2671
Chainalysis CTO said blockchain is easier to trace than paper money
Contrary to his original intentions, cryptocurrencies and DeFi platforms are now more vulnerable to privacy breaches and hacking than…
New
The latest blog posts to take off on Hacker News. 8,770 posts.
2672
2673
Chaos Computer Club saves the German healthcare system 400M Euros
Zur Verbindung mit dem Gesundheitsdatennetz „Telematik“ sind in deutschen Arztpraxen spezielle Router vorgeschrieben. Nach nur fünf Jahren Laufzeit soll nun ein Gerätetausch alternativlos sein – so...
2674
Disposable Root Servers
Unlimited, free and dedicated Kali Linux Root Shells - readily set up for hackers. Traffic via VPNs. Accessible directly or via TOR. NO LOGZ.
2675
Microsoft Office 365 Message Encryption Insecure Mode of Operation
This blogpost, written by WithSecure’s STINGR Group, presents the analysis of a security incident that happened in February 2026 and was investigated by the WithSecure Incident Response team.
2676
If AI can read, then plain text can be weaponized (2019)
Advances in AI have helped automate many tasks that involve processing text. However, text-processing AI algorithms have their own unique vulnerabilities, researchers at IBM, Amazon and University of Texas have found.
2677
Toyota suffered a data breach by accidentally exposing a secret key on GitHub
On October 7th, Toyota revealed a partial copy of their T-Connect source code had been accidentally exposed for 5 years, including access to data for over 290,000 customers.
2678
Recovering a password-protected ThinkPad T60
An illustrated overview about the process of clearing the supervisor password from a ThinkPad T60, based on guides that some smart and persistent people have written.
2679
Removing SMS support from Signal Android (soon)
For many years, the Signal app on Android has supported sending and receiving plaintext SMS and MMS messages in addition to Signal messages. SMS and MMS are standardized communication protocols that allow mobile devices to send and transmit messages, and most people picking up their phone to text...
2680
Security of Passkeys in the Google Password Manager
Posted by Arnar Birgisson, Software Engineer We are excited to announce passkey support on Android and Chrome for developers to test today, ...
2681
Bringing passkeys to Android and Chrome
developers can enroll in the Google Play Services beta and use Chrome Canary. Both features will be generally available on stable channels
2682
The State of AWS Security
We analyzed trends in the implementation of security best practices and took a closer look at various types of misconfigurations that contribute to the most common causes of security breaches.
2683
A Memory Safe Implementation of the Network Time Protocol
Folkert and the team at Tweede golf are helping us to build a memory safe NTP implementation. We asked them to share their experience in this blog post. Thank you for your partnership and contributions, Tweede golf team! Josh Aas, Head of ISRG’s Prossimo project For the last few months we at Tweede golf have been…
2684
Protect your privacy and your phone number with Firefox Relay
When you share your personal phone number with anyone outside your circle of family and friends, it essentially gives them permission to call you anytime o
2685
Malicious update/malware by a semi-advanced adversary
What do wedding venues and malware have in common? I got to spend my weekend investigating them. A short post about interesting malware, and lessons learned.
2686
Call for Participation to Chaos Computer Club’s 37C3
The Chaos Communication Congress is the Chaos Computer Club’s (CCC) annual symposium and hacker party.
2687
What can we learn from leaked Insyde's BIOS for Intel Alder Lake
Leaked story timeline According to the timestamp of the github repository, an unidentified user uploaded the Insyde’s partial firmware solution (4.
2688
Banks are not repaying victims of Zelle scams
When U.S. consumers have their online bank accounts hijacked and plundered by hackers, U.S. financial institutions are legally obligated to reverse any unauthorized transactions as long as the victim reports the fraud in a timely manner. But new data released this week suggests that for some of the nation’s largest…
2689
Signal is secure, as proven by hackers
Users of the Signal messaging app got hit by a hacker attack. We analyze what happened and why the attack demonstrates that Signal is reliable.
2690
SimulaVR Has Been Subpoenaed by Meta Platforms, Inc
A few days ago we received a large packet in the mail from Meta's legal team informing us that SimulaVR has been subpoenaed for their antitrust case FTC vs. Meta Platforms , in relation to the government's recent injunction against their acquisition of a VR fitness company.
2691
2692
Glut of Fake LinkedIn Profiles Pits HR Against the Bots
A recent proliferation of phony executive profiles on LinkedIn is creating something of an identity crisis for the business networking site, and for companies that rely on it to hire and screen prospective employees. The fabricated LinkedIn identities — which pair AI-generated profile photos with text lifted from…
2693
Ignore 98% of dependency alerts: introducing Semgrep Supply Chain
An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.
2694
Have lots of AWS accounts
“You should have lots of AWS accounts” has moved to https://src-bin.com/substrate/blog/you-should-have-lots-of-aws-accounts/ .
2695
“Privacy”.com–Yeah Right
At the behest of a friend of mine, I decided to get myself a Privacy.com account. I filled it out with my personal information, activated the account, and...
2696
New Pegasus spyware abuses identified in Mexico
Mexican digital rights organization R3D, with technical support from the Citizen Lab, has determined that Mexican journalists and a human rights defender were infected with Pegasus between 2019 and 2021. The infections occurred years after the first revelations of Pegasus abuses in Mexico, and after Mexico’s current…
2697
2698
Microsoft bakes a VPN into Edge and turns it on
Microsoft has bundled a VPN with its Edge browser, and we expect others to follow suit. But can a built-in VPN replace a full-fledged VPN service, and is it a good example to follow? We give our take.
2699
Private profiles are now generally available on GitHub
Private profiles (now generally available) enables users to turn their GitHub profile "private", which gives users control over features that share user data across the GitHub platform. When a profile…
2700
Why to not use JWT (2021)
We build advanced web apps