421
BGP and RPKI
We have been receiving occasional notifications, primarily via twitter from concerned customers who have visited 'isbgpsafeyet.com' and been told by the site's operator, Cloudflare, that their ISP is, apparently unsafe.
New
The latest blog posts to take off on Hacker News. 612 posts.
422
423
424
425
What happens when a ccTLD is retired? Exploring the potential risks of .io
Could the complex political history of Diego Garcia put the .io domain at risk? Tech firms should be aware of potential risk to their websites.
426
ProtonMail Bridge is now open source
Our Bridge app is now open source for macOS, Windows, and Linux. Find links to the code and an independent security audit report.
427
428
Digital surveillance technologies to fight pandemic must respect human rights
The COVID-19 pandemic is a global public health emergency that requires a coordinated and large-scale response by governments worldwide. However, States’ efforts to contain the virus must not be...
429
Proof of concept: end-to-end encryption in Jitsi Meet
Check out our progress in end-to-end encryption calls in Jitsi. Give us your crypto knowledge feedback with the code and learn how to demo it here.
430
Deprecating password authentication in GitHub API
Get started with one of our guides, or jump straight into the API documentation.
431
432
Stop the Apple and Google contact tracing platform
Apple and Google released a joint specification that allows both iPhones and Android devices to do contact tracing on a global scale. Even though "privacy, transparency, and consent are of utmost importance", this is a game changing event that has grave consequences. We must stop Apple and Google in their tracks. Or…
433
Moving Away from Gmail
tl;dr: I like PurelyMail and I will slowly switch all my online accounts to use it. I've been using it for almost three months and I didn't have any issues (except with some Hotmail/Outlook addresses). I have a GMail account since 2006 (that's the date
434
Leakage paths for the Apple / Google Bluetooth tracing system
Plus general overview
435
436
Attack Matrix for Kubernetes
While Kubernetes has many advantages, it also brings new security challenges.
437
230, or not 230? That is the EARN IT question
Over the past several weeks, Signal traffic has gone through the roof. New users are signing up at unprecedented rates, and we’ve expanded our server capacity faster than we ever anticipated. It means a lot to us that so many people are relying on Signal during this difficult time. When users che...
438
Zoom’s 90-day plan to bolster key privacy and security initiatives
Learn more about how to use each Zoom product to connect with coworkers, customers, businesses, and more with insights and best practices.
439
Moving from reCAPTCHA to hCaptcha
We recently migrated the CAPTCHA provider we use from Google's reCAPTCHA to a service provided by the independent hCaptcha. Here's a walk through of the rationale in more detail.
440
We abused Slack's TURN servers to gain access to internal services
Slack's TURN server allowed relaying of TCP connections and UDP packets to internal Slack network and meta-data services on AWS.
441
Microsoft buys corp.com so bad guys can’t
In February, KrebsOnSecurity told the story of a private citizen auctioning off the dangerous domain corp.com for the starting price of $1.7 million . Domain experts called corp.com dangerous because years of testing showed whoever wields it would have access to an unending stream of passwords, email and other…
442
Running your own secure communication service with Matrix and Jitsi
Matrix, the open protocol for secure decentralised communications
443
Cofactor Explained: Clearing Elliptic Curves' dirty little secret
Efficient elliptic curves tend not to have a prime order. This discusses the problems this causes, and the solutions.
444
445
Google allows G Suite administrators to monitor and audit user emails
Google allows Google Workspace administrators to monitor and audit users emails. An Administrator may use Google Vault, Content Compliance rules, Audit API or Email delegation to view and audit users emails. It is recommend for Google Workspace Administrators to consider their local laws before performing email…
446
Userdir URLs like https://example.org/~username/ are dangerous
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
447
Getting Started with WireGuard
Software developer
448
Security and Privacy Implications of Zoom
Over the past few weeks, Zoom’s use has exploded since it became the video conferencing platform of choice in today’s COVID-19 world. (My own university, Harvard, uses it for all of its classes. Boris Johnson had a cabinet meeting over Zoom.) Over that same period, the company has been exposed for having both lousy…
449
Jitsi Meet Security and Privacy
How secure is Jitsi? Learn more about the Jitsi Meet Security & Privacy information, including how we make sure to protect your privacy here.
450
How I lost control of our bank accounts to a phone scammer
Yesterday, instead of having a productive afternoon at home, I had the privilege of sitting at the bank for a couple of hours, resolving a problem completely of my own doing: I fell for a phone scammer. My wife and I had to close our accounts—which were in excess of 25 years old—and set up new ones. I then spent hours…