181
New
The latest blog posts to take off on Hacker News. 579 posts.
182
183
BPF port-based firewall for systemd services
The first post introduced the IPIngressFilterPath and IPEgressFilterPath feature for the upcoming systemd release 243 to support custom BPF programs as firewall for services. There was a simple example for a minimal BPF program written in C and how to load it for a systemd service. Then there was a standalone program…
184
Verified by Twilio
Twilio posts cloud communications trends, customer stories, and tips for building scalable voice and SMS applications with Twilio's APIs.
185
A deep dive into iOS Exploit chains found in the wild
Posted by Ian Beer, Project ZeroProject Zero’s mission is to make 0-day hard. We often work...
186
Write Fuzzable Code
“An obvious way to deal with embedded interpreters — which someone must have thought of and tried, but I don’t have any pointers — would be to have an API for teaching the fuzzer how to see coverage of the language being interpreted.”
187
The Myth of Consumer-Grade Security
The Department of Justice wants access to encrypted consumer devices but promises not to infiltrate business products or affect critical infrastructure. Yet that’s not possible, because there is no longer any difference between those categories of devices. Consumer devices are critical infrastructure. They affect…
188
CamScanner, a malicious Android app with more than 100M downloads in Google Play
Kaspersky researchers found malware in CamScanner, a text recognition app that was downloaded more than 100 million times from Google Play.
189
Google Calendar Event Injection with MailSniper (2017)
Beau Bullock & Michael Felch // Source: https://chrome.google.com/webstore/detail/google-calendar-by-google/gmbgaklkmjakoegficnlkhebmhkjfich Overview Google Calendar is one of the many features provided to those who sign up for a Google account along with other popular […]
190
191
Keyringless GnuPG
My favorite music player is Audacious . It follows the Winamp Classic tradition of not trying to manage my music library. Instead it waits patiently for me to throw files and directories at it. These selections will be informally grouped into transient, disposable playlists of whatever I fancy that day.
192
Deconstructing Google’s excuses on tracking protection
By Jonathan Mayer and Arvind Narayanan. Blocking cookies is bad for privacy. That’s the new disingenuous argument from Google, trying to justify why Chrome is so far behind Safari and Firefox in offering privacy protections. As researchers who have spent over a decade studying web tracking and online advertising, we…
193
The Many Possibilities of iMessage File Vulnerability
Posted by Natalie Silvanovich, Project ZeroCVE-2019-8646 is a somewhat unusual vulnerability I re...
194
Privacy Sandbox – Open standards to enhance privacy on the web
Chrome is announcing a new initiative to explore how to evolve the web in a way that advances privacy, while supporting publishers, and free and open content.
195
GitHub Supports Web Authentication (WebAuthn) for Security Keys
The WebAuthn standard for security keys is making authentication as easy as possible. Now you can use security keys for second-factor authentication on GitHub with many more browsers and devices.
196
Security flaws caused by compiler optimizations
Learn how to optimize compilers for enterprise-wide automation, avoiding pitfalls with examples and solutions.
197
Mozilla takes action to protect users in Kazakhstan
Today, Mozilla and Google took action to protect the online security and privacy of individuals in Kazakhstan. Together the companies deployed technical so
198
199
200
Removing Coordinated Inauthentic Behavior from China
We removed seven Pages, three Groups and five Facebook accounts as part of a small network that originated in China and focused on Hong Kong.
201
The world’s most-surveilled cities
We've gathered data on CCTV cameras in use in 120 major cities across the globe to determine which cities have the most surveillance cameras per person.
202
203
Siri, Privacy, and Trust
We should expect Apple to lead the industry on this front, but in fact, they’re far behind.
204
Tracking Prevention Policy
This document describes the web tracking practices that WebKit believes, as a matter of policy, should be prevented by default by web browsers.
205
WebKit Tracking Prevention Policy
Today we are publishing the WebKit Tracking Prevention Policy, covering: What types of tracking WebKit will prevent.
206
Google Forcing Nest Cameras’ Visual Indicator Light To Be On
Google Forcing Nest Cameras Visual Indicator Light To Be On
207
Attorney General Barr and Encryption
Last month, Attorney General William Barr gave a major speech on encryption policy—what is commonly known as “going dark.” Speaking at Fordham University in New York, he admitted that adding backdoors decreases security but that it is worth it. Some hold this view dogmatically, claiming that it is technologically…
208
209
Down the Rabbit-Hole
Posted by Tavis Ormandy, Security Research Over-Engineer.“Sometimes, hacking is just someon...
210