1951
What is the point of a public key fingerprint?
What is the point of a public key fingerprint? What does it do that the public key itself doesn't do. This post explains.
New
The latest blog posts to take off on Hacker News. 8,770 posts.
1952
Data exfiltration from Writer.com with indirect prompt injection
Authors: PromptArmor and Kai Greshake
1953
Windows Protected Print Mode
Over the past year, the MORSE team has been working in collaboration with the Windows Print team to modernize the Windows Print System. This new design,...
1954
Google's response to Reptar CPU vulnerability
Just as Vulnerability Research is an important area of focus at Google, so is Vulnerability Response to critical and complex vulnerabilities. Vulnerability Response at Google not only helps secure Google’s products and users, but in certain cases, it affects millions of devices across the Internet. In this post, we'll…
1955
Hardening cellular basebands in Android
Posted by Ivan Lozano and Roger Piqueras Jover Android’s defense-in-depth strategy applies not only to the Android OS running on the Appl...
1956
Today Is One of the Biggest Surveillance Votes. Will the FBI Stop Spying?
FISA Reform §702 Is a Threat to Democracy At Home and Abroad.
1957
The House Intelligence Committee's Surveillance 'Reform' Bill Is a Farce
Two bills reauthorizing Section 702 of the Foreign Intelligence Surveillance Act are headed to the House floor. Meanwhile, FBI agents have used Section 702 databases to conduct millions of invasive searches for Americans’ communications, including those of protesters, racial justice activists, 19,000 donors to a…
1958
FISA "reform" bill would greatly expand the entities forced to surveil users
Yesterday the House Permanent Select Committee on Intelligence unanimously approved the FISA Reform and Reauthorization Act of 2023 (FRRA), which would reauthorize Section 702 of the Foreign Intelligence Surveillance Act (FISA 702). The full House is expected to vote on this bill next Tuesday. Like other competing…
1959
Trust-based moderation systems
master's thesis research into subjective, trust-based moderation systems
1960
1961
Spoofing DNS records by abusing DHCP DNS dynamic updates
Akamai researchers discovered a new set of attacks against Active Directory (AD) using Microsoft DHCP servers that can lead to full AD takeover.
1962
1963
Apple and Google Monitor Notifications. We Need Push Notification Alternatives
We're here to stop surveillance by corporations like Google and Apple. That's why we replaced Google's FCM with our own notification system and keep Apple Notification Data at a minimum. Learn here why this is important.
1964
Fake chips, I got stung
Unfortunately, in the tech sector, just like many other sectors, there are scammers around. When you are dealing with electronics this is typically in the form of chips that have had their markings…
1965
Purple Llama: Towards open trust and safety in generative AI
Meta AI announces Purple Llama, a project for open trust and safety in generative AI, with tools for cybersecurity and input/output filtering.
1966
A Critique on “A Critique on the OpenPGP Updates”
An occasional blog about OpenPGP keyservers and related issues
1967
Building end-to-end security for Messenger
We are beginning to upgrade people’s personal conversations on Messenger to use end-to-end encryption (E2EE) by default. Meta is publishing two technical white papers on end-to-end encryption: Our …
1968
Microsoft Outlook Blocking All Email from Tutanota.com Domain as Spam
Update: Emails from Tutanota.com no longer go to Spam in Outlook.
1969
1970
iMessage, explained
This blog post is going to be a cursory overview of the internals iMessage, as I’ve discovered during my work on pypush, an open source project that reimplements iMessage.
1971
AI and Mass Spying
Spying and surveillance are different but related things. If I hired a private detective to spy on you, that detective could hide a bug in your home or car, tap your phone, and listen to what you said. At the end, I would get a report of all the conversations you had and the contents of those conversations. If I hired…
1972
1973
1974
A decade of Have I Been Pwned
A decade ago to the day, I published a tweet launching what would surely become yet another pet project that scratched an itch, was kinda useful to a few people but other than that, would shortly fade away into the same obscurity as all the other ones I'd launched
1975
LogoFAIL: Secure Boot bypass with manipulated boot logos
LogoFAIL by BINARLY: Discover how vulnerable image parsing impacts device manufacturers in the UEFI firmware ecosystem. Learn about critical LogoFAIL…
1976
US Senator: What Do Our Cars Know? and Who Do They Share That Information With?
U.S. Senator Ed Markey of Massachusetts has sent a much-needed letter to car manufacturers asking them to clarify a surprisingly hard question to answer: what data cars collect? Who has the ability to access that data? Private companies can often be a black box of secrecy that obscure basic facts...
1977
CSAR: European Parliament rejects mass scanning of private messages
This marks a positive development for human rights in one of the most controversial draft European Union (EU) laws in recent memory.
1978
Open source supply chain security at Google [video]
I was a remote opening keynote speaker at ACM SCORED 2023 , which we decided meant that I sent a video to play and I was on Discord during the talk for attendees to text directly with question as the video played, and then we did some live but still remote Q&A after the talk.
1979
1980
Noyb files GDPR complaint against Meta over "Pay or Okay"
Meta charges up to €251.88 to respect the fundamental right to privacy of EU users. This is a violation of the GDPR