3961
DKIM: Show Your Privates
If you’re like most people, there’s a good chance that it’s been years since you’ve sent an email that wasn’t cryptographically signed. You don’t use PGP, you say? Well, even if you are…
New
The latest blog posts to take off on Hacker News. 8,771 posts.
3962
You might not need to store plaintext email addresses
Earlier this year, when I went from having only Facebook-login on Wishy.gift to allow registrations with email address and password, one of my concerns was how to implement this is a way that protects the data and privacy of my users. I don’t have any ads or analytics on the site, the users can select whatever display…
3963
Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA
A weblog about Signals Intelligence, Communications Security and top level telecommunications equipment
3964
NAT Slipstreaming
exploit NAT/firewalls to access TCP/UDP services bound to any system behind victim's NAT
3965
Introducing Semgrep and r2c
An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.
3966
Image Scaling Attacks
This post is part of a series about machine learning and artificial intelligence. Click on the blog tag “huskyai” to see related posts. Overview: …
3967
FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals
On Monday, Oct. 26, KrebsOnSecurity began following up on a tip from a reliable source that an aggressive Russian cybercriminal gang known for deploying ransomware was preparing to disrupt information technology systems at hundreds of hospitals, clinics and medical care facilities across the United States. Today…
3968
How to Dual-Boot Ubuntu 20.04 and Windows 10 with Encryption
When you run the Ubuntu installer, there’s an option to dual-boot Ubuntu with an existing Windows installation. There’s also an option to encrypt your Ubuntu...
3969
3970
Spanish police plans to extend use of its lie-detector while efficacy is unclear
Veripol is a software that assesses the veracity of complaints filed with the Spanish national police. It was introduced in 2018, but it's unclear if it works as intended.
3971
Restrict Access to your internal websites on AWS with BeyondCorp
Discover how BeyondCorp assists in securely restricting access to internal websites, ensuring organizational data remains protected.
3972
Gitlab Blocked Iranians’ Access
Ahmad Haghighi’s personal page.
3973
Penetration testing and low-cost freelancing
Penetration testing is complex. For it to be successful, the tester needs to possess a variety of different abilities and skills. Some testers rely only on automated tools, while others focus more on manual analysis. While a creative and unconventional way of thinking is necessary, it is also important for the tester…
3974
The Now-Defunct Firms Behind 8chan, QAnon
Some of the world’s largest Internet firms have taken steps to crack down on disinformation spread by QAnon conspiracy theorists and the hate-filled anonymous message board 8chan . But according to a California-based security researcher, those seeking to de-platform these communities may have overlooked a simple legal…
3975
KeePassXC 2.6.2 Released
KeePassXC Password Manager
3976
Whose Computer Is It?
Patrick Wardle highlighted a tweet by Maxwell (" Some Apple apps bypass some network extensions and VPN Apps. Maps for example can directly access the internet bypassing any NEFilterDataProvider or NEAppProxyProviders you have running "), sparking an extensive HN discussion on Apple's ham-fisted tactics (not unlike…
3977
Let’s build a high-performance fuzzer with GPUs
TL;DR: Can we use GPUs to get 10x performance/dollar when fuzzing embedded software in the cloud? Based on our preliminary work, we think the answer is yes! Fuzzing is a software testing technique that supplies programs with many randomized inputs in an attempt to cause unexpected behavior. It’s an important, […]
3978
1Password for Linux beta
Buckle up Linux Desktop users! We just opened an awesome ride that we'd love for you to join us on. 🎢 🙌🏼
3979
Palo Alto Networks sends cease-and-desist letter to take down review videos
In response to our Cloud Security Punch-Out! videos, Palo Alto Networks sent this cease and desist letter, demanding the comparison be removed. Here is my response.
3980
Combating abuse in Matrix – without backdoors
Matrix, the open protocol for secure decentralised communications
3981
Face ID and Touch ID for the Web
People often see passwords are the original sin of authentication on the web.
3982
Many of the root certificates on Windows are not needed
As of today, Windows trusts 322 root certificates issued by 122 different organizations from 47 countries. This number is quite high, and has been steadily growing over the last few years. And it turns out many of those certificates are not needed at all by the vast majority of Windows users, can be distrusted with no…
3983
Discord Desktop App RCE
A few months ago, I discovered a remote code execution issue in the Discord desktop application and I reported it via their Bug Bounty Prog...
3984
Chrome exempts Google sites from user site data settings
In Google Chrome's "Cookies and site data" settings, accessible via the Preferences menu item or directly with chrome://settings/cookies in the address bar, you can enable the setting "Clear cookies and site data when you quit Chrome". However, I've discovered that Chrome exempts Google's own sites, such as Search and…
3985
3986
Lessons from Bug Hunters Who've Found 400 Bugs in Popular DBMSs
TiDB is the distributed SQL database built for AI agents. Vectors, transactions, and analytics in one engine with ACID guarantees and elastic scale.
3987
Uninstall Nano Defender
Straight talk on Canadian online privacy, open-source software, PIPEDA, browser extension security, and practical tools to protect your personal data.
3988
Exponential growth in DDoS attack volumes
How Google prepares for and protects against the largest volumetric DDoS attacks.
3989
Reimagining the Browser: Introducing Cloudflare Browser Isolation Beta
Today, we’re excited to open up a beta of a third approach to keeping web browsing safe with Cloudflare Browser Isolation.
3990
Reverse Engineer Amazon's Whispersync
I am a big fan of my Kindle. This is the device I’d bring over to a desert island. I am also a fairly frequent user of the highlight feature where you can select a bit of text you like and save it. One thing is bothering me though: the lack of open API on the Kindle to retrieve the data about me. Amazon provides the…