New
The latest blog posts to take off on Hacker News. 8,773 posts.
Comcast uses MITM JavaScript injection to serve account related information
For years, Comcast and other large telecommunication companies around the world have injected javascript into your web browsing experience to serve
Meet Algo, the VPN that works
I think you’ll agree when I say: there’s no VPN option on the market designed with equal emphasis on security and ease of use. That changes now. Today we’re introducing Algo, a self-hosted personal VPN server designed for ease of deployment and security. Algo automatically deploys an on-demand VPN service in the cloud…
The foundation of a more secure web: Google Trust Services
Posted by Ryan Hurst, Security and Privacy Engineering In support of our work to implement HTTPS across all of our products ( https://www.g...
EFF Asks Mass. High Court to Require Clear Limits for Searches of Devices
Along with several other advocacy groups, EFF signed on to an amicus brief this week in the case of the Commonwealth of Massachusetts v. James Keown, in support of requiring courts to set pre-search limits on the method of digital searches by law enforcement pursuant to judicially authorized...
Look before you paste from a website to terminal
All about making life easier and efficient with Linux
Dutch secret service tries to recruit Tor-admin
Recently a Dutch man with an MSc (Master of Science) at the Delft University of Technology and admin of Tor-exit nodes was approached by two agents of the Dutch intelligence service, the AIVD. They wanted to recruit the man as an informant or undercover agent, who would also infiltrate foreign hacker communities. The…
Avoid Non-Microsoft Antivirus Software
Robert O'Callahan. Christian. Kiwi. Software guy. All content human-authored unless otherwise noted.
Ways we harden our KVM hypervisor at Google Cloud: Security in plaintext
Google Cloud uses the open-source KVM hypervisor that has been validated by scores of researchers as the foundation of Google Compute Engine and Google Container Engine , and invests in additional security hardening and protection based on our research and testing experience. Then we contribute back our changes to the…
Privacy and Security Risks of Android VPN Permission-enabled Apps
Explore the science behind the headlines with our leading experts.
Thoughts on the Systemd Root Exploit
Sebastian Krahmer of the SUSE Security Team has discovered a local root exploit in systemd v228 . A local user on a system running systemd v228 can escalate to root privileges. That's bad.
Chrome 56 will mark HTTP pages with password fields as non-secure
Posted by Emily Schechter, Chrome Security Team [Updated on 12/5/16 with instructions for developers] Developers : Read more about how to ...
Removing Edge Magazine DRM
Edge Magazine is one of the oldest gaming magazines in the world. It is famous for the quality of its reviews, all of which were available online up until a few years ago, when their website was closed. The magazine continued its life in print and digital subscription format only. I really liked the content they…
OpenSSH Keys: A Walkthrough
Photography and long-form writing on my life, technology, photography, philosophy, books, and whatever else strikes my fancy.
I Had My Electronics Seized by U.S. Customs and Border Protection
After my trip in Hamburg, Germany, for the 33rd Chaos Communication Congress, I left Germany for t
A very casual introduction to Fully Homomorphic Encryption (2012)
Craig Gentry on board the mothership. (credit) A couple of weeks ago I polled readers for the subjects that they were interested in. You gave me some excellent responses, and I promise they’r…
Reading Uber’s Internal Emails: Bug Bounty report worth $10K
Find bugs faster with ScanSearch. Discover forgotten assets, shadow IT, and expanded attack surfaces for bug bounty hunting.
Lavabit Reloaded
There is nothing here so move right along.
Introducing ProtonMail's Tor hidden service
As part of our efforts to continue protecting user privacy, we are launching a Tor hidden service to combat censorship and surveillance of Proton Mail users.
Who is Anna-Senpai, the Mirai Worm Author?
On September 22, 2016, this site was forced offline for nearly four days after it was hit with “ Mirai ,” a malware strain that enslaves poorly secured Internet of Things (IoT) devices like wireless routers and security cameras into a botnet for use in large cyberattacks. Roughly a week after that assault, the…
WhatsApp Security Vulnerability
Back in March, Rolf Weber wrote about a potential vulnerability in the WhatsApp protocol that would allow Facebook to defeat perfect forward secrecy by forcibly change users’ keys, allowing it—or more likely, the government—to eavesdrop on encrypted messages. It seems that this vulnerability is real: WhatsApp has the…
Certified Malice
One unfortunate (albeit entirely predictable) consequence of making HTTPS certificates “fast, open, automated, and free” is that both good guys and bad guys alike will take advantage of the offer a…