2191
Temporarily rolling back SameSite Cookie Changes
UPDATE 5/28: We are going to resume the rollout with the stable release of Chrome M84. More details . With the stable release of Chrome 8...
New
The latest blog posts to take off on Hacker News. 4,441 posts.
2192
Zoom rolled their own encryption scheme, transmit keys through servers in China
This report examines the encryption that protects meetings in Zoom and finds that they have made their own encryption scheme and has significant weaknesses.
2193
The facts around Zoom and encryption for meetings/webinars
Learn more about how to use each Zoom product to connect with coworkers, customers, businesses, and more with insights and best practices.
2194
2195
The EARN IT Act Violates the US Constitution
Since senators introduced the EARN IT Act (S. 3398) in early March, EFF has called attention to the many ways in which the bill would be a disaster for Internet users’ free speech and security. We’ve explained how the EARN IT Act could be used to drastically undermine encryption. Although the bill...
2196
How to SSH Properly
This post explains security best practices to use SSH properly and securely
2197
1.1.1.1 for Families
Introducing 1.1.1.1 for Families — the easiest way to add a layer of protection to your home network and protect it from malware and adult content.
2198
The EARN IT Bill Is the Government’s Plan to Scan Every Message Online
Update 10/1/2020: The EARN IT bill has been amended since this blog post was published. We still oppose the bill.Imagine an Internet where the law required every message sent to be read by government-approved scanning software. Companies that handle such messages wouldn’t be allowed to securely...
2199
Zoom’s Use of Facebook’s SDK in iOS Client
Learn more about how to use each Zoom product to connect with coworkers, customers, businesses, and more with insights and best practices.
2200
Zoom needs to clean up its privacy act
[21 April 2020—Hundreds of people are arriving here from this tweet, which calls me a “Harvard researcher” and suggests that this post and the three that follow are about “the ful…
2201
Speeding up Linux disk encryption
Encrypting data at rest is vital for Cloudflare with more than 200 data centres across the world. In this post, we will investigate the performance of disk encryption on Linux and explain how we made it at least two times faster for ourselves and our customers!
2202
Little Snitch and the deprecation of kernel extensions
You probably came here because your Mac showed a message telling you that software from “Objective Development Software GmbH” (Little Snitch) loaded a system extension that will no longer be compatible with a future version of macOS and that you…
2203
Full third-party cookie blocking and more
This blog post covers several enhancements to Intelligent Tracking Prevention (ITP) in iOS and iPadOS 13.4 and Safari 13.1 on macOS to address our latest discoveries in the industry around tracking.
2204
Using Zoom? Here are the privacy issues you need to be aware of
If you’re using Zoom while working from home, you should be aware of Zoom's privacy policies, including its “attention tracking” tool.
2205
End-to-end encryption in the browser
Excalidraw introduces browser-based end-to-end encryption using Web Cryptography APIs for secure, private drawing storage.
2206
2207
Google Shares, Monetizes, and Exploits Your Data Without 'Selling' It
"Google will never sell any personal information to third parties; and you get to decide how your information is used." - Sundar Pichai Sound familiar? Although big tech companies like Google keep the lights on by harvesting and monetizing your personal data, they can be quick to mince words and deny the strawman…
2208
Building a backdoor with Node.js
A backdoor in our code that can perform OS injection is a considerable threat.
2209
Formal GDPR complaint against Google’s internal data free-for-all
Brave filed a GDPR complaint v Google for infringing the GDPR “purpose limitation” principle. Enforcement would be tantamount to a functional separation of Google’s business.
2210
Why Not WireGuard
The latest thing that is getting a lot of attention is WireGuard - the new shooting star in terms of VPN. But is it as great as it sounds? I would like to discuss some thoughts, have a look at the implementation and tell you why WireGuard is not a solution that will replace IPsec or OpenVPN.
2211
United Kingdom to introduce security labelling on connected devices
In a press release from the UK government on January 27th 2020 called “Government to strengthen security of internet-connected products”, the new law and i
2212
2213
TRRespass: Rowhammer against DDR4
Project Description Rowhammer haunted us for the better part of the past decade. Most DDR3 modules were found to be susceptible to this vulnerability which can compromise data directly inside the memory cells. What made it so scary was the fact that it could be exploited from software on PCs, clouds, smartphones, over…
2214
Open-sourcing Riskquant, a library for quantifying risk
Netflix has a program in our Information Security department for quantifying the risk of deliberate (attacker-driven) and accidental…
2215
Facebook sues Namecheap
We don’t want people to be deceived, so we take legal action against misleading domains.
2216
Beer Drinkers Guide to SAML
Learn about SAML authentication and the mechanics behind some of the most common SAML use cases, all through the fictional BaaS (Beer-as-a-Service).
2217
2218
2219
‘Re-education’, forced labour and surveillance beyond Xinjiang
Australian Strategic Policy Institute2020255 points106 commentscited by 11Society, Policy & Culture details
‘Re-education’, forced labour and surveillance beyond Xinjiang. What’s the problem? The Chinese government has facilitated the mass transfer of Uyghur and other ethnic minority1 citizens from the far west region of Xinjiang to factories across the country. Under conditions that strongly suggest forced labour, Uyghurs…
2220
