2581
New
The latest blog posts to take off on Hacker News. 8,770 posts.
2582
Facebook tracking is illegal in Europe
Meta must pay 1.2 billion euros for violating the EU regulation GDPR.
2583
Introducing passkeys in Chrome
We announced in October that passkey support was available in Chrome Canary. Today, we are pleased to announce that passkey support is now ...
2584
Hacking on a plane: Leaking data of millions and taking over any account
Hacking on a plane, by Midjourney AI
2585
Google Zanzibar Through Our Eyes
Understanding Google's Zanzibar paper the way the Authzed team does.
2586
Pulling MikroTik into the Limelight Demystifying and Jailbreaking RouterS
A comprehensive guide to MikroTik internals, including IPC, hand-rolled cryptography, and a novel post-authentication jailbreak
2587
Tor Browser 12.0
Tor Browser 12.0 is now available. This new release updates Tor Browser to Firefox Extended Support Release 102.
2588
Telegram: No-SIM Signup, Auto-Delete All Chats, Topics 2.0 and more
With this update, you can have a Telegram account without a SIM card and set up a global timer to automatically delete messages in all new chats. Topics in groups are now even more powerful – and available for groups with 100+ members.
2589
Linux Certificate Authority root stores have a too simple view of 'trust'
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
2590
A Year-End Letter from our Executive Director
This letter was originally published in our 2022 annual report. The past year at ISRG has been a great one and I couldn’t be more proud of our staff, community, funders, and other partners that made it happen. Let’s Encrypt continues to thrive, serving more websites around the world than ever before with excellent…
2591
Passwordless Authentication – Access Your Bitwarden Web Vault Without a Password
Logging into your Bitwarden vault just got easier! A new passwordless experience enables you to access your Bitwarden vault with another device.
2592
Activision’s faulty anti-cheat software
Activision’s blind faith in the infallibility of their RICOCHET anti-cheat software , combined with a buggy and unstable Call of Duty: Modern Warfare II release, has resulted in faulty, permanent, and unappealable player account bans that prevent users from starting even the single-player game. These bans leave…
2593
Convincing ChatGPT to Eradicate Humanity with Python Code
Full stack software engineer / entrepreneur specialized in AI agents, cybersecurity and graphics. In my free time I enjoy surfing, free diving, and contributing to open source software.
2594
Why We’re Suing NSO
Some of the most courageous journalists in the world write for El Faro, a Salvadoran news organization whose fearless, independent reporting about corruption, violence, and human rights abuses in Central America has earned it the gratitude of readers all over the world—and the enmity of criminal gangs and…
2595
The clever reason scammers can’t spell (2019)
Anybody who doesn’t fall off their chair laughing is exactly who they want to talk to – Cormac Herley, Microsoft computer scientist.
2596
Memory Safe Languages in Android 13
Posted by Jeff Vander Stoep For more than a decade, memory safety vulnerabilities have consistently represented more than 65% of vulnerab...
2597
Hijacking infrared to make a dumb device smart
I own a very old ‘flat’ screen television from 2009. One of the reason this TV is still kicking around is because I have a strange sentimental affection for it. Another is that I have written automation for it that works really well and it would be a pain to migrate away from it.
2598
Consider Disabling Browser Push Notifications on Family and Friends Devices
A terrible user-hostile browser feature is being misused, surprising no one.
2599
2600
LastPass owner GoTo has been hacked
We recently concluded our investigation into the security incident first shared with customers in November of 2022 regarding unauthorized activity in a third-party cloud storage environment. We eliminated the threat actor’s access to the environment and found no evidence of additional compromise or threat actor…
2601
We found critical vulnerabilities in Hive Social
Dieser Artikel ist auch auf deutsch erschienen. Update: The vulnerabilities are currently no longer exploitable because Hive deactivated their servers. More details Following the Twitter takeover, a number of services promising to be an alternative gained traction. One of those is “Hive Social”, which reached more…
2602
New details on commercial spyware vendor Variston
The Threat Analysis Group shares new information on the commercial spyware vendor Variston.
2603
Lastpass Security Incident
Please refer to the latest article for updated information.nbs[..]
2604
2605
Meta’s Adversarial Threat Report, Third Quarter 2022
We’re sharing details about three deceptive networks we took down during the last quarter.
2606
New two-factor authenticator: Commodore 64
Multi-factor authentication is ripe for disruption. SMS 2FA is inherently defective. Phone authenticators get stolen. Security tokens get lo...
2607
Apple is becoming an ad company despite privacy claims
Apple’s ad business is growing fast. It tracks you in its apps and uses that data to sell ads despite its privacy claims.
2608
Investigating a backdoored PyPI package targeting FastAPI applications
In this post, we analyze a malicious PyPI package attempting to backdoor FastAPI applications.
2609
“Invalid Username or Password”: a useless security measure (2014)
Login attempts fail because computer users can't remember their email or didn't input the right password. Most websites on the Internet won't tell you which one is actually incorrect.
2610
Oh, the Places Your Apple ID Will Go
Here is a short and curious Twitter thread from app developers and security researchers Tommy Mysk and Talal Haj Bakry: Apple’s analytics data include an ID called “dsId”. We were able to verify that “dsId” is the “Directory Services Identifier”, an ID that uniquely identifies an iCloud account. Meaning, Apple’s…