2851
Police CyberAlarm Uses Alarming Cryptography
Today we’re going to be talking about this code, shared on Twitter by Paul Moore. It’s worth noting that this code snippet was after Paul attempted to alert them to security issues with…
New
The latest blog posts to take off on Hacker News. 8,771 posts.
2852
2853
Google now deleting health clinic searches from location history automatically
Editor's note – May 12, 2023Last year, we launched an important update to Location History. We remain committed to improving the experience and making it as helpful…
2854
Hardening attack surfaces with formally proven binary format parsers
With an eye toward performance, interoperability, or legacy concerns, low-level system software often must parse binary encoded data formats. Few tools are available for this task, especially since the formats involve a mixture of arithmetic and data dependence, beyond what can be handled by typical parser generators…
2855
What's the deal with all those weird wrong-number texts?
Digging into the world of "pig-butchering" scams
2856
Kaspersky: Poorly detected backdoor targeting governments and NGOs around globe
Kaspersky experts have brought to light a poorly detected SessionManager backdoor that was set up as a malicious module within the Internet Information Services (IIS), a popular web server edited by Microsoft. Once propagated, SessionManager enables a wide range of malicious activities, starting from collecting emails…
2857
EU Digital ID wallet is coming
As you were browsing something about your browser made us think you were a bot. There are a few reasons this might happen:
2858
TikTok updated privacy policy to collect faceprints and voiceprints (2021)
TikTok has violated privacy regulations before, and they are in position to share millions of American users' data with the Chinese government.
2859
De-anonymizing ransomware domains on the dark web
* We have developed three techniques to identify ransomware operators' dark websites hosted on public IP addresses, allowing us to uncover previously unknown infrastructure for the DarkAngels, Snatch, Quantum and Nokoyawa ransomware groups. * The methods we used to identify the public internet IPs involved matching…
2860
Flurry of Calls Among Saudi Staff and Spy Coincided with 9/11 Hijackers’ Arrival
Future al Qaeda cleric Anwar al-Awlaki also connected
2861
Detecting unauthorized physical access with beans, lentils and colored rice (2021)
strengthening digital self-defense | research and development | providing privacy-focused goods and services
2862
“Magic links” can end up in Bing search results, rendering them useless
I recently started verifying user email addresses during signup to prevent bots, mistyped emails, and also to ensure that addresses are…
2863
Two types of privacy
"Privacy" can mean different things in different contexts. Tracking-reduction and tracking-evasion represent different goals with some conflict and overlap.
2864
Memory safety for the world’s largest software project
Rust for Linux and Prossimo The Rust for Linux project aims to bring a new system programming language into the Linux kernel. Rust has a key property that makes it very interesting to consider as the second language in the kernel: it guarantees no undefined behavior takes place (as long as unsafe code is sound)…
2865
PyPI: Python packets steal AWS keys from users
Multiple Python packages caught by Sonatype were seen uploading secrets such as AWS keys and environment variables to a web endpoint.
2866
Hardening macOS
Quick and easy guide for securing macOS systems, for both laymen and security enthusiasts. Last updated for Golden Gate.
2867
SMS phishing is way too easy
Impersonating someone in SMS texts is way too easy, we must change this to prevent social engineering fraud.
2868
Fuzzing rust-minidump for Embarrassment and Crashes – Part 2
For the last year, we've been working on the development of rust-minidump. The final part in this series takes you through fuzzing rust-minidump.
2869
The curious tale of a fake Carrier.app
Posted by Ian Beer, Google Project Zero NOTE: This issue was CVE-2021-30983 was fixed in iOS 15...
2870
Reverse Engineering Google Colab
Take a peek into the internals of Google Colab, and discover how we can bend the rules of Colab a little in order to adapt it to our MLOps workflow
2871
Tailscale SSH
Use this guide to setup Tailscale SSH. Learn how it transforms SSH connectivity by using your Tailscale identity for authentication. Enjoy simplified setup, added security with WireGuard®, and customizable access with ACLs. Ideal for managing secure connections across your tailnet.
2872
Are blockchains decentralized?
A new Trail of Bits research report examines unintended centralities in distributed ledgers Blockchains can help push the boundaries of current technology in useful ways. However, to make good risk decisions involving exciting and innovative technologies, people need demonstrable facts that are arrived at through…
2873
SSO should be table stakes
Withholding security for money feels a little gray-hat.
2874
We are removing the option to create new subscriptions
In order to store less data we will no longer accept NEW PayPal and Credit card subscriptions (recurring payments). One-time payments are not affected.
2875
Linux Threat Hunting: ‘Syslogk’ a kernel rootkit found in the wild
Syslogk Rootkit Revealed: Analysis
2876
A Quick Look at QUIC Censorship
An introduction to QUIC and its potential for censorship resistance, as well as a survey of current QUIC blocking in China, India, Russia and Uganda.
2877
Apple’s macOS Ventura – New Security Changes
With macOS 13, Apple have made some bold and potentially disruptive changes to Mac security. We explore them here.
2878
Bunny fonts – privacy respecting drop-in replacement for Google Fonts
Strengthen your privacy, improve your performance and give your website a personality by using Bunny Fonts. The only fully GDPR fonts powered by a CDN!
2879
Apple has a bug in its disk I/O throttling code that affects raw disk copies
Matt Jacobson, recovering software engineer.
2880