4201
The Brave web browser is hijacking links, and inserting affiliate codes
How does this keep happening? It is a mystery.
New
The latest blog posts to take off on Hacker News. 8,771 posts.
4202
eBay is port scanning visitors to their website
Websites are scanning for open ports on your PC to help fight fraud, but this data also flows into a massive, global tracking database.
4203
IBM Releases Fully Homomorphic Encryption Toolkit for macOS and iOS
At IBM Research, we’re inventing what’s next in AI, quantum computing, and hybrid cloud to shape the world ahead.
4204
Looking back at how Signal works
In the midst of world-wide protests against racism and police brutality, a lot of people are becoming more immediately aware and concerned about the security of their data and online communication. We’ve gotten a lot of questions at Signal over the past week, so we wanted to briefly recap how it ...
4205
4206
Blur Tools for Signal
Right now, people around the world are marching and protesting against racism and police brutality, outraged by the most recent police murders of George Floyd and Breonna Taylor. At Signal, we support the people who have gone into the streets to make their voices heard. We believe that something ...
4207
Tor Browser 9.5
Tor Browser 9.5 is now available from the Tor Browser download page and also from our distribution directory.
4208
Microsoft Defender SmartScreen is hurting independent developers
Download Image wallpapers and background images for FREE! 200 Image wallpapers in 1080P, 2K, 4K, 5K HD that fit all your devices!
4209
4210
Analysing the alleged Minneapolis police department “hack”
The situation in Minneapolis at the moment (and many other places in the US) following George Floyd's death [https://en.wikipedia.org/wiki/Death_of_George_Floyd] is, I think it's fair to say, extremely volatile. I wouldn't even know where to begin commentary on that, but
4211
We ditched Google Analytics
We asked ourselves if it was time to switch to a less invasive analytics app than Google Analytics; one...
4212
Twitter, Reddit support challenge of visa applicant social media requirement
WASHINGTON – Twitter, Reddit, and Internet Association filed an amicus brief late yesterday in support of a lawsuit filed last year by the Knight First Amendment Institute at Columbia University, the Brennan Center for Justice, and Simpson Thacher & Bartlett LLP on behalf of plaintiffs Doc Society and International…
4213
Basic Intro to Elliptic Curve Cryptography (2019)
Learn cryptography in Go by building ciphers, hashes, password security, and encryption tools. Understand security beneath the library call.
4214
Rootless Containers
Rootless containers is a new concept that don’t require root privileges in order to formulate, but have some unique challenges.
4215
Finding secrets by decompiling Python bytecode in public repositories
Cache rules everything around me. `pyc` files can contain secrets and should not be checked in to source control. Use the standard Python [.gitignore](https://github.com/github/gitignore/blob/master/Python.gitignore).
4216
Zero-day in Sign in with Apple
What if I say, your Email ID is all I need to takeover your account on your favorite website or an app. Sounds scary, right? This is what a…
4217
Career Choice Tip: Cybercrime Is Mostly Boring
When law enforcement agencies tout their latest cybercriminal arrest, the defendant is often cast as a bravado outlaw engaged in sophisticated, lucrative, even exciting activity. But new research suggests that as cybercrime has become dominated by pay-for-service offerings, the vast majority of day-to-day activity…
4218
Linux Security Hardening and Other Tweaks
A collection of kernel and userland settings one can change to improve the security and usability of a Linux system. Targeted at Arch, but should work for other distros too.
4219
The radix 2^51 trick (2017)
Starting from the “ones” position, we add 6 + 6 = 12, write down a 2 and carry a 1. We proceed to the left, one position at a time, until there are no more digits to add.
4220
4221
Bahamas Company Registry Leaked
The people are the best thing about a life in science fiction – eclectic, bright, opinionated, talented – people like Elise Mathson: writer, jeweller, and all-round brilliant person (she's up for a Hugo this year).
4222
4223
A Guide to Threat Modelling for Developers
Threat modeling is a risk based approach to cyber security requirements analysis.
4224
4225
Chromium project finds that 70% of security defects are memory safety problems
The Chromium project finds that around 70% of our serious security bugs are memory safety problems . Our next major project is to prevent such bugs at source.
4226
Catalina is checking notarization of unsigned executables
This is a follow-up to Allan Odgaard's excellent article macOS 10.15: Slow by Design . I want to talk specifically about the first section "Spawning a new Process", because there has been widespread misunderstanding of this. Odgaard provides a simple test to show that the first run of an executable is delayed while…
4227
Safe-Linking – Eliminating a 20 year-old malloc() exploit primitive
Research by: Eyal Itkin Overview One of our goals for every research project we work on in Check Point Research is to get an intimate understanding of how software work: What components do they contain? Are they vulnerable? How can attackers exploit these vulnerabilities? And more importantly, how can we protect…
4228
Stealing secrets from developers using WebSockets
This is a story of a convoluted, not-very-useful method for extracting codez from unwitting JavaScript developers working on top secret…
4229
4230