4291
New
The latest blog posts to take off on Hacker News. 8,771 posts.
4292
4293
4294
What happens when a ccTLD is retired? Exploring the potential risks of .io
Could the complex political history of Diego Garcia put the .io domain at risk? Tech firms should be aware of potential risk to their websites.
4295
ProtonMail Bridge is now open source
Our Bridge app is now open source for macOS, Windows, and Linux. Find links to the code and an independent security audit report.
4296
4297
Digital surveillance technologies to fight pandemic must respect human rights
The COVID-19 pandemic is a global public health emergency that requires a coordinated and large-scale response by governments worldwide. However, States’ efforts to contain the virus must not be...
4298
Proof of concept: end-to-end encryption in Jitsi Meet
Check out our progress in end-to-end encryption calls in Jitsi. Give us your crypto knowledge feedback with the code and learn how to demo it here.
4299
Deprecating password authentication in GitHub API
Get started with one of our guides, or jump straight into the API documentation.
4300
4301
Stop the Apple and Google contact tracing platform
Apple and Google released a joint specification that allows both iPhones and Android devices to do contact tracing on a global scale. Even though "privacy, transparency, and consent are of utmost importance", this is a game changing event that has grave consequences. We must stop Apple and Google in their tracks. Or…
4302
Moving Away from Gmail
tl;dr: I like PurelyMail and I will slowly switch all my online accounts to use it. I've been using it for almost three months and I didn't have any issues (except with some Hotmail/Outlook addresses). I have a GMail account since 2006 (that's the date
4303
Leakage paths for the Apple / Google Bluetooth tracing system
Plus general overview
4304
4305
Attack Matrix for Kubernetes
While Kubernetes has many advantages, it also brings new security challenges.
4306
230, or not 230? That is the EARN IT question
Over the past several weeks, Signal traffic has gone through the roof. New users are signing up at unprecedented rates, and we’ve expanded our server capacity faster than we ever anticipated. It means a lot to us that so many people are relying on Signal during this difficult time. When users che...
4307
Zoom’s 90-day plan to bolster key privacy and security initiatives
Learn more about how to use each Zoom product to connect with coworkers, customers, businesses, and more with insights and best practices.
4308
Moving from reCAPTCHA to hCaptcha
We recently migrated the CAPTCHA provider we use from Google's reCAPTCHA to a service provided by the independent hCaptcha. Here's a walk through of the rationale in more detail.
4309
We abused Slack's TURN servers to gain access to internal services
Slack's TURN server allowed relaying of TCP connections and UDP packets to internal Slack network and meta-data services on AWS.
4310
Microsoft buys corp.com so bad guys can’t
In February, KrebsOnSecurity told the story of a private citizen auctioning off the dangerous domain corp.com for the starting price of $1.7 million . Domain experts called corp.com dangerous because years of testing showed whoever wields it would have access to an unending stream of passwords, email and other…
4311
Running your own secure communication service with Matrix and Jitsi
Matrix, the open protocol for secure decentralised communications
4312
Cofactor Explained: Clearing Elliptic Curves' dirty little secret
Efficient elliptic curves tend not to have a prime order. This discusses the problems this causes, and the solutions.
4313
4314
Google allows G Suite administrators to monitor and audit user emails
Google allows Google Workspace administrators to monitor and audit users emails. An Administrator may use Google Vault, Content Compliance rules, Audit API or Email delegation to view and audit users emails. It is recommend for Google Workspace Administrators to consider their local laws before performing email…
4315
Userdir URLs like https://example.org/~username/ are dangerous
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
4316
Getting Started with WireGuard
Software developer
4317
Security and Privacy Implications of Zoom
Over the past few weeks, Zoom’s use has exploded since it became the video conferencing platform of choice in today’s COVID-19 world. (My own university, Harvard, uses it for all of its classes. Boris Johnson had a cabinet meeting over Zoom.) Over that same period, the company has been exposed for having both lousy…
4318
Jitsi Meet Security and Privacy
How secure is Jitsi? Learn more about the Jitsi Meet Security & Privacy information, including how we make sure to protect your privacy here.
4319
How I lost control of our bank accounts to a phone scammer
Yesterday, instead of having a productive afternoon at home, I had the privilege of sitting at the bank for a couple of hours, resolving a problem completely of my own doing: I fell for a phone scammer. My wife and I had to close our accounts—which were in excess of 25 years old—and set up new ones. I then spent hours…
4320
Twitter Direct Message Caching and Firefox
Distinguished engineer Martin Thomson explains how this problem occurred, the implications for people who might be affected, and how problems of this nature might be avoided in future. To get ...