181
RediShell: Critical remote code execution vulnerability in Redis
A 13‑year Redis flaw (CVE‑2025‑49844) allows attackers to escape Lua sandbox and run code on hosts. See Wiz Research’s analysis and mitigations.
New
The latest blog posts to take off on Hacker News. 679 posts.
182
CodeMender: an AI agent for code security
Using advanced AI to fix critical software vulnerabilities
183
A quiet change to RSA
Over the course of years, RSA implementations gradually replaced Euler's totient function with Carmichael's totient function.
184
Show HN: I'm building a browser for reverse engineers
In the expanding world of AI my heart still lies in AST transforms, browser fingerprinting, and anti-bot circumvention. But my workflow felt... primitive.
185
NSA and IETF: Can an attacker purchase standardization of weakened cryptography?
It's normal for post-quantum cryptography to be rolled out as an extra layer of security on top of traditional pre-quantum cryptography, rather than as a replacement .
186
The UK is still trying to backdoor encryption for Apple users
The Financial Times reports that the U.K. is once again demanding that Apple create a backdoor into its encrypted backup services. The only change since the last time they demanded this is that the order is allegedly limited to only apply to British users. That doesn’t make it any better.The demand...
187
Privacy Harm Is Harm
Every day, corporations track our movements through license plate scanners, building detailed profiles of where we go, when we go there, and who we visit. When they do this to us in violation of data privacy laws, we’ve suffered a real harm—period. We shouldn’t need to prove we’ve suffered...
188
Flock's gunshot detection microphones will start listening for human voices
Flock Safety, the police technology company most notable for their extensive network of automated license plate readers spread throughout the United States, is rolling out a new and troubling product that may create headaches for the cities that adopt it: detection of “human distress” via audio. As...
189
Toyota runs a car-hacking event to boost security (2024)
Toyota organizes a car-hacking event that captivates participating students. We uncovered the important purpose behind the event. #TOYOTATIMES
190
Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)
Who owns the major VPN companies like Express, Nord, and Surfshark? We take you through an interactive map of the murky world of VPNs.
191
Digital ID – The New Chains of Capitalist Surveillance
From The world is entering an era where identity is no longer a matter of personal relationships, lived experience, or even paperwork. Increasingly, it is reduced to biometric scans, algorithmic ve…
192
Signal Protocol and Post-Quantum Ratchets
We are excited to announce a significant advancement in the security of the Signal Protocol: the introduction of the Sparse Post Quantum Ratchet (SPQR). This new ratchet enhances the Signal Protocol’s resilience against future quantum computing threats while maintaining our existing security guar...
193
NL Judge: Meta must respect user's choice of recommendation system
Bits of Freedom komt op voor internetvrijheid door de online grondrechten op communicatievrijheid en privacy te beschermen.
194
ICE Is Buying a Tool to Track Phones, Without Warrants
Trump is quietly building a surveillance state, and almost no one is paying attention.
195
Mind the encryptionroot: How to save your data when ZFS loses its mind
While ZFS has a well-earned reputation for data integrity and reliability, OpenZFS native encryption has some incredibly sharp edges that will cut you if you don't know where to be careful. Unfortunately, I learned this the hard way, standing in a pool of my own blood and tears after thoroughly lacerating myself…
196
Answering questions about Android developer verification
News and insights on the Android platform, developer tools, and events.
197
Can you use GDPR to circumvent BlueSky's adult content blocks?
In the battle between the Online Safety Act and GDPR, who will win? FIGHT! I'll start by saying that I'm moderately positive on Online Safety. If services don't want to provide moderation then they shouldn't let their younger users be exposed to harm. The social network BlueSky has taken a pragmatic approach to this…
198
How I block all 26M of your curl requests
A journey in packet filtering
199
Testing “Exotic” P2P VPN
My standard "everyday" solution when it comes to connecting computers into a single network is Wireguard. Wireguard is good, supports p2p, and generally has no downsides.
200
NSPM-7 labels common beliefs as terrorism 'indicators'
New directive targets “anti-Christian,” “anti-American,” and “anti-capitalism” opinions
201
A Postmark backdoor that’s downloading emails
Secure the modern software stack with Koi. Gain visibility, context, and real-time protection over extensions, MCPs, and autonomous AI agent endpoints.
202
If you are harassed by lasers
The green and blue "laser" dots at lower left are actually lens flare caused by the bright sun at upper right. The sun is reflecting off elements inside the lens, causing dots or flare. The flare is almost always located diagonally mirrored from a bright light source. Photo of a sunset, with upper and lower "beams"…
203
Auth.js is now part of Better Auth
Auth.js, formerly known as NextAuth.js, is now being maintained and overseen by Better Auth team
204
205
ChatControl: EU wants to scan all private messages, even in encrypted apps
The EU is pushing legislation that would scan all our private messages, even in encrypted apps.
206
Rights groups urge UK PM Starmer to abandon plans for mandatory digital ID
Big Brother Watch and other human rights, civil liberties, digital rights, and racial justice organisations have written to the Prime Minister urging him to abandon plans for a mandatory digital ID. The letter comes just days before an expected statement from Keir Starmer announcing the rollout of a mandatory digital…
207
208
That Secret Service SIM farm story is bogus
It's just normal crime
209
From MCP to shell: MCP auth flaws enable RCE in Claude Code, Gemini CLI and more
How MCP authentication flaws enable RCE in Claude Code, Gemini CLI, and more.
210
Tell the EU: Don't Break Encryption with "Chat Control"
The EU’s Chat Control law would scan private messages and weaken encryption. Sign Mozilla Foundation’s petition to defend privacy and protect our digital future.