1801
Mimicking a device is becoming almost impossible
From User-Agent tricks to canvas hashes, see how modern device detection—Picasso, fonts, emojis, touch—makes spoofing fail. Learn how to blend in safely.
New
The latest blog posts to take off on Hacker News. 4,440 posts.
1802
AWS acquires Wickr
We’re excited to share that AWS has acquired Wickr, an innovative company that has developed the industry’s most secure, end-to-end encrypted, communication technology. With Wickr, customers and partners benefit from advanced security features not available with traditional communications services – across messaging…
1803
Rally, a novel privacy-first data sharing platform
Mozilla teams up with Princeton University researchers to enable crowdsourced science for public good; collaborates with research groups at Princeton, Stan
1804
1805
International coalition calls for action against surveillance-based advertising
Groups in Europe and U.S. ask for action to end practices that threaten citizens’ rights.
1806
A reference counting bug which leads to local privilege escalation in io_uring
Hello, I’m Shiga( @Ga_ryo_ ), a security engineer at Flatt Security Inc.
1807
AuthZ: Scalable permissions system
How we built an authorization system based on Google Zanzibar
1808
SLSA, an End-to-End Framework for Supply Chain Integrity
Posted Kim Lewandowski, Google Open Source Security Team & Mark Lodato, Binary Authorization for Borg Team Supply chain integrity attacks—u...
1809
DraftKings: a $21B SPAC betting it can hide its black market operations
Initial Disclosure: After extensive research, we have taken a short position in shares of DraftKings, Inc. This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.
1810
Supporting Let’s Encrypt, the nonprofit making HTTPS free for all
Today, we’re thrilled to be partnering with Let’s Encrypt, the world’s largest certificate authority.
1811
How to handle secrets on the command line
How to keep secret credentials safe on the command line.
1812
1813
Privacy Analysis of FLoC
In a previous post, I wrote about a new set of technologies “Privacy Preserving Advertising”, which are intended to allow for advertising without compr
1814
Privilege escalation with polkit: How to get root on Linux with a seven-year-ol
polkit is a system service installed by default on many Linux distributions. It’s used by systemd, so any Linux distribution that uses systemd also uses polkit.
1815
Fastmail accounts blocked in Russia, here's what we know
Fastmail is the latest email provider to be blocked by Russia.
1816
Sequoia 1.3
Sequoia is a modular OpenPGP implementation in Rust.
1817
The SaaS CTO Security Checklist Redux
Learn how to protect your SaaS applications with the SaaS CTO security checklist. Doing the basics goes a long way in keeping your company and product secure.
1818
Van Buren is a victory against overbroad interpretations of the CFAA
The Supreme Court’s Van Buren decision today overturned a dangerous precedent and clarified the notoriously ambiguous meaning of “exceeding authorized access” in the Computer Fraud and Abuse Act, the federal computer crime law that’s been misused to prosecute beneficial and important online...
1819
Noyb aims to end “cookie banner terror” and issues more than 500 GDPR complaints
Today, noyb.eu sent over 500 draft complaints to companies who use unlawful cookie banners - making it the largest wave of complaints since the GDPR came into force.
1820
Gentoo Freenode channels have been hijacked
News and information from Gentoo Linux
1821
Half-Double: New hammering technique for DRAM Rowhammer bug
Research Team: Salman Qazi, Yoongu Kim, Nicolas Boichat, Eric Shiu & Mattias Nissler Today, we are sharing details around our discovery of ...
1822
How Iran Uses Bitcoin Mining to Evade Sanctions and “Export” Oil
The US imposes an almost total economic embargo on Iran, including a ban on all Iranian imports and sanctions on Iranian financial institutions.
1823
1824
YouTube ads in Safari: you see them now, will you see them in the future?
Content blocking in Safari is a thing in and of itself, and it's not good. One of the consequences is ads appearing in YouTube. Why does it happen and can it be prevented?
1825
Security keys are now supported for SSH Git operations
You can now use FIDO2 security keys to authenticate over SSH for remote Git operations, providing a higher level of account security.
1826
Site Isolation in Firefox
With Site Isolation enabled on Firefox for Desktop, Mozilla takes its security guarantees to the next level.
1827
1Password for Linux
The wait is over. [1Password for Linux is officially here](https://support.1password.com/getting-started-linux/).
1828
The search for a perfect access control system
Making sense of authorization, policy and access management systems.
1829
I have a lot to say about Signal’s Cellebrite hack
This blog post is based off of a talk I gave on May 12, 2021 at the Stanford Computer Science Department’s weekly lunch talk series on computer security topics. Full disclosure: I’ve done some consulting work for Signal, albeit not on anything like this issue. (I kinda doubt
1830
Counter-Strike Global Offsets: reliable remote code execution
One of the factors contributing to Counter-Strike Global Offensive’s (herein “CS:GO”) massive popularity is the ability for anyone to host their own community server. These community servers are free to download and install and allow for a high grade of customization. Server administrators can create and utilize…