New
The latest blog posts to take off on Hacker News. 4,334 posts.
WhatsApp and most alternatives share the same problem
Shall I migrate to Signal, Threema or Telegram? No, because they all have — WhatsApp included — the same problem: They are walled gardens. Imagine a world where for each mail recipient using a separate domain, I would need separate mail client? Or in other words: Gmail users can only communicate with Gmail users…
Google Analytics: Stop feeding the beast
Google Analytics is only very superficially free. Why I removed it, what it really costs your users, and the privacy-friendly alternatives I use instead.
Linux Capabilities in a nutshell (2019)
Linux capabilities can be difficult to understand so let's go through them quickly
Indian Government Breached, Massive Amount of Critical Vulnerabilities
A writeup detailing the vulnerability reporting process that took place after Sakura Samurai had breached the Indian Government
When did “privacy issues” start to mean “too much privacy”?
Clubhouse draws the ire of journalists
Passwordless Logins with Yubikey
Yubikey is currently the de facto device for U2F authentication. It enables adding an extra layer of security on top of SSH, system login, signing GPG keys,...
What security does a default OpenBSD installation offer?
In this text I will explain what makes OpenBSD secure by default when you install it. Do not take this for a security analysis, but more like a guide to help you understand what is done by OpenBSD to have a secure environment. The purpose of this text is not to compare OpenBSD to other OSes but to say what you can…
I exploited existing YouTube videos with a fake Patreon profile
I am watching a lot of investing videos on youtube recently. I like to watch them while I eat, or they play in the background while I do something else. I…
A Warning to Users of NurseryCam
This blog post is intended for a less technical audience – specifically parents and nurseries using the NurseryCam system. NurseryCam is a camera system that is installed in nurseries, allowi…
What Do You Agree to When You Accept All Cookies
I have been writing software for exactly twenty years now. In the course of this I have learnt very many things, which I hope to journal over time.
What’s interesting about the Florida water system hack is that we heard about it
Stories about computer security tend to go viral when they bridge the vast divide between geeks and luddites, and this week’s news about a hacker who tried to poison a Florida town’s water supply was understandably front-page material. But for security nerds who’ve been warning about this sort of thing for ages, the…
What data on myself I collect and why (2020)
How I am using 50+ sources of my personal data
Analyzing and breaking an externally encrypted HDD
Analyzing and breaking external encrypted HDD has been a “hobby” of mine for quite some time. With my colleagues Joffrey Czarny and Julien Lenoir we looked at several models in the past :
How you can get banned from Facebook permanently
Contact Facebook customer service for your customer service needs. Reach out via phone, email, or social media.
Facebook Disabled My Account After I Criticized Them
Facebook unfriended me. Why? So far as I can tell, it’s because I’ve been using Facebook to advocate for decentralization of social media. And apparently th ...
Unlocking LUKS2 Volumes with TPM2, FIDO2, PKCS#11 Security HW on Systemd 248
Posts and writings by Lennart Poettering
DDoS-Guard to forfeit internet space occupied by Parler
Parler , the beleaguered social network advertised as a “free speech” alternative to Facebook and Twitter, has had a tough month. Apple and Google removed the Parler app from their stores, and Amazon blocked the platform from using its hosting services. Parler has since found a home in DDoS-Guard , a Russian digital…
I no longer trust The Great Suspender
I know a number of folks use The Great Suspender to automatically suspend inactive browser tabs in Chrome. Apparently recent versions of this extension have been taken over by a shady anonymous entity and is now flagged by Microsoft as malware . Notably the most recent version of the extension (v7.1.8) has added…
Update: YouTube-dl reinstated thanks to EFF (2020)
In October, the popular and famous archivist tool youtube-dl was taken down by GitHub due to a DMCA request by the Recording Industry Association of America. I posted a detailed analysis explaining the relation between international, US, EU and German law, and showing why this request was very different from what most…
The embedded YouTube player told me what you were watching
David Schütz's bug bounty writeups