571
A 96 Bitcoin ransom payment ends up on Bitfinex
"Hello, to get your data back you have to pay for the decryption tool, the price is $1,200,000... You have to make the payment in Bitcoin...
New
The latest blog posts to take off on Hacker News. 612 posts.
572
Grindr and OKCupid Sell Your Data, but Twitter’s MoPub Is the Real Problem
On January 15, a Norweigian Consumer Council (NCC) investigative report exposed the ways that Grindr, OKCupid, and eight other apps are collecting and sharing extremely sensitive personal data. Grindr in particular was sharing users’ age and location tied to a device ID that would allow trackers to...
573
Ring Doorbell App Packed with Third-Party Trackers
Ring isn't just a product that allows users to surveil their neighbors. The company also uses it to surveil its customers.An investigation by EFF of the Ring doorbell app for Android found it to be packed with third-party trackers sending out a plethora of customers’ personally identifiable...
574
Linode launches free DDoS protection
/PRNewswire-PRWeb/ -- Linode, the world's largest independent cloud provider, today announced advanced protection across its global network of 11 data centers...
575
Does Your Domain Have a Registry Lock?
If you’re running a business online, few things can be as disruptive or destructive to your brand as someone stealing your company’s domain name and doing whatever they wish with it. Even so, most major Web site owners aren’t taking full advantage of the security tools available to protect their domains from being…
576
577
Google Cloud’s Secrets Manager
Secret Manager is a new GCP product that securely and conveniently stores API keys, passwords, certificates, and other sensitive data.
578
Banning facial recognition is missing the point
Spanish translation Communities across the United States are starting to ban facial recognition technologies. In May of last year, San Francisco banned facial recognition; the neighboring city of Oakland soon followed, as did Somerville and Brookline in Massachusetts (a statewide ban may follow). In December, San…
579
250M Microsoft customer service and support records exposed on the web
250 million leaked conversations between Microsoft customer support agents and customers were left exposed on the web, putting users at risk of phishing.
580
Stop donating your customers' data to Google Analytics
In 2020, with better alternatives available, using Google Analytics (GA) to track your web usage is n...
581
Cloudflare is turning off the internet for me
A classically trained sysadmin shouting into the void.
582
All ProtonVPN apps are now open source and audited
Users can have more trust in ProtonVPN because all our apps are open source and independently audited for security. Learn about Proton VPN’s open source apps.
583
How to Corrupt a SQLite Database File
An SQLite database is highly resistant to corruption. If an application crash, or an operating-system crash, or even a power failure occurs in the middle of a transaction, the partially written transaction should be automatically rolled back the next time the database file is accessed. The recovery process is fully…
584
Exploiting the Windows Cryptoapi Vulnerability
On Tuesday, the NSA announced they had found a critical vulnerability in the certificate validation functionality on Windows 10 and Windows Server 2016/2019. This bug allows attackers to break the validation of trust in a wide variety of contexts, such as HTTPS and code signing. Concerned? Get the important details…
585
How Shopify implemented its secure authentication service
We created a centralized authentication service, called Identity, by building upon functionality from the OpenID Connect (OIDC) specification.
586
New study: The advertising industry is systematically breaking EU law
The online advertising industry is behind comprehensive illegal collection and indiscriminate use of personal data, research from the Norwegian Consumer Council shows.
587
Building a more private web: A path towards making third party cookies obsolete
In August, we announced a new initiative (known as Privacy Sandbox) to develop a set of open standards to fundamentally enhance privacy on...
588
What to do if you’re stopped by the police
When I was 5, I saw the Karate Kid. I saw that bad guys could beat me up, and I had no recourse if I didn't know karate. I promptly signed up for martial arts classes.
589
Cryptic Rumblings Ahead of First 2020 Patch Tuesday
Sources tell KrebsOnSecurity that Microsoft Corp. is slated to release a software update on Tuesday to fix an extraordinarily serious security vulnerability in a core cryptographic component present in all versions of Windows . Those sources say Microsoft has quietly shipped a patch for the bug to branches of the U.S…
590
Let's Reverse Engineer Discord
How we reverse engineered Discord’s call protocol and found it being MITM-ed by Discord.
591
Why I Quit Using Google
So I was recently asked why I prefer to use free and open source software over more conventional and popular proprietary software and services. A few years ago I was an avid Google user. I was deep…
592
HTML attributes to improve your users' two factor authentication experience
Learn how to use the HTML autocomplete, inputmode and pattern attributes to improve the user experience of logging in.
593
US government-funded phones come pre-installed with unremovable malware
A US-funded government assistance program is selling budget-friendly mobile phones that come pre-installed with unremovable malicious apps.
594
Remote iPhone exploitation part 2: a remote ASLR bypass
Posted by Samuel Groß, Project ZeroThis post is the second in a series about a remote, interactio...
595
Security vulnerabilities fixed in Firefox 72.0.1 and ESR 68.4.1
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw.
596
I opened a link some random person sent me and I got raided (2015)
Personal Blog of Christian Haschek
597
API Security Best Practices
Learn how to secure your API. Best practices for OAuth, REST, DDoS, Attack Mitigation and Design.
598
Urgent and Important – Rotate Your Amazon RDS, Aurora, and DocumentDB Certs
Feb 5th, 2020: We’ve made an edit to this post. Previously, we had communicated that between February 5 and March 5, 2020, RDS would automatically stage the new certificates on RDS database instances without a restart. Based on customer feedback and to give customers as much time as possible to complete updates, RDS…
599
How Do Lava Lamps Help with Internet Encryption?
The Cloudflare lava lamps are used for Internet encryption. Learn about entropy in cryptography and why randomness is essential for SSL encryption.
600
Better protecting kids’ privacy on YouTube
See how we're working to protect kids' privacy on YouTube. Discover our latest updates and initiatives for a safer platform.