3331
Google, Mozilla Close to Finalizing Sanitizer API for Chrome and Firefox Browse
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
New
The latest blog posts to take off on Hacker News. 8,771 posts.
3332
Simple Linux kernel memory corruption bug can lead to complete system compromise
An analysis of current and potential kernel security mitigations Posted by Jann Horn, Project ...
3333
Sequoia PGP is now LGPL 2.0
Sequoia is a modular OpenPGP implementation in Rust.
3334
3335
Why not “Why not WireGuard?” (2020)
An article by Michael Tremer titled Why not WireGuard is sometimes shared in VPN discussions. Unfortunately that article contains several misconceptions and some out-of-date information that deserves to be addressed.
3336
3337
Cracking Random Number Generators Using Machine Learning
Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.
3338
Multiple vulnerabilities in WP Fastest Cache plugin
We uncovered multiple vulnerabilities in WP Fastest Cache plugin that could grant attackers access to your privileged information. We strongly recommend that you update to the latest version of the plugin and have an established security solution on your site, such as Jetpack Security.
3339
Missouri Governor Vows to Prosecute St. Louis Post-Dispatch for Reporting
On Wednesday, the St. Louis Post-Dispatch ran a story about how its staff discovered and reported a security vulnerability in a Missouri state education website that exposed the Social Security numbers of 100,000 elementary and secondary teachers. In a press conference this morning, Missouri Gov. Mike Parson (R) said…
3340
How to win at CORS
The 'how' and 'why' of CORS, from start to finish.
3341
Call of Duty Adds Kernel Level Driver for Anti-Cheat
RICOCHET Anti-Cheat fights unfair play across Warzone™ and Vanguard; new kernel-level driver coming first to Call of Duty: Warzone
3342
Container security best practices: Ultimate guide
Container security is critical as companies use them more often for AI workloads and cloud workloads. Learn about 17 container security best practices here.
3343
SHA-1 'fully and practically broken' by new collision (2020)
Independent security journalism: news and analysis on intrusions, vulnerabilities, AI, policy and the software supply chain, plus video and podcasts.
3344
IoT hacking and rickrolling my high school district
This is the story of how I created a botnet of IPTVs to rickroll 10,000+ students for my senior prank.
3345
Study reveals scale of data-sharing from Android mobile phones
These vendor-customised Android variants transmit substantial amounts of information to the OS developer and to third parties such as Google, Microsoft, LinkedIn, and Facebook that have pre-installed system apps.
3346
Reproducible builds for Debian: a big step forward
This is the second article in the “reproducible builds” series. Previously: Improvements in testing and building: GitLab CI and reproducible builds. In the previous article, Improvements in testing and building: GitLab CI and reproducible builds, we discussed reproducible builds and our...
3347
The Microsoft MFA system almost brought me to a nervous breakdown
Update 12/10/21, 10:15 UTC: I never imagined this post would reach the front page on Hacker News and gather so much support. Thank you all…
3348
Farm equipment security at DEF CON 29
At DEF CON 29, a security researcher exposed the vulnerabilities of farm equipment manufacturers.
3349
Hacking YouTube with a MP4
Keyboard Warrior, Breaking software is just finding unintended features, right?
3350
European Parliament Voted to Ban Remote Biometric Surveillance
It’s not actually banned in the EU yet—the legislative process is much more complicated than that—but it’s a step: a total ban on biometric mass surveillance. To respect “privacy and human dignity,” MEPs said that EU lawmakers should pass a permanent ban on the automated recognition of individuals in public spaces…
3351
Malwarebytes' privacy VPN is Mullvad in a shady trenchcoat
Personal blog of Julien (jvoisin) Voisin
3352
Incenser, or how NSA and GCHQ are tapping internet cables (2014)
A weblog about Signals Intelligence, Communications Security and top level telecommunications equipment
3353
Why Did Satoshi Decide to Use Secp256k1 Instead of Secp256r1?
Secp256k1 and secp256r1 are two commonly used curves. Hyperledger / Fabric developed by IBM is using secp256r1 while Bitcoin is using secp256k1. What is the difference between these two and why did Satoshi decide to use secp256k1 which is considered as a surprising choice at the time?
3354
SSH Tunneling Explained
SSH tunneling transports data streams within an existing SSH session. This post explains different tunneling techniques and features as supported by OpenSSH.
3355
Android wallpaper images can threaten privacy
Android 12's Material You could risk your privacy. Learn protective measures with our insights.
3356
YubiKey Bio Series
The YubiKey Bio Series delivers secure second factor and passwordless logins for desktop-based FIDO-supported services and applications.
3357
What is BGP? – BGP routing explained
Border Gateway Protocol (BGP) is the routing protocol for the Internet. Much like the post office processing mail, BGP picks the most effecient routes for delivering Internet traffic.
3358
What Happened to Facebook, Instagram, and WhatsApp?
Facebook and its sister properties Instagram and WhatsApp are suffering from ongoing, global outages. We don’t yet know why this happened, but the how is clear: Earlier this morning, something inside Facebook caused the company to revoke key digital records that tell computers and other Internet-enabled devices how to…
3359
Security Best Practices for Fintech Application Development
Learn how to build and manage your card program using Marqeta's guides and API reference documentation.
3360
Web Scrapers Claim to Sell Personal Data on Facebook Users on a Hacker Forum
Data on over 1.5 billion Facebook users is being sold on a hacking-related forum, enabling cybercriminals advertisers to target users.