3211
Decentralized DNS with the Handshake Naming System
Starting since version 1.30, the Mac, Linux, and Windows Private Internet Access (PIA) desktop clients have come with the ability to change the selected
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,441 posts.
3212
3213
Making frontier cybersecurity capabilities available to defenders
Claude Code Security is one step towards our goal of more secure codebases and a higher security baseline across the industry.
3214
DigiCert Revocation Incident (CNAME Domain Validation)
DigiCert will be revoking certificates that did not have proper Domain Control Verification (DCV). Before issuing a certificate to a customer, DigiCert validates the customer’s control or ownership over the domain name for which they are requesting a certificate using one of several methods approved by the CA/Browser…
3215
Sony Music Brazil hacked
I hate to pick on Sony, but they got hacked again (and no, I am not talking about the Lulzsec + sonypictures, this is another…
3216
3217
Improved Digital Certificate Security
Posted by Stephan Somogyi, Security & Privacy PM, and Adam Eijdenberg, Certificate Transparency PM On September 14, around 19:20 GMT, Syma...
3218
Threema Goes Open Source
Threema Goes Open Source, Welcomes New Partner
3219
Obama Has Gotten 3,000+ Tweets about Encryption. Let’s Double That
EFF, ACLU, and Access Now released a statement in support of Apple and its stance on encryption last week. We called on the President to reject any attempt to force backdoors like the one the FBI was seeking to Apple’s operating system. We asked our communities to help by tweeting at the President...
3220
3221
An Update on Plugin Security
Learn about Figma's response to the security vulnerabilities that were reported in a 3rd-party library that we use for plugin security
3222
3223
Blueprint for a distributed multi-region IAM with Go and CockroachDB
Learn how to scale IAM globally. Ory provides secure multi-region identity solutions.
3224
Investigating a backdoored PyPI package targeting FastAPI applications
In this post, we analyze a malicious PyPI package attempting to backdoor FastAPI applications.
3225
RubyGems.org gem replacement security vulnerability and mitigation
Summary RubyGems.org contained a bug that could allow an attacker to replace some .gem files on our servers with a different file that they supplied. We deployed a partial fix on April 2nd and a co...
3226
Digging into Linux namespaces – part 1
Process isolation is a key component for containers. One of the key underlying mechanisms are namespaces. We will explore what they are, and how they work, to build our own isolated container and better understand each piece.
3227
DNS-over-HTTPS Policy Requirements for Resolvers
Over the past few months, we’ve been experimenting with DNS-over-HTTPS (DoH), a protocol which uses encryption to protect DNS requests and responses, with the goal of deploying DoH by default ...
3228
Increasing HTTPS Adoption
When a browser connects to websites over HTTPS (vs. HTTP), eavesdroppers and attackers on the network can't intercept or alter the data that...
3229
Should notes be end-to-end encrypted?
A comprehensive guide about the different types of encryption, the upsides and downsides, and how to make decisions about how much encryption you need for note-taking, passwords, or anything else.
3230
Mad at Meta? Don't Let Them Collect and Monetize Your Personal Data
If you’re fed up with Meta right now, you’re not alone. Meta tracks you across millions of websites and apps and its business model relies on your data. If you want to limit Meta’s ability to collect and profit from your personal data, here’s what you need to know.
3231
Reddit and LinkedIn apps also caught copying and pasting clipboard contents
Linkedin and Reddit both check your clipboard and copy and paste your clipboard contents with every keystroke - even when you’re in another app. Another
3232
Signify: Securing OpenBSD from Us to You
I'm going to talk today about signify, a tool I wrote for the OpenBSD project that cryptographically signs and verifies. This allows us to ensure that the releases we ship arrive on your computer in their original, intended form, without tampering.
3233
3234
A look at home routers, and a surprising bug in Linux/MIPS
Xôi Lạc TV là địa chỉ theo dõi bóng đá trực tuyến được người dùng đánh giá cao. Với hàng loạt giải đấu được phát sóng miễn phí cùng nhiều thông tin được cập nhật như lịch thi đấu, kết quả, bảng xếp hạng, tỷ số và những tin tức thể thao đáng chú ý.
3235
Why We’re Suing NSO
Some of the most courageous journalists in the world write for El Faro, a Salvadoran news organization whose fearless, independent reporting about corruption, violence, and human rights abuses in Central America has earned it the gratitude of readers all over the world—and the enmity of criminal gangs and…
3236
“YOLO” is not a valid hash construction
Among the cryptographic missteps we see at Trail of Bits, “let’s build our own tool out of a hash function” is one of the most common. Clients have a problem along the lines of “we need to hash a bunch of different values together” or “we need a MAC” or “we need […]
3237
3238
Yahoo Japan's password-free authentication reduced inquiries, sped up sign-in
Yahoo! JAPAN achieved a passwordless identity system. Learn their approach and the consequences of the effort.
3239
3240
Mandiant Exposes APT1, One of China’s Cyber Espionage Units
Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.