tokens, a completely invisible, private way to validate that real users are visiting your site
1435
MongoDB Releases Queryable Encryption Preview
Today we are announcing the preview release of Queryable Encryption which allows customers to encrypt sensitive data from the client side, store it as fully randomized encrypted data on the database server side, and run expressive queries on the encrypted data. Learn more.
1436
Zero-Day Exploitation of Atlassian Confluence
UPDATE: On June 3, 2022, Atlassian updated its security advisory with new information regarding a fix for Confluence Server and Data Center to address CVE-2022-26134. Users are encouraged to update immediately to […]
1437
1438
Turkish Magician Built a $600M Nasdaq-Listed Scam Based on Lies
Initial Disclosure: After extensive research, we have taken a short position in shares of Enochian Biosciences, Inc. (NASDAQ:ENOB). This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.
1439
Tim Hortons app violated laws in collection of ‘vast amounts’ of location data
GATINEAU, QC , June 1, 2022 – People who downloaded the Tim Hortons app had their movements tracked and recorded every few minutes of every day, even when their app was not open, in violation of Canadian privacy laws, a joint investigation by federal and provincial privacy authorities has found.
1440
Top-500 NPM package maintainers now require 2FA
Two-Factored Authentication (2FA) is now enforced for maintainers of the top-500 packages, by dependents, on the npm registry. To learn more about configuring 2FA, see Configuring two-factor authentication. To learn…