601
Uncovering a 24-year-old bug in the Linux Kernel
How a failing rsync run led to the discovery of a long-standing bug in the Linux TCP implementation.
New
The latest blog posts to take off on Hacker News. 678 posts.
602
What Do You Agree to When You Accept All Cookies
I have been writing software for exactly twenty years now. In the course of this I have learnt very many things, which I hope to journal over time.
603
What’s interesting about the Florida water system hack is that we heard about it
Stories about computer security tend to go viral when they bridge the vast divide between geeks and luddites, and this week’s news about a hacker who tried to poison a Florida town’s water supply was understandably front-page material. But for security nerds who’ve been warning about this sort of thing for ages, the…
604
Preparing to Issue 200M Certificates in 24 Hours
On a normal day Let’s Encrypt issues nearly two million certificates. When we think about what essential infrastructure for the Internet needs to be prepared for though, we’re not thinking about normal days. We want to be prepared to respond as best we can to the most difficult situations that might arise. In some of…
605
Is Apple Banning Free Analytics SDKs?
This story has moved a lot since it was published – our update from March 3 tells the latest. Apple...
606
607
Browser Fuzzing at Mozilla
Mozilla has been fuzzing Firefox for a while. It has proven to be one of the most efficient ways to identify quality and security issues.
608
What's an SPF Record?
SPF records are DNS records that help prevent SPAM and forged emails
609
610
Barcode scanner app on Google Play infects 10M users with one update
In a single update, a popular barcode scanner app that had been on Google Play for years turned into malware.
611
What data on myself I collect and why (2020)
How I am using 50+ sources of my personal data
612
Android emulator abused to introduce malware onto PCs
Attackers have compromised the software distribution system of BigNox, developer of a popular Android emulator for PCs and Macs.
613
614
Clover Health: How Chamath Lured Retail Investors into a Broken Business
Initial Disclosure: This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report. We have no position (short or long) in Clover Health because we think in this moment for public markets, it is more important for people to…
615
616
617
Software Verification and Analysis Using Z3
Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.
618
Dark Patterns at Scale: Findings from a Crawl of 11K Shopping Websites (2019)
Dark patterns are user interface design choices that benefit an online service by coercing, steering, or deceiving users into making unintended and potentially harmful decisions. We conducted a large-scale study, analyzing ~53K product pages from ~11K shopping websites to characterize and quantify the prevalence of…
619
The censorship of WallStreetBets needs to be a watershed moment for everyone
This event is when censorship overstepped a very serious mark.
620
A Look at iMessage in iOS 14
Posted By Samuel Groß, Project Zero On December 20, Citizenlab published “The Great...
621
Analyzing and breaking an externally encrypted HDD
Analyzing and breaking external encrypted HDD has been a “hobby” of mine for quite some time. With my colleagues Joffrey Czarny and Julien Lenoir we looked at several models in the past :
622
EU citizens’ rights are under threat from anti-encryption proposals
Along with Threema, Tresorit, and Tutanota, we are releasing a joint statement calling on the EU to reject any ban or attack on end-to-end encryption.
623
Opening Up the Samsung Q60 Series Smart TV (2019)
True cyber security combines advanced technology and best practice. Get tips and read articles on how to take your online security even further.
624
625
Firefox 85 cracks down on supercookies
Trackers and adtech companies have long abused browser features to follow people around the web. Since 2018, we have been dedicated to reducing the number of ways our users can ...
626
Grindr to be fined almost €10M over GDPR complaint
The Norwegian Data Protection Authority confirmed that Grindr did not receive valid consent from users and announces a fine of 100 Mio NOK (€ 9.63 Mio) on Grindr.
627
New campaign targeting security researchers
Details on an ongoing campaign, which we attribute to a government-backed entity based in North Korea, targeting security researchers working on vulnerability research a…
628
A deeper dive into our May 2019 security incident
We take a detailed look at a hacking incident that gave a user unauthorized access to our code and data.
629
Emails a browser extension developer gets from scammers
SponsorBlock is a crowdsourced browser extension to skip sponsor segments in YouTube videos.
630
How you can get banned from Facebook permanently
Contact Facebook customer service for your customer service needs. Reach out via phone, email, or social media.