2041
New
The latest blog posts to take off on Hacker News. 4,335 posts.
2042
How to effectively evade the GDPR and the reach of the DPA
Musings on Information Security and Privacy Risk Management - Thierry Zoller.
2043
Cryptography is not magic
Crypto is often treated like a black art only anointed experts can hope to wield safely. It's not. There are laws, and we can learn them.
2044
Smartphone contact tracing has failed everywhere
Even the ‘successful’ contact tracing apps have fallen well below expectations, and incapable of discovering their effectiveness.
2045
Thinking of a Cybersecurity Career?
Thousands of people graduate from colleges and universities each year with cybersecurity or computer science degrees only to find employers are less than thrilled about their hands-on, foundational skills. Here’s a look at a recent survey that identified some of the bigger skills gaps, and some thoughts about how…
2046
On Liberating My Smartwatch from Cloud Services
I’ve often said that if we convince ourselves that technology is magic, we risk becoming hostages to it . Just recently, I had a brush with this fate, but happily, I was saved by open source.
2047
2048
On the Twitter Hack
Twitter was hacked this week. Not a few people’s Twitter accounts, but all of Twitter. Someone compromised the entire Twitter network, probably by stealing the log-in credentials of one of Twitter’s system administrators. Those are the people trusted to ensure that Twitter functions smoothly. The hacker used that…
2049
The German Problem with Tor
EAs of the 5th July 2020, there are 1357 Tor bridges available for users in countries who censor the Tor network to use. Having just over 1,000 IP addresses is not a lot for such a big privacy network as Tor is, especially considering that the number of Tor Bridges peaked at 4,227 on the 4th January 2015. That means…
2050
Who’s behind Wednesday’s epic Twitter hack?
Twitter was thrown into chaos on Wednesday after accounts for some of the world’s most recognizable public figures, executives and celebrities starting tweeting out links to bitcoin scams. Twitter says the attack happened because someone tricked or coerced an employee into providing access to internal Twitter…
2051
No, you couldn't have made more money than the Twitter hacker
Analysis of various approaches to monetizing the Twitter hack
2052
Reverse engineering a camera protocol for fun and profit
Way back in late 2019 , I dissected a Reolink B800 IP camera to demonstrate the various parts of an embedded Linux system. It’s fairly nice hardware, actually—it has a 4K video sensor, a microphone, power over Ethernet, and is nominally waterproof. And yes, it runs Linux.
2053
Lies, damn lies, and front-end tracking
I’m here to warn you about the dangers of front-end user tracking. Not because Google is tracking you, but because it doesn’t track you quite well enough.
2054
2055
Reddit's website uses DRM for fingerprinting
But hey, at least Reddit gets less ad fraud!
2056
The GDPR as accidentally explained by people in the US
Bashing the European Union’s General Data Protection Regulation (GDPR) seems to have become one of American activists’ favourite hobbies in the tech field. Some criticism is entirely justified. But many claims that the GDPR is “counterproductive” or “misses the point” are based on misconceptions, rather than an…
2057
2058
2059
How to use FIDO2 USB keys with SSH
I recently installed Ubuntu Wacky Whatever, the latest version, and I’m very excited about it shipping with SSH 8.2, which means that I can finally use hardware USB keys for secure, easy to use authentication. If securing your devices has been something you’ve wanted to easily do yourself, read on, because it’s…
2060
Disclosure: Another macOS privacy protections bypass
Today I'm disclosing a macOS privacy protections bypass. (You may recall that I disclosed another one last year .) The privacy protections system (also known as TCC: Transparency, Consent, and Control) was introduced in macOS Mojave, and one of its purposes is to protect certain files on your Mac from access by…
2061
Arduino FIDO2 Authenticator
Introducing URU Card: an open-source, wallet-sized FIDO2 BLE authenticator based on ESP32, ATECC508A, OLED screen, and MPR121 touch keyboard. Join the project and start building your own secure authenticator.
2062
FreeDVDBoot – Hacking the Playstation 2 through its DVD player
I've previously discussed how the PlayStation 2 doesn't have any good entry-point software exploits for launching homebrew. You need to either purchase a memory card with an exploit pre-installed (or a memory card to USB adapter), a HDD expansion bay (not available to slim consoles), open up the console to block the…
2063
No, Safari 14 does not block Google Analytics
This article aims to subdue the rumors that Safari 14 will block Google Analytics (and other similar libraries) by default. It will not.
2064
‘BlueLeaks’ Exposes Files from Hundreds of Police Departments
Hundreds of thousands of potentially sensitive files from police departments across the United States were leaked online last week. The collection, dubbed “ BlueLeaks ” and made searchable online, stems from a security breach at a Texas web design and hosting company that maintains a number of state law enforcement…
2065
Reverse Engineering the Comtech AHA363 PCIe Gzip Accelerator Board
All this work was done in November last year. I haven’t worked on it since, but others have shown interest in picking this up, so it’s about time this gets thrown out in the open.
2066
2067
Maersk, Me and NotPetya
Maersk is the world’s largest integrated shipping and container logistics company.
2068
Turn on MFA Before Crooks Do It for You
Hundreds of popular websites now offer some form of multi-factor authentication (MFA), which can help users safeguard access to accounts when their password is breached or stolen. But people who don’t take advantage of these added safeguards may find it far more difficult to regain access when their account gets…
2069
2070