1711
New
The latest blog posts to take off on Hacker News. 4,440 posts.
1712
Black Lotus Labs uncovers Linux executables deployed as stealth Windows loaders
The Lumen blog and newsroom is your source for business technology news and insights, customer stories, press and media, and trending articles.
1713
Tracing SSL/TLS connections using eBPF
Pixie Blog
1714
The ownership and future of Mullvad VPN
This article is by our founders and sole shareholders, Daniel Berntsson and Fredrik Strömberg. Mullvad VPN is here to stay, and we are not interested in ever selling it.
1715
Weaponizing Middleboxes for TCP Reflected Amplification
Censors pose a threat to the entire Internet.
1716
Why Authorization Is Hard
There's a fundamental tension in authorization. Is it business logic or authorization logic? Should it be in the app, or separate? Let’s talk about what makes a
1717
Automatic cipher suite ordering in Go’s crypto/tls
Go 1.17 is making TLS configuration easier and safer by automating TLS cipher suite preference ordering.
1718
"Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
Wiz Research recently discovered a series of alarming vulnerabilities that highlight the supply chain risk of open source code, particularly for customers of cloud computing services.
1719
(L)Awful Interception
One of democracy's foundations is the fact that all human beings have certain inalienable rights and freedoms. Suspended by trust and shared values. Today, trust and shared values are being replaced by “control and surveillance”.
1720
NSO Group iMessage Zero-Click Exploit Captured in the Wild
While analyzing the phone of a Saudi activist infected with NSO Group’s Pegasus spyware, we discovered a zero-day zero-click exploit against iMessage. The exploit, which we call FORCEDENTRY, targets Apple’s image rendering library, and was effective against Apple iOS, MacOS and WatchOS devices.
1721
Disclosing E2EE vulnerability in multiple Matrix clients
Matrix, the open protocol for secure decentralised communications
1722
We found a phone with pre-installed malware via the Lifeline Assistance program
We discovered yet another phone model with pre-installed malware provided from the Lifeline Assistance program via Assurance Wireless by Virgin Mobile.
1723
Cross-Account Container Takeover in Azure Container Instances
Affecting Azure Container Instances, Azurescape is the first known cross-account container takeover in the public cloud.
1724
How We Proved the Eth2 Deposit Contract Is Free of Runtime Errors
Consensys is a blockchain software company building the tools, infrastructure and research that power the new Era of Decentralized Finance, for a more secure and open economy
1725
The Privacy Lesson of 9/11: Mass Surveillance Is Not the Way Forward
Congress must ensure that the next generation of Americans is able to speak and associate freely, without fear of surveillance.
1726
HAProxy vulnerability enables HTTP request smuggling attacks
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
1727
Disinformation-for-hire in Kenya
Mozilla Fellows Odanga Madung and Brian Obilo reveal that Kenyan journalists, judges, and other members of civil society are facing coordinated disinformation campaigns on Twitter — and the site is doing very little to stop it.
1728
Nevada cops use civil forfeiture to steal a veterans life savings
Last February, while driving down a Nevada highway on the way to visit his daughters, Stephen Lara was robbed in plain sight. But his assailants […]
1729
Delays aren’t good enough – Apple must abandon its surveillance plans
Apple announced today that it would “take additional time over the coming months to collect input and make improvements” to a program that will weaken privacy and security on iPhones and other products. EFF is pleased Apple is now listening to the concerns of customers, researchers, civil liberties...
1730
1731
1732
NitroPhone – Pixel 4a phone with GrapheneOS
Nitrokey launches the NitroPhone, the most secure Android smartphone on the planet. Based on Pixel 6 and GrapheneOS with no Google, no backdoors and hardware security.
1733
Mozilla VPN Completes Independent Security Audit by Cure53
Today, Mozilla published an independent security audit of its Mozilla VPN, which provides encryption and device-level protection of your connection and inf
1734
Improving Git protocol security on GitHub
We’re changing which keys are supported in SSH and removing unencrypted Git protocol. If you’re an SSH user, read on for the details and timeline.
1735
YouTube starts to require a credit card or ID to verify the age in EU (2020)
We’ve taken important steps to make YouTube a safer place for families. We’re announcing a continuation of these efforts.
1736
Surveilance bill rushed through Australian parliament in 24 hours
New Australian surveillance bill enables police to hack your device, collect or delete your data, and take over your social media accounts.
1737
Tech-savvy audiences block Google Analytics
Is Google Analytics still useful and how accurate are its stats? How much data is missing from Google Analytics due to adblockers and privacy-friendly browsers?
1738
Role-based access control like it was meant to be
Learn about role-based access control, its use cases and benefits.
1739
1740
API Tokens: A Tedious Survey
Documentation and guides from the team at Fly.io.