2521
New
The latest blog posts to take off on Hacker News. 4,441 posts.
2522
Your Android Phone Is a Security Key
Now, your phone running Android 7+ can be your security key, protecting you against phishing. Use it to protect your personal and work Google Accounts.
2523
DNS-over-HTTPS Policy Requirements for Resolvers
Over the past few months, we’ve been experimenting with DNS-over-HTTPS (DoH), a protocol which uses encryption to protect DNS requests and responses, with the goal of deploying DoH by default ...
2524
Protections Against Fingerprinting and Crypto Mining in Firefox Nightly and Beta
We have added a feature to block fingerprinting and cryptomining in Firefox Nightly as an option for users to turn on.
2525
2526
How Apps on Android Share Data with Facebook (2018)
Facebook routinely tracks users, non-users and logged-out users outside its platform through Facebook Business Tools. App developers share data with Facebook through the Facebook Software Development Kit (SDK), a set of software development tools that help developers build apps for a specific operating system. Using…
2527
Malicious remote code execution backdoor discovered bootstrap-sass Ruby gem
On March 26, 2019, a malicious version of the popular bootstrap-sass package, that has been downloaded a total of 28 million times to date, was published to the official RubyGems repository.
2528
Microsoft finds privilege escalation vulnerability in Huawei driver
Our discovery of two privilege escalation vulnerabilities in a driver highlights the strength of Microsoft Defender ATP’s sensors. These sensors expose anomalous behavior and give SecOps personnel the intelligence and tools to investigate threats, as we did.
2529
Two More Cases of Third-Party Facebook App Data Exposure
Third-party Facebook apps gather Facebook data about the people who use them. While Facebook struggles to contain these exposures, insecure third-party data practices & misconfigured cloud systems continue to leak Facebook data to the internet. See how UpGuard discovered and secured two such cases.
2530
Defence Against the Docker Arts
Recently, we expanded Heroku’s industry-shaping primitives, adding support for client-side browser apps, composed of HTML, CSS, and JavaScript. This built-in support for static web apps joins the existing Heroku Buildpacks: Ruby, Python, Go, Java, Clojure, Scala, Node.js, PHP, and .NET.
2531
Reducing notification permission prompt spam in Firefox
Permission prompts are a common sight on the web today. They allow websites to prompt for access to powerful features when needed, giving users granular and contextual choice about what ...
2532
Splitting atoms in XNU
Posted by Ian Beer, Google Project ZeroTL;DRA locking bug in the XNU virtual memory subsystem all...
2533
Warp – Mobile VPN
Today we're excited to announce what we began to plan more than two years ago: the 1.1.1.1 App with WARP performance and security technology. We built Warp from the ground up to thrive in the harsh conditions of the modern mobile Internet.
2534
Keybase is not softer than TOFU
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
2535
BoringTun, a Userspace WireGuard Implementation in Rust
Today we are happy to release the source code of a project we’ve been working on for the past few months. It is called BoringTun, and is a userspace implementation of the WireGuard® protocol written in Rust.
2536
ISPs in AU and NZ start censoring the internet without legal precedent
Several websites including Voat, ZeroHedge, Archive.is, LiveLeak, and others have been blocked in Australia and New Zealand in direct contravention to
2537
Understanding STIR/SHAKEN – New Anti-Robocalling Protocol
This whitepaper explains the basic technical details of STIR/SHAKEN call authentication and how it prevents caller ID spoofing.
2538
It is unlikely that built-in email encryption will ever be available in Gmail
Gmail's end-to-end encryption project seemed dead in 2017. Now it's back, but only for key account customers.
2539
2540
Firefox 66.0 Aims to Reduce Online Annoyances
Almost a hundred years ago, John Maynard Keynes suggested that the industrial revolution would effectively end work for humans within a couple of generatio
2541
Open-sourcing Sandboxed API
Posted by Christian Blichmann & Robert Swiecki, ISE Sandboxing team Many software projects process data which is externally generated, and...
2542
New Tools for Detecting HTTPS Interception
The practice of HTTPS interception continues to be commonplace on the Internet. This blog post discusses types of monster-in-the-middle devices and software, and how to detect them.
2543
AMD products are not susceptible to SPOILER exploit
Download drivers and software for AMD products — includes Windows and Linux support, auto-detect tools & detailed guides for installation.
2544
Google’s Nest fiasco harms user trust and invades their privacy
Last month, Google announced that its Nest Secure would be updated to work with Google Assistant software. The problem? Google never told users its product had a microphone to begin with. Simple oversight or invasion of privacy? We break it down.
2545
2019 Guide to Cryptographic Key Sizes and Algorithm Recommendations
A simple, accessible recommendation for key sizes and recommended algorithms for various cryptographic algorithms.
2546
PrivateStorage.io: A secure and privacy-focused cloud storage solution
Announcing a cloud storage solution where you are in control of all your data with client-side encryption and no data or vendor lock-in.
2547
Extracting Bitlocker Keys from a TPM
Extracting BitLocker keys sealed with a TPM by sniffing the LPC bus
2548
Researchers find trapdoor in SwissVote election system
A team of researchers have examined the source code published as part of the SwissPost e-voting system, provided by Scytl, and discovered a cryptographic trapdoor.
2549
Firefox Send: Free encrypted file transfer service
At Mozilla, we are always committed to people’s security and privacy. It’s part of our long-standing Mozilla Manifesto. We are continually looking for
2550
Cryptographic coin flipping, now in Keybase
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .