1951
Facebook sues two Chrome extension devs for scraping user data
Today we filed a lawsuit against two individuals for violating our Terms of Service and Portugal’s Database Protection Law.
New
The latest blog posts to take off on Hacker News. 4,440 posts.
1952
Helping to secure internet routing
The internet works reliably, in large part, on the basis of a key technology called Border Gateway Protocol (BGP). BGP is a means by which all junction points on the internet (routers) communicate with each other to dynamically establish the correct (and correctly weighted) paths that network packets should follow to…
1953
Leaking silhouettes of cross-origin images
This blog post is one of several guest blog posts, where we invite participants of our bug bounty program to write about bugs they've reported to us. This is a ...
1954
Best of show – abuse of libc
printf machine. 2020 IOCCC entry carlini - Best of Show - abuse of libc
1955
An Update on SolarWinds
We’d like to provide a further update to our customers in regards to the SolarWinds breach. At this point we reiterate the message we posted yesterday – we have not played any role in this breach, nor are we aware of any vulnerabilities in TeamCity that may have led to this breach, as we are also not aware of any…
1956
Victory at the High Court against the government’s use of 'general warrants’
Today, the UK High Court has quashed a decision by the Investigatory Powers Tribunal (IPT), and ruled that section 5 of the Intelligence Services Act (ISA) 1994 does not permit the issuing of general warrants to authorise property interference and certain forms of computer hacking.
1957
CVE-2021-3011: Key recovery on Google Titan Key
Download the Writeup Illustration made by Romain Flamand Abstract The Google Titan Security Key is a FIDO U2F hardware device proposed by Google (available since July 2018) as a two-factor authentication token to sign in to applications (e.g. your Google account). Our work describes a side-channel attack that targets…
1958
Encrypted Client Hello: The Future of ESNI in Firefox
Background Two years ago, we announced experimental support for the privacy-protecting Encrypted Server Name Indication (ESNI) extension in Firefox Nightly. The Server Name Indication (SNI) TLS extension enables server and ...
1959
1960
EFF to FinCEN: Stop Pushing for More Financial Surveillance
Today, EFF submitted comments to the Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) opposing the agency’s proposal for new regulations of cryptocurrency transactions. As we explain in our comments, financial records can be deeply personal and revealing, containing a...
1961
Look Up Unknown Phone Numbers Using Facebook Reset Password
This tutorial is meant to help find clues as to who is calling you when you're receiving calls from an unknown phone number (a number that is displayed on
1962
SolarWinds hackers were able to access Microsoft source code
Microsoft Security Response Center Blog2020676 points384 commentscited by 3Security & Privacy details
As we said in our recent blog , we believe the Solorigate incident is an opportunity to work together in important ways, to share information, strengthen defenses and respond to attacks. Like other SolarWinds customers, we have been actively looking for indicators of the Solorigate actor and want to share an update…
1963
1964
Does GPT-2 Know Your Phone Number?
The BAIR Blog
1965
Web Authentication Methods Compared
This article looks at the most commonly used web authentication methods.
1966
No, Cellebrite Cannot “Break Signal Encryption”
Yesterday, the BBC ran a story with the factually untrue headline, “Cellebrite claimed to have cracked chat app’s encryption.” This is false. Not only can Cellebrite not break Signal encryption, but Cellebrite never even claimed to be able to. Since we weren’t actually given the opportunity to co...
1967
The FBI Is Breaking into Encrypted Devices – We’re Suing
We can't let the FBI keep the public in the dark about its ability to gain access to information stored on our personal mobile devices.
1968
Defensive Programming
A community and blog for embedded software makers
1969
Google Play rejected Tor Browser update with security fixes
Tor Browser 10.0.7 is now available from the Tor Browser download page and also from our distribution directory.
1970
Threema apps are Open Source
In Celebration of Becoming Open Source, Threema is 50% Off
1971
Journalists Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit
Government operatives used NSO Group’s Pegasus spyware to hack 36 personal phones belonging to journalists, producers, anchors, and executives at Al Jazeera. The journalists were hacked by four Pegasus operators, including one operator MONARCHY that we attribute to Saudi Arabia, and one operator SNEAKY KESTREL that we…
1972
Analyzing the compromised DLL file that started the Solorigate attack
We, along with the security industry and our partners, continue to investigate the extent of the Solorigate attack. While investigations are underway, we want to provide the defender community with intel to understand the scope and impact, remediation guidance, and detections and protections we have built as a result.
1973
No Cookie for You
The developer community remains the heart of GitHub, and we’re committed to respecting the privacy of developers using our product.
1974
Sequoia PGP 1.0 Released: The Seedling Is a Sapling
Sequoia is a modular OpenPGP implementation in Rust.
1975
1976
Github: Token authentication requirements for Git operations
Beginning August 13th, 2021, we will no longer accept account passwords when authenticating Git operations on GitHub.com.
1977
1978
Adding Encrypted Group Calls to Signal
2020 has seen its fair number of challenges and changes. We’ve all adapted to new ways of staying in touch, getting work done, celebrating birthdays and weddings, and even exercising. As more and more of our critical and personal moments move online, we want to continue to provide you with new wa...
1979
Coordinated disclosure of XML roundtrip vulnerabilities in Go’s standard library
We have identified three independently exploitable vulnerabilities in Go's encoding/xml. Read more about their impact to Mattermost users.
1980