The latest blog posts to take off on Hacker News. 316 posts.
Let’s Encrypt had a great year in 2018. We’re now serving more than 150 million websites while maintaining a stellar security and compliance track record. Most importantly though, the Web went from 67% encrypted page loads to 77% in 2018, according to statistics from Mozilla. This is an incredible rate of change! We’d…
With 2019 a day away, let’s reflect on the past to see how we can improve. Yes, let’s take a long look back 30 years and reflect on the original fuzzing paper, An Empirical Study of the Reliability of UNIX Utilities, and its 1995 follow-up, Fuzz Revisited, by Barton P. Miller. In this blog post, […]
AdGuard DNS: a privacy-oriented DNS service that blocks trackers and ads anywhere, from your PC and mobile devices to smart TV and IoT.
With an interactive grid to help you pick one!
As the year draws to a close, so has EFF’s long-running Freedom of Information Act lawsuit against the Drug Enforcement Agency about the mass phone surveillance program infamously known as “Hemisphere.” We won our case and freed up tons of records. (So did the Electronic Privacy Information Center...
Posted by Ivan Fratric, Google Project ZeroIntroductionVulnerabilities in the VBScript scripting ...
Now you can request an archive of your data from your account settings page.
Exploring container security: Let Google do the patching with new managed base images
Helping researchers find 0ld daysPosted by Thomas Dullien, Project ZeroExecutive summarySoftware ...
Xôi Lạc TV là địa chỉ theo dõi bóng đá trực tuyến được người dùng đánh giá cao. Với hàng loạt giải đấu được phát sóng miễn phí cùng nhiều thông tin được cập nhật như lịch thi đấu, kết quả, bảng xếp hạng, tỷ số và những tin tức thể thao đáng chú ý.
Certificates and public key infrastructure (PKI) are hard. No shit, right? I know a lot of smart people who''ve avoided this particular rabbit hole. Eventually, I was forced to learn this stuff because of what it enables: PKI lets you define a system cryptographically. It''s universal and vendor-neutral yet poorly…
Like many others, we have been following the latest developments in Australia related to the “Assistance and Access” bill with a growing sense of frustration. The widespread adoption of strong cryptography and end-to-end encryption has given people around the world the ability to protect their pe...
Recently, a patent application from Amazon became public that would pair face surveillance — like Rekognition, the product that the company is aggressively marketing to police and Immigration and Customs Enforcement — with Ring, a doorbell camera company that Amazon bought earlier this year.
Research By: Yoav Alon, Netanel Ben-Simon Introduction The year 2017 was an inflection point in the vulnerability landscape. The number of new vulnerabilities reported that year was around 14,000, which is over twice the number from the year before (see table below). The probable reason for this is the increased…
Australia recently passed a law that correctly has people asking about the security and privacy of tools like 1Password.
Posted by Natalie Silvanovich, Project ZeroOver the past five years, video conferencing support i...
Actually no matter if someone doesn’t be aware of then its up to other viewers that they will help, so here it occurs.
The Transportation Security Administration has set out an alarming vision of pervasive biometric surveillance at airports, which cuts against the right to privacy, the “right to travel,” and the right to anonymous association with others.The FAA Reauthorization Act of 2018, which included language...
The Assistance and Access (A&A) law requires tech companies to help law enforcement agencies break into individuals’ encrypted data.
In July, we shared our views about the need for government regulation and responsible industry measures to address advancing facial recognition technology. As we discussed, this technology brings important and even exciting societal benefits but also the potential for abuse. We noted the need for broader study and…
A mysterious (and fake) Chrome extension. A clever data exfiltration scheme. They would have gotten away with it, too, if it weren't for those meddling security analysts using ExtraHop Reveal(x)! Follow along as we go from threat detection to response in this real-life threat hunt with network traffic analysis.
An overview into CVE-2018-1002105's root cause and a program to test if your clusters are affected
Vault 1.0 is focused on renovating Vault's infrastructure to support high performance, scalable workloads.
