1831
Privacy Update: Third-party Tracking
Read this post for a privacy update regarding third-party tracking code on our website.
New
The latest blog posts to take off on Hacker News. 4,440 posts.
1832
Vulnerability allows cross-browser tracking in Chrome, Firefox, Safari, and Tor
Unveiling a scheme flooding vulnerability across major browsers. Learn how it threatens anonymous browsing.
1833
Ending CAPTCHAs: Introducing Cryptographic Attestation of Personhood
We want to remove CAPTCHAs completely. The idea is rather simple: a real human should be able to touch or look at their device to prove they are human, without revealing their identity. Let's explore!
1834
Emulating AirTags to upload arbitrary data via Apple's FindMy network
Apple AirTags: Arbitrary data can be uploaded from non-internet-connected devices by sending Find My BLE broadcasts to nearby Apple devices. We're releasing an ESP32 firmware that turns the microcontroller into an (upload only) modem, and a macOS application to retrieve, decode and display the uploaded data.
1835
I mailed an AirTag and tracked its progress
I sent an AirTag by mail to a friend and tracked it across the UK.
1836
A future without passwords
On World Password Day, we’re providing a sneak peek at a future in which, one day, you won’t need a password at all.
1837
Intent to issue €2.5M fine to Disqus over GDPR breaches
The Norwegian Data Protection Authority has notified Disqus Inc. (Disqus) that we intend to issue an administrative fine of NOK 25 000 000 for not complying with the GDPR rules on accountability, lawfulness, and transparency.
1838
1839
Dell patches 12-year-old driver vulnerability impacting millions of PCs
Update your Dell devices now! SentinelLabs discover five high severity flaws in Dell firmware update driver impacting desktops, laptops, notebooks & more.
1840
Google banned almost 120k spam developer accounts in 2020 for the play store
Posted by Krish Vitaldevara, Director of Product Management Trust & Safety, Google Play Providing safe experiences to billions of users a...
1841
Clubhouse doesn’t value privacy, security or accessibility
It is tempting to excuse Clubhouse’s flaws as growing pains, but the app’s design and rollout illustrate just how little Silicon Valley and its venture capital backers have learned.
1842
1843
1844
The Gates to Hell: Apple’s Notarizing
NeoFinder is a powerful and very fast disk cataloging tool for songs, videos, photos, all your digital documents
1845
RotaJakiro: A long live secret backdoor with 0 VT detection
Overview On March 25, 2021, 360 NETLAB's BotMon system flagged a suspiciousELF file (MD5=64f6cfe44ba08b0babdd3904233c4857) with 0 VT detection, the sample communicates with 4 domains on TCP 443 (HTTPS), but the traffic is not of TLS/SSL. A close look at the sample revealed it to be a backdoor targeting
1846
1847
DPA blocks facial recognition system in Italy and MP proposes moratorium
Italian DPA argues the SARI Real Time facial recognition system lacks a legal basis and, as designed, it would implement a form of mass surveillance. On 14 April, a member of the Italian Parliament, Filippo Sensi, proposed a moratorium on the use of video surveillance tools that use Facial Recognition.
1848
GitHub blocks FLoC across all of GitHub Pages
All GitHub Pages sites served from the github.io domain will now have a Permissions-Policy: interest-cohort=() header set. Pages sites using a custom domain will not be impacted. Learn more about…
1849
Grand jury subpoena for Signal user data, Central District of California
It’s the first half of 2021 – nearly five years since the “first half of 2016” – but in many ways not much has changed. The United Kingdom is still trying to figure out Brexit, another Justin Bieber song hit #1 on the charts (is it too late now to say sorry?), and Signal still doesn’t really know...
1850
macOS gatekeeper and file quarantine bypass
bypassing macOS's file quarantine, gatekeeper, and notarization requirements
1851
Project Jengo Redux: Cloudflare’s Prior Art Search Bounty Returns
On March 15th, 2021, Cloudflare was sued by a patent troll called Sable Networks. Today, we are launching our efforts to fight back.
1852
1853
GitHub Actions update: Helping maintainers combat bad actors
The trustworthiness of our platform is crucial, and our team is committed to developer productivity and Actions performing the way we intended.
1854
EFF sues Proctorio on behalf of student falsely DMCA'd
Phoenix, Arizona—The Electronic Frontier Foundation (EFF) filed a lawsuit today against Proctorio Inc. on behalf of college student Erik Johnson, seeking a judgment that he didn’t infringe the company’s copyrights when he linked to excerpts of its software code in tweets criticizing the software...
1855
Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer
Cellebrite makes software to automate physically extracting and indexing data from mobile devices. They exist within the grey – where enterprise branding joins together with the larcenous to be called “digital intelligence.” Their customer list has included authoritarian regimes in Belarus, Russi...
1856
1857
Preparing Rustls for Wider Adoption
It’s time for the Internet to move on to more secure software, and that’s why our Memory Safety Initiative is coordinating work to make further improvements to the Rustls TLS library.
1858
Proposal: Treat FLoC as a security concern
Google is rolling out Federated Learning of Cohorts (FLoC) for the Chrome browser. TL;DR: FLoC places people in groups based on their browsing habits to target advertising. Why is this bad? As the …
1859
What I Wish I Knew About U2F and Other Hardware MFA Protocols
We revamped the second-factor authentication in Teleport 6.0. This post provides a birds-eye view of U2F and other cryptographic hardware standards.
1860
