1891
Backblaze Privacy Update: Third-Party Tracking
Read this post for a privacy update regarding third-party tracking code on our website.
New
The latest blog posts to take off on Hacker News. 4,440 posts.
1892
The S in IoT is for Security
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
1893
Firefox 87 trims HTTP Referrers by default to protect user privacy
We are pleased to announce that Firefox 87 will introduce a stricter, more privacy-preserving default Referrer Policy. From now on, by default, Firefox will trim path and query string ...
1894
We found and fixed a rare race condition in our session handling
On March 8, out of an abundance of caution, we logged all users out of GitHub.com. In this post we share technical details of the vulnerability and steps we're taking to ensure it doesn't happen again.
1895
Claude Shannon: The Mathematical Theory of Cryptography
The foundation of modern cryptography.
1896
Librem Tunnel Is Leaving iOS
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
1897
Facebook's GDPR consent bypass reaches Austrian Supreme Court
Austrian Supreme Court may refer case to Court of Justice, questioning the basis of Facebook's business model in Europe.
1898
The FBI Should Stop Attacking Encryption
Federal law enforcement has been asking for a backdoor to read Americans’ encrypted communications for years now. FBI Director Christopher Wray did it again last week in testimony to the Senate Judiciary Committee. As usual, the FBI’s complaints involved end-to-end encryption employed by popular...
1899
Docker Security Cheat Sheet
Website with the collection of all the cheat sheets of the project.
1900
A Spectre proof-of-concept for a Spectre-proof web
Posted by Stephen Röttger and Artur Janc, Information Security Engineers Three years ago, Spectre changed the way we think about security b...
1901
Fuzzing Java in OSS-Fuzz
Posted by Jonathan Metzman, Google Open Source Security Team OSS-Fuzz , Google’s open source fuzzing service, now supports fuzzing applicat...
1902
A bug related to handling of authenticated sessions
On the evening of March 8, we invalidated all authenticated sessions on GitHub.com created prior to 12:03 UTC on March 8 out of an abundance of caution.
1903
The reason Okta spent $6.5B on Auth0
Explore the business drivers behind Okta's acquisition of Auth0, including market positioning, strategic goals, and the future of authentication providers.
1904
Google’s FLoC Is a Terrible Idea
Update, April 9, 2021 : We've launched Am I FLoCed, a new site that will tell you whether your Chrome browser has been turned into a guinea pig for Federated Learning of Cohorts or FLoC, Google’s latest targeted advertising experiment. The third-party cookie is dying, and Google is trying to create...
1905
1906
Common Nginx misconfigurations that leave your web server open to attack
Detectify analyzed 50,000 unique Nginx configuration files on GitHub and reported some common misconfigurations.
1907
Firefox Release Includes Total Cookie Protection and Multiple Picture-in-Picture
Beginning last year, the internet began playing a bigger role in our lives than ever before. In the US, we went from only three percent of workers to more
1908
How often should I rotate my SSH keys?
Learn why rotating your SSH keys is essential for preventing credential theft. Discover best practices for SSH key rotation and how to protect your systems from potential breaches.
1909
State Partitioning
State Partitioning is the new privacy feature called Total Cookie Protection, which will be available in ETP Strict Mode in Firefox 86.
1910
Total Cookie Protection
Total Cookie Protection is a major anti-tracking advance in Firefox that confines cookies to the site where they were created.
1911
The modern packager’s security nightmare
One of the most important tasks of the distribution packager is to ensure that the software shipped to our users is free of security vulnerabilities. While finding and fixing the vulnerable code is…
1912
Mitigating Memory Safety Issues in Open Source Software
Posted by Dan Lorenc, Infrastructure Security Team Memory-safety vulnerabilities have dominated the security field for years and often lead ...
1913
Inline and Sideline Approaches for Low-Cost Memory Safety in C
This technical report is based on a dissertation submitted November 2020 by the author for the degree of Doctor of Philosophy to the University of Cambridge, Selwyn College.
1914
Quad9 public DNS moves to Switzerland
A public and free DNS service for a better security and privacy
1915
New Report Shows Cops Used Ring Cameras to Monitor Black Lives Matter Protests
San Francisco - The Electronic Frontier Foundation (EFF) has obtained emails that show that the Los Angeles Police Department (LAPD) sent at least one request—and likely many more—for Amazon Ring camera video of last summer’s Black-led protests against police violence. In a report released today,...
1916
WhatsApp alternatives that respect privacy
WhatsApp may be secure but it’s not private. Learn about the best alternatives to WhatsApp that genuinely respect your privacy.
1917
Sq, Sequoia PGP's CLI, Released
Sequoia is a modular OpenPGP implementation in Rust.
1918
(Very) Basic Intro to Elliptic Curve Cryptography
Learn cryptography in Go by building ciphers, hashes, password security, and encryption tools. Understand security beneath the library call.
1919
Threat Actors Now Target Docker via Container Escape Features
We provide a technical analysis of a container abuse attack that features a payload that’s specifically crafted to be able to escape privileged Docker containers.
1920
FIDO2 security key company releases hardware that's open source and uses Rust
Our Kickstarter campaign for our next generation of Solo products launches on January 26th. To get alerted when the campaign is live, you can sign up here. Update: The campaign is now live! Check it out to see all the details. Humble beginnings I've been working on Solo for almost 3 years now. It started back when I…