The latest blog posts to take off on Hacker News. 8,771 posts.
On January 15, a Norweigian Consumer Council (NCC) investigative report exposed the ways that Grindr, OKCupid, and eight other apps are collecting and sharing extremely sensitive personal data. Grindr in particular was sharing users’ age and location tied to a device ID that would allow trackers to...
Ring isn't just a product that allows users to surveil their neighbors. The company also uses it to surveil its customers.An investigation by EFF of the Ring doorbell app for Android found it to be packed with third-party trackers sending out a plethora of customers’ personally identifiable...
/PRNewswire-PRWeb/ -- Linode, the world's largest independent cloud provider, today announced advanced protection across its global network of 11 data centers...
If you’re running a business online, few things can be as disruptive or destructive to your brand as someone stealing your company’s domain name and doing whatever they wish with it. Even so, most major Web site owners aren’t taking full advantage of the security tools available to protect their domains from being…
Secret Manager is a new GCP product that securely and conveniently stores API keys, passwords, certificates, and other sensitive data.
Spanish translation Communities across the United States are starting to ban facial recognition technologies. In May of last year, San Francisco banned facial recognition; the neighboring city of Oakland soon followed, as did Somerville and Brookline in Massachusetts (a statewide ban may follow). In December, San…
250 million leaked conversations between Microsoft customer support agents and customers were left exposed on the web, putting users at risk of phishing.
In 2020, with better alternatives available, using Google Analytics (GA) to track your web usage is n...
A classically trained sysadmin shouting into the void.
Users can have more trust in ProtonVPN because all our apps are open source and independently audited for security. Learn about Proton VPN’s open source apps.
An SQLite database is highly resistant to corruption. If an application crash, or an operating-system crash, or even a power failure occurs in the middle of a transaction, the partially written transaction should be automatically rolled back the next time the database file is accessed. The recovery process is fully…
On Tuesday, the NSA announced they had found a critical vulnerability in the certificate validation functionality on Windows 10 and Windows Server 2016/2019. This bug allows attackers to break the validation of trust in a wide variety of contexts, such as HTTPS and code signing. Concerned? Get the important details…
We created a centralized authentication service, called Identity, by building upon functionality from the OpenID Connect (OIDC) specification.
The online advertising industry is behind comprehensive illegal collection and indiscriminate use of personal data, research from the Norwegian Consumer Council shows.
In August, we announced a new initiative (known as Privacy Sandbox) to develop a set of open standards to fundamentally enhance privacy on...
When I was 5, I saw the Karate Kid. I saw that bad guys could beat me up, and I had no recourse if I didn't know karate. I promptly signed up for martial arts classes.
Sources tell KrebsOnSecurity that Microsoft Corp. is slated to release a software update on Tuesday to fix an extraordinarily serious security vulnerability in a core cryptographic component present in all versions of Windows . Those sources say Microsoft has quietly shipped a patch for the bug to branches of the U.S…
How we reverse engineered Discord’s call protocol and found it being MITM-ed by Discord.
So I was recently asked why I prefer to use free and open source software over more conventional and popular proprietary software and services. A few years ago I was an avid Google user. I was deep…
Learn how to use the HTML autocomplete, inputmode and pattern attributes to improve the user experience of logging in.
A US-funded government assistance program is selling budget-friendly mobile phones that come pre-installed with unremovable malicious apps.
Posted by Samuel Groß, Project ZeroThis post is the second in a series about a remote, interactio...
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw.
Personal Blog of Christian Haschek
Learn how to secure your API. Best practices for OAuth, REST, DDoS, Attack Mitigation and Design.
Feb 5th, 2020: We’ve made an edit to this post. Previously, we had communicated that between February 5 and March 5, 2020, RDS would automatically stage the new certificates on RDS database instances without a restart. Based on customer feedback and to give customers as much time as possible to complete updates, RDS…
The Cloudflare lava lamps are used for Internet encryption. Learn about entropy in cryptography and why randomness is essential for SSL encryption.
See how we're working to protect kids' privacy on YouTube. Discover our latest updates and initiatives for a safer platform.
Organizations in the throes of cleaning up after a ransomware outbreak typically will change passwords for all user accounts that have access to any email systems, servers and desktop workstations within their network. But all too often, ransomware victims fail to grasp that the crooks behind these attacks can and…
