New
The latest blog posts to take off on Hacker News. 617 posts.
Jailbroken iOS can't run macOS apps – I spent a week to find out why (2021)
I ran command line macOS tools, such as Bash and Geekbench, on a jailbroken iPhone by replacing iOS’s dyld shared cache (all of iOS’s code) with macOS’s. However, graphical apps will never work: macOS’s WindowServer won’t start, since iOS’s drivers are too different.
Devirtualizing nike.com's bot protection
In this blog post, we'll examine the virtualization obfuscation used by Nike
Please Sell My Personal Information
I accidentally clicked the "do not sell my personal information" link at the bottom of your website.
Twilio’s toll fraud problem
On New Years’ Day, I woke up to 40 emails from Twilio, each with the subject line of, “Your Twilio account has been recharged.” In total…
CircleCI security alert: Rotate any secrets stored in CircleCI
Read CircleCI’s security alerts from January 2023. Last updated 1/13/2023.
G-3PO: A protocol droid for Ghidra, or GPT-3 for reverse-engineering
(A Script that Solicits GPT-3 for Comments on Decompiled Code)
How do you know when macOS detects and remediates malware?
macOS may alert you when you’re trying to open or run a file, with an alert informing you that malware was detected. But what about in scans?
Go 1.20 Cryptography
A lot of new cryptography is landing in Go 1.20, including the new crypto/ecdh package and math/big-less RSA and ECDSA backends!
Meta prohibited from using personal data for advertisement
After almost five years, the Irish DPC decided on a noyb complaint and required Facebook, Instagram and WhatsApp to stop using the personal data of users for advertisement in the EU.
Banking Applications Compatibility with GrapheneOS
Maintained Compatibility List for International Banking Apps This list includes banking apps that have been tested, submitted, reviewed, and verified as compatible. LIST | SUBMIT | UPDATE | POSSIBLE WORKAROUND SOLUTIONS Introduction Welcome to the crowd-sourced dataset for GrapheneOS users on currently supported…
Breaking RSA with a quantum computer?
A group of Chinese researchers have just published a paper claiming that they can—although they have not yet done so—break 2048-bit RSA. This is something to take seriously. It might not be correct, but it’s not obviously wrong. We have long known from Shor’s algorithm that factoring with a quantum computer is easy…
South Korea’s online security dead end
Websites in South Korea often require installation of “security applications.” Not only do these mandatory applications not help security, way too often they introduce issues.
Web hackers vs. the auto industry
While we were visiting the University of Maryland, we came across a fleet of electric scooters scattered across the campus and couldn't resist poking at the scooter's mobile app. To our surprise, our actions caused the horns and headlights on all of the scooters to turn on and stay on for 15 minutes straight.
Private and Public Mastodon
Here’s how to get into a lot of trouble: Suppose you (like me) love the intellectual wealth found in free-form text on the Internet. And (like me) are a reasonably competent programmer. And (like me) have derived value and pleasure searching Twitter. And (like me) you look at this nifty new Fediverse thing and see…
The quest for a family-friendly password manager
Personal blog of Julien (jvoisin) Voisin
Compromised PyTorch-nightly dependency chain between December 25th – December 30
If you installed PyTorch-nightly on Linux via pip between December 25, 2022 and December 30, 2022, please uninstall it and torchtriton immediately, and use the latest nightly binaries (newer than...