1
Unintended consequences of blocking IP addresses
A discussion about IP blocking: why we see it, what it is, what it does, who it affects, and why it’s such a problematic way to address content online.
New
The latest blog posts to take off on Hacker News. 350 posts.
2
CCC captures U.S. military biometrics database
The U.S. military used biometric devices en masse to capture people in Afghanistan. Some devices were left behind during the hasty withdrawal of NATO troops. CCC researchers found large amounts of...
3
Python malware starting to employ anti-debug techniques
First time anti-debug techniques are discovered in PyPI malware. Read how these techniques are implemented, including analysis and tips from JFrog Security Research.
4
Linux Kernel Ksmbd Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability, but only systems with ksmbd enabled are vulnerable.
5
LastPass user vaults stolen in recent hack
Please refer to the latest article for updated information.nbs[..]
6
Threeuk is blocking Tutanota
ISPs must not have the power to decide which online services users can or can not access.
7
Tencent WeChat is now a GitHub secret scanning partner
GitHub secret scanning protects users by searching repositories for known types of secrets. By identifying and flagging these secrets, our scans help prevent data leaks and fraud. We have partnered…
8
Supabase Vault is now in Beta
A Postgres extension to store encrypted secrets and encrypt data.
9
BundesMessenger, a secure messenger for Germany’s public administration
BundesMessenger is a modified version of Element which we’re working with BWI to develop and maintain.
10
Secret scanning is now available for free on public repositories
Previously, only organizations with GitHub Advanced Security could enable secret scanning's user experience on their repositories. Now, any admin of a public repository on GitHub.com can detect leaked secrets in…
11
Tailnet Lock
Use this article learn how to decide who to trust when it comes to your tailnet’s coordination server and how nodes are added to your tailnet.
12
Shutting down our unencrypted public DNS service
On the 16th January 2023 we will shut down our legacy public DNS service, currently reachable from this IP: 193.138.218.74
13
EFF about EU: EIDAS 2.0 Sets a Dangerous Precedent for Web Security
The Council of the European Union this week adopted new language for regulations governing internet systems that may put the security of your browser at greater risk.The new language affects the EU’s electronic identification, authentication and trust services (eIDAS) rules, which are supposed to...
14
VPN by Google One security assessment
Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.
15
A Yubico FAQ about passkeys
Delve into Yubico's comprehensive guide about passkeys, a term encapsulating FIDO/WebAuthn credentials that offer a secure, passwordless experience.
16
Facebook tracking is illegal in Europe
Meta must pay 1.2 billion euros for violating the EU regulation GDPR.
17
Introducing passkeys in Chrome
We announced in October that passkey support was available in Chrome Canary. Today, we are pleased to announce that passkey support is now ...
18
Google Zanzibar Through Our Eyes
Understanding Google's Zanzibar paper the way the Authzed team does.
19
Pulling MikroTik into the Limelight Demystifying and Jailbreaking RouterS
A comprehensive guide to MikroTik internals, including IPC, hand-rolled cryptography, and a novel post-authentication jailbreak
20
Tor Browser 12.0
Tor Browser 12.0 is now available. This new release updates Tor Browser to Firefox Extended Support Release 102.
21
Telegram: No-SIM Signup, Auto-Delete All Chats, Topics 2.0 and more
With this update, you can have a Telegram account without a SIM card and set up a global timer to automatically delete messages in all new chats. Topics in groups are now even more powerful – and available for groups with 100+ members.
22
A Year-End Letter from our Executive Director
This letter was originally published in our 2022 annual report. The past year at ISRG has been a great one and I couldn’t be more proud of our staff, community, funders, and other partners that made it happen. Let’s Encrypt continues to thrive, serving more websites around the world than ever before with excellent…
23
Passwordless Authentication – Access Your Bitwarden Web Vault Without a Password
Logging into your Bitwarden vault just got easier! A new passwordless experience enables you to access your Bitwarden vault with another device.
24
Why We’re Suing NSO
Some of the most courageous journalists in the world write for El Faro, a Salvadoran news organization whose fearless, independent reporting about corruption, violence, and human rights abuses in Central America has earned it the gratitude of readers all over the world—and the enmity of criminal gangs and…
25
The clever reason scammers can’t spell (2019)
Anybody who doesn’t fall off their chair laughing is exactly who they want to talk to – Cormac Herley, Microsoft computer scientist.
26
Memory Safe Languages in Android 13
Posted by Jeff Vander Stoep For more than a decade, memory safety vulnerabilities have consistently represented more than 65% of vulnerab...
27
LastPass owner GoTo has been hacked
We recently concluded our investigation into the security incident first shared with customers in November of 2022 regarding unauthorized activity in a third-party cloud storage environment. We eliminated the threat actor’s access to the environment and found no evidence of additional compromise or threat actor…
28
We found critical vulnerabilities in Hive Social
Dieser Artikel ist auch auf deutsch erschienen. Update: The vulnerabilities are currently no longer exploitable because Hive deactivated their servers. More details Following the Twitter takeover, a number of services promising to be an alternative gained traction. One of those is “Hive Social”, which reached more…
29
New details on commercial spyware vendor Variston
The Threat Analysis Group shares new information on the commercial spyware vendor Variston.
30
Lastpass Security Incident
Please refer to the latest article for updated information.nbs[..]