New
The latest blog posts to take off on Hacker News. 617 posts.
Apple and Google Monitor Notifications. We Need Push Notification Alternatives
We're here to stop surveillance by corporations like Google and Apple. That's why we replaced Google's FCM with our own notification system and keep Apple Notification Data at a minimum. Learn here why this is important.
Fake chips, I got stung
Unfortunately, in the tech sector, just like many other sectors, there are scammers around. When you are dealing with electronics this is typically in the form of chips that have had their markings…
Purple Llama: Towards open trust and safety in generative AI
Meta AI announces Purple Llama, a project for open trust and safety in generative AI, with tools for cybersecurity and input/output filtering.
A Critique on “A Critique on the OpenPGP Updates”
An occasional blog about OpenPGP keyservers and related issues
Building end-to-end security for Messenger
We are beginning to upgrade people’s personal conversations on Messenger to use end-to-end encryption (E2EE) by default. Meta is publishing two technical white papers on end-to-end encryption: Our …
Microsoft Outlook Blocking All Email from Tutanota.com Domain as Spam
Update: Emails from Tutanota.com no longer go to Spam in Outlook.
iMessage, explained
This blog post is going to be a cursory overview of the internals iMessage, as I’ve discovered during my work on pypush, an open source project that reimplements iMessage.
AI and Mass Spying
Spying and surveillance are different but related things. If I hired a private detective to spy on you, that detective could hide a bug in your home or car, tap your phone, and listen to what you said. At the end, I would get a report of all the conversations you had and the contents of those conversations. If I hired…
A decade of Have I Been Pwned
A decade ago to the day, I published a tweet launching what would surely become yet another pet project that scratched an itch, was kinda useful to a few people but other than that, would shortly fade away into the same obscurity as all the other ones I'd launched
LogoFAIL: Secure Boot bypass with manipulated boot logos
LogoFAIL by BINARLY: Discover how vulnerable image parsing impacts device manufacturers in the UEFI firmware ecosystem. Learn about critical LogoFAIL…
US Senator: What Do Our Cars Know? and Who Do They Share That Information With?
U.S. Senator Ed Markey of Massachusetts has sent a much-needed letter to car manufacturers asking them to clarify a surprisingly hard question to answer: what data cars collect? Who has the ability to access that data? Private companies can often be a black box of secrecy that obscure basic facts...
CSAR: European Parliament rejects mass scanning of private messages
This marks a positive development for human rights in one of the most controversial draft European Union (EU) laws in recent memory.
Open source supply chain security at Google [video]
I was a remote opening keynote speaker at ACM SCORED 2023 , which we decided meant that I sent a video to play and I was on Discord during the talk for attendees to text directly with question as the video played, and then we did some live but still remote Q&A after the talk.
Noyb files GDPR complaint against Meta over "Pay or Okay"
Meta charges up to €251.88 to respect the fundamental right to privacy of EU users. This is a violation of the GDPR
Choose the browser that best suits your privacy needs
When it comes to most secure browsers, Firefox and its LibreWolf fork are the best alternatives to Chrome on our list - and, no, incognito mode doesn't cut it.
Analyzing the Monoprice Blackbird HDCP 2.2 to 1.4 Down Converter
I got my hands on a Monoprice Blackbird 4K Pro HDCP 2.2 to 1.4 Converter . According to the marketing copy it “is the definitive solution for playback of new 4K HDCP 2.2 encoded content on 4K displays with the old HDCP 1.4 standard.”
Titled Tuesday Cheating
Fantastic Cheaters and Where to Find Them
Linux being secure is a common misconception
Linux being secure is a common misconception in the security and privacy realm. Linux is thought to be secure primarily because of its source model, popular usage in servers, small userbase and confusion about its security features. This article is intended to debunk these misunderstandings by demonstrating the lack…
Making it clear when we're on a call with you to protect you from fraud
If someone calls you claiming to be from Monzo, you can now check to see if they’re telling the truth or not in the Monzo app.
The feds' vehicle 'kill switch' mandate is a gross violation of privacy
Over the last century, the Land of the Free has slowly transformed into a land governed by endless laws, largely by cracking down on vices instead of actual crimes, creating a society that would render us all criminals if our behavior were constantly observed. Meanwhile, the state has steadily expanded its use of mass…
Chrome pushes forward with plans to limit ad blockers in the future
Google has set a date for the introduction of Manifest V3 which will hurt the capabilities of many ad blockers.
Why TSA's Implementation of Facial Recognition Is More Dangerous Than You Think
Facial recognition is an invasive and dangerous surveillance technology. When the government moves forward with pilot programs that will, if fully implemented, subject millions of people on a daily basis to the technology that should give us all pause.
Deobfuscating World of Warships' Python Scripts
An in-depth analysis of how World of Warships obfuscates its game scripts and how to mostly deobfuscate them automatically.
NilAway: Practical nil panic detection for Go
Uber has widely adopted Golang (Go for short) as a primary programming language for implementing backend services and libraries due to its high performance. The Go monorepo is the largest codebase at Uber, comprising 90 million lines of code (and growing). This makes tooling for writing reliable Go code a critical…