3541
New [July 2, 2021] Audacity Data Collection Policy
Audacity is the world's most popular audio editing and recording app. Edit, mix, and enhance your audio tracks with the power of Audacity. Download now!
New
The latest blog posts to take off on Hacker News. 8,771 posts.
3542
Another 0-day looms for many Western Digital users
Countless Western Digital customers saw their MyBook Live network storage drives remotely wiped in the past month thanks to a bug in a product line the company stopped supporting in 2015, as well as a previously unknown zero-day flaw. But there is a similarly serious zero-day flaw present in a much broader range of…
3543
Protecting reserved roles with PostgreSQL Hooks
Using Postgres Hooks to protect functionality in your Postgres database.
3544
3545
Intuit to share payroll data from 1.4M small businesses with Equifax
Financial services giant Intuit this week informed 1.4 million small businesses using its QuickBooks Online Payroll and Intuit Online Payroll products that their payroll information will be shared with big-three consumer credit bureau Equifax starting later this year unless customers opt out by the end of this month.
3546
A distributed spam attack across the public Matrix network
Matrix, the open protocol for secure decentralised communications
3547
Black Hat Exploits of the Stupid-Easy 80s
I'm not saying there was no computer security in the 1980's but, wait... Yes. Yes I am.
3548
NATO Classified Cloud Platform Compromised
Hackers attempted to use the data in an extortion scheme, joking about altering the source code or sending it to Russian intelligence
3549
An EPYC escape: Case-study of a KVM breakout
Posted by Felix Wilhelm, Project ZeroIntroduction KVM (for Kernel-based Virtual Machine) is the ...
3550
A Docker footgun led to a vandal deleting NewsBlur's MongoDB database
tl;dr: A vandal deleted NewsBlur’s MongoDB database during a migration. No data was stolen or lost.
3551
A Declaration of the Independence of Cyberspace (1996)
by John Perry Barlow Governments of the Industrial World, you weary giants of flesh and steel, I come from Cyberspace, the new home of Mind. On behalf of the future, I ask you of the past to leave us alone. You are not welcome among us. You have no sovereignty where we gather.We have no elected...
3552
Typed Programs Don't Leak Data
Mistral Contrastin's thought bubble, blog, and personal revelations.
3553
Privacy for Students: Surveillance Self-Defense
Schools are increasingly adopting surveillance technology to spy on students while they’re at school, at home, or even on their social media. The companies that make these surveillance products and services advertise them to schools as a way to keep students safe–but there’s no evidence so far that they actually...
3554
Mimicking a device is becoming almost impossible
From User-Agent tricks to canvas hashes, see how modern device detection—Picasso, fonts, emojis, touch—makes spoofing fail. Learn how to blend in safely.
3555
AWS acquires Wickr
We’re excited to share that AWS has acquired Wickr, an innovative company that has developed the industry’s most secure, end-to-end encrypted, communication technology. With Wickr, customers and partners benefit from advanced security features not available with traditional communications services – across messaging…
3556
Rally, a novel privacy-first data sharing platform
Mozilla teams up with Princeton University researchers to enable crowdsourced science for public good; collaborates with research groups at Princeton, Stan
3557
3558
International coalition calls for action against surveillance-based advertising
Groups in Europe and U.S. ask for action to end practices that threaten citizens’ rights.
3559
I made 50k calls to explore the telephone network
Post describing my research wardialing Finnish freephones.
3560
The Most Dangerous Censorship
Invisible but present, and far from the eyes of the public
3561
What's Inside the EU Green Pass QR Code?
Here in Austria, you need to be either vaccinated against, tested negative for, or have recovered from COVID-19 to go to the pub (or pretty much everywhere) right now. If you don't want to carry around your paperwork proving one of those, you can alternatively show your Green Pass QR code to be let in.
3562
A reference counting bug which leads to local privilege escalation in io_uring
Hello, I’m Shiga( @Ga_ryo_ ), a security engineer at Flatt Security Inc.
3563
AuthZ: Scalable permissions system
How we built an authorization system based on Google Zanzibar
3564
SLSA, an End-to-End Framework for Supply Chain Integrity
Posted Kim Lewandowski, Google Open Source Security Team & Mark Lodato, Binary Authorization for Borg Team Supply chain integrity attacks—u...
3565
How I Found a Vulnerability to Hack iCloud Accounts and How Apple Reacted to It
This article is about how I found a vulnerability on Apple forgot password endpoint that allowed me to takeover an iCloud account. The vulnerability is completely patched by Apple security team and it no longer works. Apple Security Team rewarded me $18,000 USD as a part of their bounty program but I refused to…
3566
An unwanted update to your Google Account
Google sent me an email informing me that they will change the country associated with my account in 30 days. I wanted to know why.
3567
Spectre mitigations murder userspace performance
Robert O'Callahan. Christian. Kiwi. Software guy. All content human-authored unless otherwise noted.
3568
Brave, the false sensation of privacy
ebin.city is a short 4-character .city domain available for buy. Listed at $100 — secure it before someone else does.
3569
Representing SHA-256 Hashes as Avatars
How to turn 256 bits of entropy into a beautiful, avatar-friendly circular SVG: the Hashvatar.
3570
How does one get hired by a top cybercrime gang?
The U.S. Department of Justice (DOJ) last week announced the arrest of a 55-year-old Latvian woman who’s alleged to have worked as a programmer for Trickbot , a malware-as-a-service platform responsible for infecting millions of computers and seeding many of those systems with ransomware.