2101
SSH Emergency Access
Learn how to prepare for emergency access to your SSH hosts.
New
The latest blog posts to take off on Hacker News. 4,441 posts.
2102
Reddit and LinkedIn apps also caught copying and pasting clipboard contents
Linkedin and Reddit both check your clipboard and copy and paste your clipboard contents with every keystroke - even when you’re in another app. Another
2103
Estonian Electronic Identity Card: Security Flaws in Key Management
Arnis Parsovs, Software Technology and Applications Competence Center and University of Tartu
2104
RCE on Telia Routers
Multiple vulnerabilities could allow running arbitrary code on an intranet server and gain root access on all the customers' routers
2105
Peppering (Password Storage)
Website with the collection of all the cheat sheets of the project.
2106
Invasive, secretive “bossware” tracking workers
COVID-19 has pushed millions of people to work from home, and a flock of companies offering software for tracking workers has swooped in to pitch their products to employers across the country.The services often sound relatively innocuous. Some vendors bill their tools as “automatic time tracking”...
2107
2108
2109
New Mac ransomware spreading through piracy
We analyze a new Mac ransomware that appears to encrypt user files with a bit of a time delay. The ransomware encrypts files with little strategy.
2110
System Hardening in Android 11
Posted by Platform Hardening Team In Android 11 we continue to increase the security of the Android platform. We have moved to safer def...
2111
Why we won’t be supporting Sign in with Apple
The official blog of the AnyList team.
2112
2113
Hardcoded secrets, unverified tokens, and other common JWT mistakes
An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.
2114
How CDNs Generate Certificates
Say Hi to Thomas. Thomas's first weeks at Fly have been hectic, but he's been taking notes, copious notes that can teach you all about the wild world of certificate infrastructure. Read on to discover more...
2115
California agency blocks release of police use of force, surveillance training
Under a California law that went into effect on January 1, 2020, all law enforcement training materials must be “conspicuously” published on the California Commission on Peace Officer Standards and Training (POST) website. However, if you visit POST’s Open Data hub and try to download the officer...
2116
United States wants HTTPS for all government sites, all the time
The Sophos Blog
2117
An even worse anti-encryption bill than EARN IT
Stanford Center for Internet and Society2020903 points351 commentscited by 7Society, Policy & Culture details
On Tuesday, June 23, Senators Graham (R-SC), Cotton (R-AR), and Blackburn (R-TN) introduced a bill that is a full-frontal nuclear assault on encryption in the United States. You can find the bill text here. It's been formally introduced as Senate bill 4051, which you can
2118
Microsoft Defender ATP for Linux is now generally available
Today we are excited to announce general availability of Microsoft Defender Advanced Threat Protection (ATP) for Linux! - This initial release delivers...
2119
FF Sandbox Escape
By James Forshaw, Project ZeroIn my previous blog post I discussed an issue with the Windows Kern...
2120
Mozilla VPN
We are working hard to make the official product, the Mozilla VPN, available in selected regions this year. We will continue to offer the Mozilla VPN at the current pricing model for a limited time, which allows you to protect up to five devices on Windows, Android, and iOS at $4.99/month.
2121
GDPR guide for developers
Is this guide only for developers? This guide is mainly aimed at developers working alone or in teams, team leaders, service providers but also at anyone interested in web or application development. It provides advice and best practices, and thus gives useful keys to understand the GDPR for every stakeholder…
2122
Zoom to bring end-to-end encryption to all users, including non-paying
Learn more about how to use each Zoom product to connect with coworkers, customers, businesses, and more with insights and best practices.
2123
2124
2125
Best practices for managing and storing secrets like API keys and credentials
We have compiled a list of some of the best practices to prevent API key leakage and keep secrets and credentials safe. Secrets management doesn’t have a one-size-fits-all approach, so this list considers multiple perspectives so you can be informed in deciding to or not to implement strategies.
2126
A survey of recent iOS kernel exploits
Posted by Brandon Azad, Project ZeroI recently found myself wishing for a single online reference...
2127
GitLab acquires Peach Tech and Fuzzit
Acquisitions will make GitLab the first security solution to offer both coverage-guided and behavioral fuzz testing
2128
Playing around with the Fuchsia operating system
A look at the new Fuchsia Operating System.
2129
UtahFS: Encrypted File Storage
Several months ago, I realized that I had a lot of sensitive files on my computer (my diary, if you must know) that I was afraid of losing, but I didn’t feel comfortable putting them in something like Google Drive or Dropbox. Introducing UtahFS.
2130
Two vulnerabilities in Zoom could lead to code execution
A member of Cisco Talos discovered this vulnerability. Cisco Talos recently discovered two vulnerabilities in the popular Zoom video chatting application that could allow a malicious user to execute arbitrary code on victims’ machines. Video conferencing software has skyrocketed in popularity during the COVID-19…