2791
New
The latest blog posts to take off on Hacker News. 4,441 posts.
2792
Moving Fast and Securing Things
For development teams, process can often be antithetical to speed. Ease of deployment and security tend to have an inverse relationship, with some resentment for the security team occasionally mixed in. You may have seen the following tweet: https://twitter.com/petecheslock/status/595617204273618944?lang=en We believe…
2793
Apple iMac Pro and Secure Storage
Explore the Duo Blog for expert tips, security insights, and resources to stay updated on the latest in security and access management trends.
2794
Open-sourcing gVisor, a sandboxed container runtime
Introducing gVisor, a new kind of sandbox that helps provide secure isolation for containers, while being more lightweight than a virtual machine (VM).
2795
Amazon threatens to suspend Signal's AWS account over censorship circumvention
Last week, we received the following email from Amazon: From: [redacted], [redacted] <[redacted]@amazon.com> Subject: Notification of potential account suspension regarding AWS Service Terms Moxie, Yesterday AWS became aware of your GitHub and Hacker News/ycombinator posts des...
2796
2018 reform of EU data protection rules
Find out what your organisation must do to comply with the GDPR and learn how you can help individuals to exercise their data protection rights.
2797
The False Allure of Hashing for Anonymization
Why using cryptographic hashes doesn't make data anonymous.
2798
2799
MacOS monitoring the open source way
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
2800
Google’s new Chat service shows contempt for Android users’ privacy
Google launches Chat - new messaging service for Android phones
2801
No boundaries for Facebook data: third-party trackers abuse Facebook Login
by Steven Englehardt [0], Gunes Acar, and Arvind Narayanan So far in the No boundaries series, we’ve uncovered how web trackers exfiltrate identifying information from web pages, browser password managers, and form inputs. Today we report yet another type of surreptitious data collection by third-party scripts that we…
2802
Improved fraud prevention with Radar 2.0
Radar 2.0 improves machine learning performance and reduces fraud by up to an additional 25%.
2803
What Data Does Facebook Collect When I’m Not Using Facebook, and Why?
Explaining more about the information we get from other websites and apps; how we use the data they send to us; and the controls you have.
2804
User Privacy Isn't Solely a Facebook Issue
During Congressional hearings about Facebook’s data practices in the wake of the Cambridge Analytica fiasco, Mark Zuckerberg drew an important distinction between what we expect from our Internet service providers (ISPs, such as Comcast or Verizon) as opposed to platforms like Facebook that operate...
2805
2806
The FBI could have broken into San Bernadino shooter's phone without Apple
The Department of Justice’s Office of the Inspector General (OIG) last week released a new report that supports what EFF has long suspected: that the FBI’s legal fight with Apple in 2016 to create backdoor access to a San Bernardino shooter’s iPhone was more focused on creating legal precedent than...
2807
Protecting GDPR Personal Data with Pseudonymization
If you’ve had the chance to read our GDPR white paper or our previous GDPR primer blog post, you’ve, no doubt, seen the word "pseudonymization" used extensively to describe one technical measure that ...
2808
An Update on Our Plans to Restrict Data Access on Facebook
Two weeks ago we promised to take a hard look at the information apps can use when you connect them to Facebook as well as other data practices. Today, we want to update you on the changes we're making to better protect your Facebook information.
2809
AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely
Today we’re launching AWS Secrets Manager which makes it easy to store and retrieve your secrets via API or the AWS Command Line Interface (AWS CLI) and rotate your credentials with built-in or custom AWS Lambda functions. Managing application secrets like database credentials, passwords, or API Keys is easy when…
2810
2811
2812
Sunsetting Tor Messenger
In 2015, we introduced Tor Messenger, a cross-platform chat program that aimed to be secure by...
2813
Oblivious DNS: Plugging the Internet’s Biggest Privacy Hole
by Annie Edmundson, Paul Schmitt, Nick Feamster The recent news that Cloudflare is deploying their own DNS recursive resolver has once again raised hopes that users will enjoy improved privacy, since they can send DNS traffic encrypted to Cloudflare, rather than to their ISP. In this post, we explain why this approach…
2814
1.1.1.1: Fast, privacy-first consumer DNS service
Cloudflare's mission is to help build a better Internet. We're excited today to take another step toward that mission with the launch of 1.1.1.1 — the Internet's fastest, privacy-first consumer DNS service. This post will talk a little about what that is and a lot about why we decided to do it.
2815
Cloudflare supports Privacy Pass
Cloudflare supports Privacy Pass, a recently-announced privacy-preserving protocol developed in collaboration with researchers from Royal Holloway and the University of Waterloo.
2816
Qubes OS 4.0 has been released
After nearly two years in development and countless hours of testing, we’re pleased to announce the stable release of Qubes OS 4.0! Major changes in version 4.0 Version 4.0 includes several fundamental improvements to the security and functionality of Qubes OS: The Qubes Admin API Qubes...
2817
2818
Facebook Container Extension: Take control of how you’re being tracked
Our Multi-Account Containers extension has been a game changer for many users, letting them manage various parts of their online life without intermingling
2819
EU GDPR – Another reason for SaaS to reconsider on-premise
We review GDPR's impact on SaaS vendors and data collection practices and how it may reduce the cost disparity between hosted SaaS and on-premises Private SaaS.
2820
How a Political Engineering Firm Exposed Their Code Base
Political data firm AggregateIQ exposed IT assets that raise questions for society about how technology is being used in recent US political history.