2821
Anti-Interdiction on the Librem 5 USA
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
New
The latest blog posts to take off on Hacker News. 8,771 posts.
2822
TeamViewer installs suspicious font only useful for web fingerprinting
A weird almost unreadable font file bundled with TeamViewer for Windows software lets website detect if you’ve installed the software. Raises privacy concerns.
2823
DNS-over-HTTP/3 in Android
Posted by Matthew Maurer and Mike Yu, Android team To help keep Android users’ DNS queries private, Android supports encrypted DNS. I...
2824
FCC: TikTok is unacceptable security risk and should be removed from app stores
According to the FCC commissioner, TikTok is a video app in "sheep's clothing", suggesting a wolf hides underneath those funny videos.
2825
I Hacked My Car Guides: Creating Custom Firmware
Notice Note: As of 2022/10/25 the information in this series is slightly outdated. See Part 5 for more up to date information. I take no responsibility for any damages due to the information or steps provided on this site. The content is for educational purposes only. You modify your own car’s firmware at your…
2826
New documents reveal scale of US Government’s cell phone location data tracking
Thousands of previously unreleased records illustrate how government agencies sidestep our Fourth Amendment rights.
2827
Typical implementations of payment processing and related security issues
Thanks to @yarbabin for the logo Electronic payment systems have existed on the Internet for a long time, and some bugs in them are twenty years old. We’ve found critical vulnerabilities allowing us…
2828
JavaScript Obfuscation Techniques by Example
Code level discussion of web scraping, gray hat automation, growth hacking and bounty hunting
2829
'Zero trust’ security is a poor choice of words
Consider the user's perspective when naming a security initiative
2830
Pledge() and unveil() in SerenityOS (2020)
This post describes the implementation and use of pledge() and unveil() in SerenityOS.
2831
Microsoft open sources Salus software bill of materials (SBOM) generation tool
Salus is a general purpose, enterprise-proven, build-time SBOM generator. It works across platforms including Windows, Linux, and Mac, and uses the standard Software Package Data Exchange (SPDX) format.
2832
Microsoft Windows Network File System v4 Remote Code Execution
In this excerpt of a Trend Micro Vulnerability Research Service vulnerability report, Guy Lederfein and Quintin Crist of the Trend Micro Research Team detail a recently patched remote code execution vulnerability in the Microsoft Windows operating system, originally discovered and reported by Yuki C
2833
2834
We must protect our ability to transact privately online (2019)
Without cryptocurrency, a cashless society is a surveillance society
2835
Someone is impersonating us in a recruiting scam
Our startup was recently the center of an elaborate recruiting scam. What do other companies do if they realize that someone is impersonating them to attack vulnerable job seekers? This article gives advice to job seekers and shares our story.
2836
Are Magic Links Outdated?
Are magic links are still viable as an authentication method or are you better off using newer passwordless alternatives?
2837
Gambling and Adult content DNS blocking using Mullvad VPN
We have expanded our DNS blocking service with Gambling and Adult content filters!
2838
2839
Rolling-PWN vulnerability affects all Honda vehicles
Modern vehicles are often equipped with a remote keyless entry system. These RKE systems allow unlocking or starting the vehicle remotely. The goal of our research was to evaluate the resistance of a modern-day RKE system. Our research disclosed a Rolling-PWN attack vulnerability affecting all Honda vehicles currently…
2840
Your compliance obligations under the UK’s Online Safety Bill
L ast month I wrote a post about the UK’s “world-leading” vision for age-gating the open web. It got a bit of attention . That post, sadly, encompassed only one aspect of your compliance obligations under the Online Safety Bill . In this post, I’m going to tell you about the rest.
2841
Experian, you have some explaining to do
Twice in the past month KrebsOnSecurity has heard from readers who had their accounts at big-three credit bureau Experian hacked and updated with a new email address that wasn’t theirs. In both cases the readers used password managers to select strong, unique passwords for their Experian accounts. Research suggests…
2842
On-device browser translations with Firefox Translations
Firefox can now do offline and privacy-preserving translation of eight languages with more on the way. Powered by open-source and machine-learning.
2843
2844
Element (Matrix) launches Chatterbox, end-to-end encrypted embedded chat
We’re outrageously pleased to launch Chatterbox, an end-to-end encrypted embedded chat built on Matrix!
2845
SOC2: The screenshots will continue until security improves
We got SOC2 certified so now you have to pay us more.
2846
Meta Accounts: A New Login for VR
Today we’re introducing Meta accounts: a new way for people to log into their VR headsets that doesn’t require a Facebook account. When we announced that we would start requiring people to log into Meta Quest using a Facebook account, we received a lot of feedback from the Quest community. We took that feedback into…
2847
Taking action against scraping for hire
An update on what we're doing to protect people from scraping data on Facebook and Instagram.
2848
Apple previews Lockdown Mode
Apple today detailed two initiatives to help protect users who may be personally targeted by sophisticated digital threats.
2849
2850
We can't check the app permissions on Google Play anymore
Yep, Google removed the permissions list from Play Store, and we can no longer check the app permissions on it.