New
The latest blog posts to take off on Hacker News. 556 posts.
Flattr now deletes your web browsing history within 3 months
Flattr improves customer privacy protections by automatically deleting collected data when its no longer needed for its core service.
Improving DNS Privacy in Firefox
Domain Name Service (DNS) is one of the oldest parts of internet architecture, and remains one that has largely been untouched by efforts to make the web safer and more ...
Bypassing website anti-scraping protections
Apify help & support
Insider Attack Resistance
Our smart devices, such as mobile phones and tablets, contain a wealth of important personal information that needs to be kept safe. Google is constantly trying to find new and better ways protect that valuable information on Android devices. From partnering with external researchers to find and fix vulnerabilities…
A security vulnerability in Git that can lead to arbitrary code execution
The Git community has disclosed an industry-wide security vulnerability in Git that can lead to arbitrary code execution when a user operates in a
So Your Startup Received the Nightmare GDPR Letter
Some dumb lawyer figured it would be fun to give GDPR trolls a form letter to use to inflict maximum damage on unsuspecting companies. The reason why this is dumb is simple: the GDPR serves a legitimate need but by decreasing the signal:noise ratio handcrafted requests from users with a legitimate concern can get…
Pwned Passwords in Practice: Real World Examples of Blocking the Worst Passwords
Back in August, I pushed out a service as part of Have I Been Pwned [https://haveibeenpwned.com/] (HIBP) to help organisations block bad passwords from their online things. I called it "Pwned Passwords" and released 320M of them from real-world data breaches [https://www.troyhunt.com/introducing-306-
I put all my personal data on eBay
And almost made lots of money
Hacking a cheap fitness tracker bracelet
A blog post on reverse engineering and customizing the firmware of a cheap fitness tracker bracelet.
NetBSD Network Security Audit
Over the last five months, hundreds of patches were committed to the source tree as a result of this work. Dozens of bugs were fixed, among which a good number of actual, remotely-triggerable vulnerabilities.
USB Reverse Engineering: Down the Rabbit Hole
Thanks for the featured writeup Hackaday! Make sure to check out the comments over there as well. Looks like Hackernoon picked it up as well, make sure to check in with the comments there too. It would be great if you could also head over to Hacker News, give an upvote, and join in the comments there. Let's get this…
Why Is Location Data No Longer Private?
The past month has seen one blockbuster revelation after another about how our mobile phone and broadband providers have been leaking highly sensitive customer information, including real-time location data and customer account details. In the wake of these consumer privacy debacles, many are left wondering who’s…
GDPR for lazy people: Block all European users with Cloudflare Workers
Xoilac TV là website chuyên phát sóng trực tiếp các trận bóng đá nổi tiếng với đội ngũ bình luận viên tiếng Việt hoàn toàn miễn phí. Tại đây, người xem có thể
Things to know about the GDPR, Mozilla and Firefox
Has your email inbox been filling up with privacy policy updates? It seems like every service, app or subscription I’ve signed up for (including more tha
The GDPR blog post
It was about 6 months ago that I was involved in my first GDPR meeting. Other people in our company had obviously been talking about it…
Three Charged in Fatal Kansas ‘Swatting’ Attack
Federal prosecutors have charged three men with carrying out a deadly hoax known as “swatting,” in which perpetrators call or message a target’s local 911 operators claiming a fake hostage situation or a bomb threat in progress at the target’s address — with the expectation that local police may respond to the scene…
‘We Got to Be Cool About This‘: An Oral History of the LØpht, Part 1
Independent security journalism: news and analysis on intrusions, vulnerabilities, AI, policy and the software supply chain, plus video and podcasts.
YubiKey comes to the iPhone with Mobile SDK for iOS and LastPass support
YubiKey iOS support is here. For developers, we now offer Yubico Mobile SDK for iOS, and LastPass supports the YubiKey NEO over NFC on iOS.
GDPR Hysteria Part II, Nuts and Bolts, Actionable Advice
Part I of this is here , if you haven’t read it yet please do so before reading this installment, it will help to establish context.
Extracting SSH Private Keys from Windows 10 ssh-agent
The newest Windows 10 update includes OpenSSH utilities, including ssh-agent. Here’s how to extract unencrypted saved private keys from the registry
Chinese Government Fabricates Social Media Posts for Strategic Distraction
The Chinese government has long been suspected of hiring as many as 2,000,000 people to surreptitiously insert huge numbers of pseudonymous and other deceptive writings into the stream of real social media posts, as if they were the genuine opinions of ordinary people. Many academics, and most journalists and…
GDPR: Don't Panic
In another week the GDPR , or the General Data Protection Regulation will become enforceable and it appears that unlike any other law to date this particular one has the interesting side effect of causing mass hysteria in the otherwise rational tech sector.