211
We found a phone with pre-installed malware via the Lifeline Assistance program
We discovered yet another phone model with pre-installed malware provided from the Lifeline Assistance program via Assurance Wireless by Virgin Mobile.
New
The latest blog posts to take off on Hacker News. 678 posts.
212
Cross-Account Container Takeover in Azure Container Instances
Affecting Azure Container Instances, Azurescape is the first known cross-account container takeover in the public cloud.
213
How We Proved the Eth2 Deposit Contract Is Free of Runtime Errors
Consensys is a blockchain software company building the tools, infrastructure and research that power the new Era of Decentralized Finance, for a more secure and open economy
214
The Privacy Lesson of 9/11: Mass Surveillance Is Not the Way Forward
Congress must ensure that the next generation of Americans is able to speak and associate freely, without fear of surveillance.
215
HAProxy vulnerability enables HTTP request smuggling attacks
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
216
Disinformation-for-hire in Kenya
Mozilla Fellows Odanga Madung and Brian Obilo reveal that Kenyan journalists, judges, and other members of civil society are facing coordinated disinformation campaigns on Twitter — and the site is doing very little to stop it.
217
Nevada cops use civil forfeiture to steal a veterans life savings
Last February, while driving down a Nevada highway on the way to visit his daughters, Stephen Lara was robbed in plain sight. But his assailants […]
218
Abusing the Chromium Devtools Scope Pane
tl;dr — Abusing the Chromium Devtools Scope Pane to track debugging of specific javascript functions
219
Delays aren’t good enough – Apple must abandon its surveillance plans
Apple announced today that it would “take additional time over the coming months to collect input and make improvements” to a program that will weaken privacy and security on iPhones and other products. EFF is pleased Apple is now listening to the concerns of customers, researchers, civil liberties...
220
Google Chrome to remove detailed cookie and site data controls
A month ago I ran into an obscure Google Chrome bug on macOS that caused the "All cookies and site data" page in Chrome settings ( chrome://settings/siteData ) to load very slowly. You can see this page if you open Preferences, select "Privacy and security", "Cookies and other site data", and then "See all cookies and…
221
RSA chief believed cryptographers’ warnings on Dual EC DRBG lacked merit (2014)
"When, last September, it became possible that concerns raised in 2007 might have merit as part of a strategy of exploitation, NIST as the...
222
223
224
Gift card gang extracts cash from 100k inboxes daily
Some of the most successful and lucrative online scams employ a “low-and-slow” approach — avoiding detection or interference from researchers and law enforcement agencies by stealing small bits of cash from many people over an extended period. Here’s the story of a cybercrime group that compromises up to 100,000 email…
225
NitroPhone – Pixel 4a phone with GrapheneOS
Nitrokey launches the NitroPhone, the most secure Android smartphone on the planet. Based on Pixel 6 and GrapheneOS with no Google, no backdoors and hardware security.
226
Mozilla VPN Completes Independent Security Audit by Cure53
Today, Mozilla published an independent security audit of its Mozilla VPN, which provides encryption and device-level protection of your connection and inf
227
Improving Git protocol security on GitHub
We’re changing which keys are supported in SSH and removing unencrypted Git protocol. If you’re an SSH user, read on for the details and timeline.
228
YouTube starts to require a credit card or ID to verify the age in EU (2020)
We’ve taken important steps to make YouTube a safer place for families. We’re announcing a continuation of these efforts.
229
How I re–over-engineered my home network for privacy and security
How I used Docker Compose, Ansible, and Caddy to re-over-engineer my network setup for easier maintenance, treating my Raspberry Pi like cattle, not a pet.
230
Surveilance bill rushed through Australian parliament in 24 hours
New Australian surveillance bill enables police to hack your device, collect or delete your data, and take over your social media accounts.
231
Tor is a great sysadmin tool (2020)
Using Tor to aid various system administration tasks, including checking firewall rules, bypassing internal network restrictions and connecting to remote systems that are behind NAT/CGNAT.
232
Tech-savvy audiences block Google Analytics
Is Google Analytics still useful and how accurate are its stats? How much data is missing from Google Analytics due to adblockers and privacy-friendly browsers?
233
Reverse engineering software licensing from early-2000s abandonware
This series concerns a software licensing system used in a proprietary software application from circa 2004. The software was available in an unregistered trial mode with limited functionality. A free licence could be obtained by registering online with the software vendor. The software became abandonware circa 2009…
234
Guide to Firefox Containers (2018)
Containers allow for cookies (a small file used for storing information) as well as other relevant files to be isolated either independently or collectively as a group (for example you could have a finance container). Isolating cookies inside of containers prevents other sites from being able to access them, thus…
235
236
MarkMonitor left 60k domains for the taking
Thanks to Nagli and d0xing for helping figure out what was happening with this issue.
237
Role-based access control like it was meant to be
Learn about role-based access control, its use cases and benefits.
238
239
How does Google Authenticator work?
This post is the first in a three-part series. The remaining two: How does Google Authenticator work? (Part 2) How does Google Authenticator work? (Part 3) When you’re accessing services over the WEB – let’s pick GMail as an example – a couple of things have to happen upfront: The server you’re connecting to (GMail in…
240
The All-Seeing “i”: Apple Just Declared War on Your Privacy
“Under His Eye,” she says. The right farewell. “Under His Eye,” I reply, and she gives a little nod.