91
GitHub Source Code Leak
Straight talk on Canadian online privacy, open-source software, PIPEDA, browser extension security, and practical tools to protect your personal data.
New
The latest blog posts to take off on Hacker News. 612 posts.
92
DKIM: Show Your Privates
If you’re like most people, there’s a good chance that it’s been years since you’ve sent an email that wasn’t cryptographically signed. You don’t use PGP, you say? Well, even if you are…
93
You might not need to store plaintext email addresses
Earlier this year, when I went from having only Facebook-login on Wishy.gift to allow registrations with email address and password, one of my concerns was how to implement this is a way that protects the data and privacy of my users. I don’t have any ads or analytics on the site, the users can select whatever display…
94
Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA
A weblog about Signals Intelligence, Communications Security and top level telecommunications equipment
95
NAT Slipstreaming
exploit NAT/firewalls to access TCP/UDP services bound to any system behind victim's NAT
96
Introducing Semgrep and r2c
An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.
97
Image Scaling Attacks
This post is part of a series about machine learning and artificial intelligence. Click on the blog tag “huskyai” to see related posts. Overview: …
98
FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals
On Monday, Oct. 26, KrebsOnSecurity began following up on a tip from a reliable source that an aggressive Russian cybercriminal gang known for deploying ransomware was preparing to disrupt information technology systems at hundreds of hospitals, clinics and medical care facilities across the United States. Today…
99
How to Dual-Boot Ubuntu 20.04 and Windows 10 with Encryption
When you run the Ubuntu installer, there’s an option to dual-boot Ubuntu with an existing Windows installation. There’s also an option to encrypt your Ubuntu...
100
101
Spanish police plans to extend use of its lie-detector while efficacy is unclear
Veripol is a software that assesses the veracity of complaints filed with the Spanish national police. It was introduced in 2018, but it's unclear if it works as intended.
102
Restrict Access to your internal websites on AWS with BeyondCorp
Discover how BeyondCorp assists in securely restricting access to internal websites, ensuring organizational data remains protected.
103
Gitlab Blocked Iranians’ Access
Ahmad Haghighi’s personal page.
104
Penetration testing and low-cost freelancing
Penetration testing is complex. For it to be successful, the tester needs to possess a variety of different abilities and skills. Some testers rely only on automated tools, while others focus more on manual analysis. While a creative and unconventional way of thinking is necessary, it is also important for the tester…
105
The Now-Defunct Firms Behind 8chan, QAnon
Some of the world’s largest Internet firms have taken steps to crack down on disinformation spread by QAnon conspiracy theorists and the hate-filled anonymous message board 8chan . But according to a California-based security researcher, those seeking to de-platform these communities may have overlooked a simple legal…
106
KeePassXC 2.6.2 Released
KeePassXC Password Manager
107
Whose Computer Is It?
Patrick Wardle highlighted a tweet by Maxwell (" Some Apple apps bypass some network extensions and VPN Apps. Maps for example can directly access the internet bypassing any NEFilterDataProvider or NEAppProxyProviders you have running "), sparking an extensive HN discussion on Apple's ham-fisted tactics (not unlike…
108
Let’s build a high-performance fuzzer with GPUs
TL;DR: Can we use GPUs to get 10x performance/dollar when fuzzing embedded software in the cloud? Based on our preliminary work, we think the answer is yes! Fuzzing is a software testing technique that supplies programs with many randomized inputs in an attempt to cause unexpected behavior. It’s an important, […]
109
1Password for Linux beta
Buckle up Linux Desktop users! We just opened an awesome ride that we'd love for you to join us on. 🎢 🙌🏼
110
Palo Alto Networks sends cease-and-desist letter to take down review videos
In response to our Cloud Security Punch-Out! videos, Palo Alto Networks sent this cease and desist letter, demanding the comparison be removed. Here is my response.
111
Combating abuse in Matrix – without backdoors
Matrix, the open protocol for secure decentralised communications
112
Face ID and Touch ID for the Web
People often see passwords are the original sin of authentication on the web.
113
Many of the root certificates on Windows are not needed
As of today, Windows trusts 322 root certificates issued by 122 different organizations from 47 countries. This number is quite high, and has been steadily growing over the last few years. And it turns out many of those certificates are not needed at all by the vast majority of Windows users, can be distrusted with no…
114
Discord Desktop App RCE
A few months ago, I discovered a remote code execution issue in the Discord desktop application and I reported it via their Bug Bounty Prog...
115
Chrome exempts Google sites from user site data settings
In Google Chrome's "Cookies and site data" settings, accessible via the Preferences menu item or directly with chrome://settings/cookies in the address bar, you can enable the setting "Clear cookies and site data when you quit Chrome". However, I've discovered that Chrome exempts Google's own sites, such as Search and…
116
117
Lessons from Bug Hunters Who've Found 400 Bugs in Popular DBMSs
TiDB is the distributed SQL database built for AI agents. Vectors, transactions, and analytics in one engine with ACID guarantees and elastic scale.
118
Uninstall Nano Defender
Straight talk on Canadian online privacy, open-source software, PIPEDA, browser extension security, and practical tools to protect your personal data.
119
Exponential growth in DDoS attack volumes
How Google prepares for and protects against the largest volumetric DDoS attacks.
120
Reimagining the Browser: Introducing Cloudflare Browser Isolation Beta
Today, we’re excited to open up a beta of a third approach to keeping web browsing safe with Cloudflare Browser Isolation.