The latest blog posts to take off on Hacker News. 4,333 posts.
Notice Note: As of 2022/10/25 the information in this series is slightly outdated. See Part 5 for more up to date information. I take no responsibility for any damages due to the information or steps provided on this site. The content is for educational purposes only. You modify your own car’s firmware at your…
Thanks to @yarbabin for the logo Electronic payment systems have existed on the Internet for a long time, and some bugs in them are twenty years old. We’ve found critical vulnerabilities allowing us…
Code level discussion of web scraping, gray hat automation, growth hacking and bounty hunting
Consider the user's perspective when naming a security initiative
This post describes the implementation and use of pledge() and unveil() in SerenityOS.
L ast month I wrote a post about the UK’s “world-leading” vision for age-gating the open web. It got a bit of attention . That post, sadly, encompassed only one aspect of your compliance obligations under the Online Safety Bill . In this post, I’m going to tell you about the rest.
Twice in the past month KrebsOnSecurity has heard from readers who had their accounts at big-three credit bureau Experian hacked and updated with a new email address that wasn’t theirs. In both cases the readers used password managers to select strong, unique passwords for their Experian accounts. Research suggests…
Firefox can now do offline and privacy-preserving translation of eight languages with more on the way. Powered by open-source and machine-learning.
Today we’re going to be talking about this code, shared on Twitter by Paul Moore. It’s worth noting that this code snippet was after Paul attempted to alert them to security issues with…
Digging into the world of "pig-butchering" scams
Future al Qaeda cleric Anwar al-Awlaki also connected
I recently started verifying user email addresses during signup to prevent bots, mistyped emails, and also to ensure that addresses are…
"Privacy" can mean different things in different contexts. Tracking-reduction and tracking-evasion represent different goals with some conflict and overlap.
Quick and easy guide for securing macOS systems, for both laymen and security enthusiasts. Last updated for Golden Gate.
Impersonating someone in SMS texts is way too easy, we must change this to prevent social engineering fraud.
Matt Jacobson, recovering software engineer.
T oday is going to be the day that you read a lot about the UK’s intention to kill cookie pop-ups as part of its post-Brexit Data Reform Bill. By now you should have somehow realised that there’s a bit more to it than that, and that your work is not set to get any easier.
In the current version of macOS, Monterey, on every system update on a system containing an M1 chip, such as all the new shiny/fast ARM (“Apple Silicon”) macs, the update process phones home to Apple to obtain a special boot signature, known in Apple jargon as a “ticket”.
A 33-year-old Illinois man was sentenced to two years in prison today following his conviction last year for operating services that allowed paying customers to launch powerful distributed denial-of-service (DDoS) attacks against hundreds of thousands of Internet users and websites.
In the recent paper about "soulbound" tokens, Vitalik Buterin et al. write that they aim to build technology that is "acceptably non-dystopian". Do any of today's self-sovereign identity projects fit that bill?
In this write-up we're going to take a look at exploiting the Wii U's USB Host Stack. Over the past few months I spent a lot of time reverse...
Imagine… Last night, lightning struck our house and burned it down. I escaped wearing only my nightclothes. In an instant, everything was vaporised. Laptop? Cinders. Phone? Ashes. Home server? A smouldering wreck. Yubikey? A charred chunk of gristle. This presents something of a problem. In order to recover my digital…
Statistics Norway wants to receive several million daily receipts from food stores, signalling a new era in state data collection. Privacy advocates and the supermarkets themselves are unhappy. People living in Norway are used to
Mutation-based fuzzing is based on the idea that new, bug-triggering inputs can often be created by randomly modifying existing, non-bug-triggering inputs. For example, if we wanted to find bugs in a PDF reader, we could grab a bunch of PDF files off the web, mutate them by flipping a few bits or something, and feed…
