961
New
The latest blog posts to take off on Hacker News. 8,770 posts.
962
Pump the Brakes on Your Police Department's Use of Flock Safety
Even if you can’t stop Flock’s use entirely, you can still help protect civil liberties in your community.
963
Who Owns, Operates, and Develops Your VPN Matters
New research: Eight popular, commercial VPN apps operate deceptively and put more than 700 million users at risk of authoritarian surveillance.
964
Finding thousands of exposed Ollama instances using Shodan
We uncovered 1,100+ exposed Ollama LLM servers—20% with open models—revealing critical security gaps and the need for better LLM threat monitoring.
965
Kernel-hack-drill and exploiting CVE-2024-50264 in the Linux kernel
Some memory corruption bugs are much harder to exploit than others. They can involve race conditions, crash the system, and impose limitations that make a researcher's life difficult. Working with such fragile vulnerabilities demands significant time and effort. CVE-2024-50264 in the Linux kernel is one such hard bug…
966
Passkeys and Modern Authentication
Some thoughts in support of simple solutions.
967
Unfortunately, the ICEBlock app is activism theater
At this summer's HOPE conference, Joshua Aaron spoke about ICEBlock, his iPhone app that allows users to anonymously report ICE sightings within a 5 mile radius, and to get notifications when others report ICE sightings near them. You can see the full talk, and the lively/infuriating Q&A,
968
Detecting and countering misuse of AI
Anthropic's August 2025 threat intelligence report on AI cybercrime and other abuses.
969
De-Googling TOTP Authenticator Codes
I've been slowly removing Google apps from my life, and one of the last ones left is Authenticator. In this post I look at migrating codes out of Authenticator to a command-line OTP tool, and the steps involved.
970
Reverse engineering Solos smart glasses
First and foremost: If you’ve got any documentation on this hardware, please contact me! I would love to read the actual specs for this protocol.
971
Affiliates flock to scam gambling machine
Last month, KrebsOnSecurity tracked the sudden emergence of hundreds of polished online gaming and wagering websites that lure people with free credits and eventually abscond with any cryptocurrency funds deposited by players. We’ve since learned that these scam gambling sites have proliferated thanks to a new Russian…
972
The Default Trap: Why Anthropic's Data Policy Change Matters
A quick note on the importance of reading the terms of service!
973
Is it possible to allow sideloading and keep users safe?
In which I attempt to be pragmatic. Are you allowed to run whatever computer program you want on the hardware you own? This is a question where freedom, practicality, and reality all collide into a mess. Google has recently announced that Android users will only be able to install apps which have been digitally signed…
974
Hardening Firefox – a checklist for improved browser privacy
A checklist for configuring Mozilla Firefox for a more private browsing experience.
975
SynthID – A tool to watermark and identify content generated through AI
SynthID is a tool to watermark and identify AI-generated content, helping to foster transparency and trust in generative AI.
976
I'll only buy devices with GrapheneOS
Authoritarianism is on the rise throughout the globe. Governments wants to monitor your social media accounts so they can make you disappear if you engage in wrongthink such as opposing wars or genocide. This is worsened by misguided laws like Chat control that would mandate scanning of all digital communication…
977
Lesser known mobile adtech domains where data is sent
AppGoblin has now run over 40k apps in an emulator, tracking millions of API calls thousands of advertising domains. Unfortunately, some of them are dark, meaning they have no landing page of any kind, and I’m unclear who controls these domains.
978
979
Nx compromised: malware uses Claude code CLI to explore the filesystem
What is s1ngularity-repository? Nx is compromised and the malware steals wallets and API keys using Claude CLI or Gemini.
980
Uncomfortable Questions About Android Developer Verification
Google announced a program that is proving to be unpopular among Android app development experts. I have questions.
981
SSL certificate requirements are becoming obnoxious
SSL requirements are quickly becoming obnoxious.
982
A new layer of security for certified Android devices
Starting in 2026 and in select countries first, Android apps must be registered to a verified developer in order to be installed.
983
How RubyGems.org protects OSS infrastructure
Recently, Socket.dev published research highlighting malicious gems designed to steal social media credentials. We wanted to use this as an opportunity to share more about how RubyGems.org security...
984
An illustrated guide to OAuth
OAuth was first introduced in 2007.
985
Scamlexity: When agentic AI browsers get scammed
We Put Agentic AI Browsers to the Test - They Clicked, They Paid, They Failed
986
How to check if your Apple Silicon Mac is booting securely
How to check your Mac is booting in Full Security, and how to read its log to verify all the key steps involved in that process.
987
Ghrc.io appears to be malicious
A simple typo of ghcr.io to ghrc.io would normally be a small goof. You’d typically get a 404 or similar error, finally work out the issue, fix it, and move along. But in this case, that typo appears to be doing something very malicious, stealing GitHub credentials. What’s ghcr.io? First, a quick bit of background…
988
Internet Access Providers Aren't Bound by DMCA Unmasking Subpoenas–In Re Cox
The DMCA online safe harbor is a notice-and-takedown scheme. Web hosts aren’t liable for copyright-infringing third-party uploads unless and until the copyright owner submits a proper takedown notice to the host, at which point the web host can remain legally...
989
A German ISP changed their DNS to block my website
One of Germany's biggest ISPs changed how their DNS works, right after I exposed an organization that they’re part of.
990