2161
Beware of the GIF: Account Takeover Vulnerability in Microsoft Teams
Protect your organization with Idira®. Modernize identity governance, automate access reviews, and secure every identity across your hybrid cloud environment.
New
The latest blog posts to take off on Hacker News. 4,441 posts.
2162
Mastering systemd: Securing and sandboxing applications and services
This series of articles will explore some of my favorite Red Hat Enterprise Linux (RHEL) 8 capabilities that are enabled by systemd. Thus, this series assume...
2163
An Android 8.0-9.0 Bluetooth Zero-Click RCE
Nowadays, Bluetooth is an integral part of mobile devices. Smartphones interconnect with smartwatches and wireless headphones. By default, most devices are configured to accept Bluetooth connections from any nearby unauthenticated device. Bluetooth packets are processed by the Bluetooth chip (also called a…
2164
The ProtonMail Android app is now open source
Our Proton Mail Android app is open source. We are committed to transparency and contributing to the open source and privacy tech community.
2165
Increasing transparency through advertiser identity verification
Our goal is to ensure users understand who is advertising to them and why they are seeing specific ads.
2166
What end-to-end encryption should look like
Check out our progress in end-to-end encryption calls in Jitsi. Give us your crypto knowledge feedback with the code and learn how to demo it here.
2167
What a one line change did to the Chrome sandbox
Posted by James Forshaw, Project ZeroThe Chromium sandbox on Windows has stood the test of time. ...
2168
You’ve Got 0-Click Mail: Unassisted iOS Attacks RCE via Mobilemail/Maild
October is Cybersecurity Awareness Month! How is your cybersecurity practice going?
2169
2170
Netflix now supports TLS 1.3
By Sekwon Choi
2171
A Full Break of the Bitstream Encryption of Xilinx 7-Series FPGAs
Maik Ender and Amir Moradi, Horst Goertz Institute for IT Security, Ruhr University Bochum, Germany; Christof Paar, Max Planck Institute for Cyber Security and Privacy and Horst Goertz Institute for IT Security, Ruhr University Bochum, Germany
2172
Demolishing Wallhacks with VALORANT's Fog of War
From the very beginning of VALORANT development, we made it a priority to build out cheating resistance to ensure competitive integrity. In this article, I’ll walk you through one of these anti-cheat systems - Fog of War. This…
2173
BGP and RPKI
We have been receiving occasional notifications, primarily via twitter from concerned customers who have visited 'isbgpsafeyet.com' and been told by the site's operator, Cloudflare, that their ISP is, apparently unsafe.
2174
2175
What happens when a ccTLD is retired? Exploring the potential risks of .io
Could the complex political history of Diego Garcia put the .io domain at risk? Tech firms should be aware of potential risk to their websites.
2176
ProtonMail Bridge is now open source
Our Bridge app is now open source for macOS, Windows, and Linux. Find links to the code and an independent security audit report.
2177
Digital surveillance technologies to fight pandemic must respect human rights
The COVID-19 pandemic is a global public health emergency that requires a coordinated and large-scale response by governments worldwide. However, States’ efforts to contain the virus must not be...
2178
Proof of concept: end-to-end encryption in Jitsi Meet
Check out our progress in end-to-end encryption calls in Jitsi. Give us your crypto knowledge feedback with the code and learn how to demo it here.
2179
Deprecating password authentication in GitHub API
Get started with one of our guides, or jump straight into the API documentation.
2180
2181
2182
Attack Matrix for Kubernetes
While Kubernetes has many advantages, it also brings new security challenges.
2183
230, or not 230? That is the EARN IT question
Over the past several weeks, Signal traffic has gone through the roof. New users are signing up at unprecedented rates, and we’ve expanded our server capacity faster than we ever anticipated. It means a lot to us that so many people are relying on Signal during this difficult time. When users che...
2184
Zoom’s 90-day plan to bolster key privacy and security initiatives
Learn more about how to use each Zoom product to connect with coworkers, customers, businesses, and more with insights and best practices.
2185
Moving from reCAPTCHA to hCaptcha
We recently migrated the CAPTCHA provider we use from Google's reCAPTCHA to a service provided by the independent hCaptcha. Here's a walk through of the rationale in more detail.
2186
We abused Slack's TURN servers to gain access to internal services
Slack's TURN server allowed relaying of TCP connections and UDP packets to internal Slack network and meta-data services on AWS.
2187
Running your own secure communication service with Matrix and Jitsi
Matrix, the open protocol for secure decentralised communications
2188
2189
Jitsi Meet Security and Privacy
How secure is Jitsi? Learn more about the Jitsi Meet Security & Privacy information, including how we make sure to protect your privacy here.
2190
Twitter Direct Message Caching and Firefox
Distinguished engineer Martin Thomson explains how this problem occurred, the implications for people who might be affected, and how problems of this nature might be avoided in future. To get ...