571
Users are losing out against Big Sur’s sealed System
macOS 11.2, 11.2.1 and 11.2.2 have come in quick succession. What do they tell us about how difficult it is to update Big Sur’s sealed System volume? Is this the way to go?
New
The latest blog posts to take off on Hacker News. 678 posts.
572
573
574
WhatsApp and most alternatives share the same problem
Shall I migrate to Signal, Threema or Telegram? No, because they all have — WhatsApp included — the same problem: They are walled gardens. Imagine a world where for each mail recipient using a separate domain, I would need separate mail client? Or in other words: Gmail users can only communicate with Gmail users…
575
576
Google Analytics: Stop feeding the beast
Google Analytics is only very superficially free. Why I removed it, what it really costs your users, and the privacy-friendly alternatives I use instead.
577
Linux Capabilities in a nutshell (2019)
Linux capabilities can be difficult to understand so let's go through them quickly
578
Common Nginx misconfigurations that leave your web server open to attack
Detectify analyzed 50,000 unique Nginx configuration files on GitHub and reported some common misconfigurations.
579
Firefox Release Includes Total Cookie Protection and Multiple Picture-in-Picture
Beginning last year, the internet began playing a bigger role in our lives than ever before. In the US, we went from only three percent of workers to more
580
How often should I rotate my SSH keys?
Learn why rotating your SSH keys is essential for preventing credential theft. Discover best practices for SSH key rotation and how to protect your systems from potential breaches.
581
State Partitioning
State Partitioning is the new privacy feature called Total Cookie Protection, which will be available in ETP Strict Mode in Firefox 86.
582
Total Cookie Protection
Total Cookie Protection is a major anti-tracking advance in Firefox that confines cookies to the site where they were created.
583
Indian Government Breached, Massive Amount of Critical Vulnerabilities
A writeup detailing the vulnerability reporting process that took place after Sakura Samurai had breached the Indian Government
584
The modern packager’s security nightmare
One of the most important tasks of the distribution packager is to ensure that the software shipped to our users is free of security vulnerabilities. While finding and fixing the vulnerable code is…
585
Mitigating Memory Safety Issues in Open Source Software
Posted by Dan Lorenc, Infrastructure Security Team Memory-safety vulnerabilities have dominated the security field for years and often lead ...
586
When did “privacy issues” start to mean “too much privacy”?
Clubhouse draws the ire of journalists
587
Passwordless Logins with Yubikey
Yubikey is currently the de facto device for U2F authentication. It enables adding an extra layer of security on top of SSH, system login, signing GPG keys,...
588
Inline and Sideline Approaches for Low-Cost Memory Safety in C
This technical report is based on a dissertation submitted November 2020 by the author for the degree of Doctor of Philosophy to the University of Cambridge, Selwyn College.
589
Quad9 public DNS moves to Switzerland
A public and free DNS service for a better security and privacy
590
New Report Shows Cops Used Ring Cameras to Monitor Black Lives Matter Protests
San Francisco - The Electronic Frontier Foundation (EFF) has obtained emails that show that the Los Angeles Police Department (LAPD) sent at least one request—and likely many more—for Amazon Ring camera video of last summer’s Black-led protests against police violence. In a report released today,...
591
What security does a default OpenBSD installation offer?
In this text I will explain what makes OpenBSD secure by default when you install it. Do not take this for a security analysis, but more like a guide to help you understand what is done by OpenBSD to have a secure environment. The purpose of this text is not to compare OpenBSD to other OSes but to say what you can…
592
WhatsApp alternatives that respect privacy
WhatsApp may be secure but it’s not private. Learn about the best alternatives to WhatsApp that genuinely respect your privacy.
593
Sq, Sequoia PGP's CLI, Released
Sequoia is a modular OpenPGP implementation in Rust.
594
I exploited existing YouTube videos with a fake Patreon profile
I am watching a lot of investing videos on youtube recently. I like to watch them while I eat, or they play in the background while I do something else. I…
595
A Warning to Users of NurseryCam
This blog post is intended for a less technical audience – specifically parents and nurseries using the NurseryCam system. NurseryCam is a camera system that is installed in nurseries, allowi…
596
597
(Very) Basic Intro to Elliptic Curve Cryptography
Learn cryptography in Go by building ciphers, hashes, password security, and encryption tools. Understand security beneath the library call.
598
Threat Actors Now Target Docker via Container Escape Features
We provide a technical analysis of a container abuse attack that features a payload that’s specifically crafted to be able to escape privileged Docker containers.
599
FIDO2 security key company releases hardware that's open source and uses Rust
Our Kickstarter campaign for our next generation of Solo products launches on January 26th. To get alerted when the campaign is live, you can sign up here. Update: The campaign is now live! Check it out to see all the details. Humble beginnings I've been working on Solo for almost 3 years now. It started back when I…
600