3991
Zoom Rolling Out End-to-End Encryption Offering
We’re excited to announce that starting next week Zoom’s E2EE offering will be available as a technical preview! Learn more
New
The latest blog posts to take off on Hacker News. 8,771 posts.
3992
HashiCorp Boundary
Simple and secure remote access — to any system anywhere based on trusted identity.
3993
PRISM – NSA surveillance program did not prevent a single terrorist attack
Mass surveillance costs millions of Dollars. Yet, it does not improve security.
3994
Dockerfile Security Best Practices
Quickly improve the security of your docker containers by following security best practices in the Dockerfile
3995
3996
3997
Microsoft Uses Trademark Law to Disrupt Trickbot Botnet
Microsoft Corp. has executed a coordinated legal sneak attack in a bid to disrupt the malware-as-a-service botnet Trickbot , a global menace that has infected millions of computers and is used to spread ransomware. A court in Virginia granted Microsoft control over many Internet servers Trickbot uses to plunder…
3998
Please stop using CDNs for external JavaScript libraries
I want to discuss a (minor) antipattern that I think is (slightly) harmful. Lots of websites use large Javascript libraries. They often include them by using a 3rd party Content Delivery Network like so: Copied HTML to 📋⧉ HTML<script src="https://cdn.example.com/js/library-v1.2.3.js"></script> There are, supposedly, a…
3999
Memory safe ‘curl’ for a more secure internet
tldr: work has started to make Hyper work as a backend in curl for HTTP. curl and its data transfer core, libcurl, is all written in C. The language C is known and infamous for not being memory safe and for being easy to mess up and as a result accidentally cause security problems. At … Continue reading rust in curl…
4000
4001
We Hacked Apple for 3 Months
Between the period of July 6th to October 6th myself, Brett Buerhaus, Ben Sadeghipour, Samuel Erb, and Tanner Barnes worked together and hacked on the Apple bug bounty program.
4002
Privacy Badger Is Changing to Protect You Better
Privacy Badger was created to protect users from pervasive non-consensual tracking, and to do so automatically, without relying on human-edited lists of known trackers. While our goals remain the same, our approach is changing. It is time for Privacy Badger to evolve.Thanks to disclosures from...
4003
DuckDuckGo Founding Member in Global Privacy Control Standards Effort
We're proud to announce the launch of Global Privacy Control (GPC), a new standard to put privacy protection in the hands of consumers.
4004
Crouching T2, Hidden Danger
Let’s talk about that thing nobody’s talking about. Let’s talk about a vulnerability that’s exposing 2018-2020 Macs while most are declining to act nor report about the matter. Oh, and did I mention it’s unpatchable?
4005
DOMPurify bypass: XSS via HTML namespace confusion
Securitum is a pure pentesting company specialising in the security of IT systems. We have experience in performing security audits (including penetration tests) - mainly for financial/e-commerce/industrial sectors. We have performed penetration tests and cyber security services for leading European banks (see…
4006
Unlocking eBPF power
Spiral journey over kubernetes, cloud and devops world.
4007
It’s 255:19AM. Do you know what your validation criteria are?
Ed25519 signature validation criteria vary widely between implementations, creating risks for consensus systems. Here's why and how to fix it.
4008
Sonos is spying on me (and you)
I recently decided to get a wireless speaker for our Kitchen. Sonos seems like an obvious choice these days. The sound quality and aesthetics were very appealing. So I ordered a Sonos One SL speaker. In terms of sound quality and looks, I was very pleased. I’m not an audiophile but the sound quality seemed…
4009
French bar owners arrested for offering free WiFi but not keeping logs
At least five bar owners in Grenoble, France have been arrested for providing WiFi at their businesses without keeping logs. The bar owners were arrested
4010
4011
Hacking Grindr Accounts with Copy and Paste
Sexuality, relationships and online dating are all rather personal things. They're aspects of our lives that many people choose to keep private or at the very least, share only with people of our choosing. Grindr [https://www.grindr.com/] is "The World's Largest Social Networking App for Gay,
4012
Pressing YubiKeys
If you work in tech, you probably have a YubiKey. I have this one, the YubiKey 5C Nano:
4013
Privacy is the most important concept of our time
Privacy is more than the right of an individual to be left alone. It concerns the very fabric of society.
4014
Flatpak: A security nightmare – two years later
Flatpak - a security nightmare
4015
4016
Code scanning for security vulnerabilities now available
Now available, code scanning is a developer-first, GitHub-native approach to easily find security vulnerabilities before they reach production.
4017
Linux under WSL2 can be leaking
We have found that you could be leaking your Internet traffic when running Linux under WSL2 (Windows Subsystem for Linux 2).
4018
4019
4020
Investigating TLS Blocking in India
We ran experimental TLS blocking measurements in India