3991
LTrack: Stealthy Tracking of Mobile Phones in LTE
Martin Kotuliak, Simon Erni, Patrick Leu, Marc Röschlin, and Srdjan Čapkun, ETH Zurich
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,441 posts.
3992
The search for a perfect access control system
Making sense of authorization, policy and access management systems.
3993
Uncovering 2017’s Largest Malvertising Operation
The Zirconium group successfully created and operated 28 fake ad agencies to distribute malvertising campaigns through 2017, buying an estimate of 1 billion ad views throughout the year, and reaching
3994
Automating cookie consent and GDPR violation detection
The European Union's General Data Protection Regulation (GDPR) requires websites to inform users about personal data collection and request consent for cookies. Yet the majority of websites do not give users any choices, and others attempt to deceive them into accepting all cookies. We document the severity of this…
3995
Teen safety, freedom, and privacy
Explore OpenAI’s approach to balancing teen safety, freedom, and privacy in AI use.
3996
Answering questions about Android developer verification
News and insights on the Android platform, developer tools, and events.
3997
Chrome 68 Released: HTTP Sites Marked as “Not Secure”
The Chrome team is delighted to announce the promotion of Chrome 68 to the stable channel for Windows, Mac and Linux. This will roll out ove...
3998
CJEU declares Meta's GDPR approach illegal
In today's decision, the CJEU declared Meta/Facebook's GDPR approach largely illegal - similar to noyb's previous litigation before the EDPB leading to a fine of € 390 million.
3999
Understanding STIR/SHAKEN – New Anti-Robocalling Protocol
This whitepaper explains the basic technical details of STIR/SHAKEN call authentication and how it prevents caller ID spoofing.
4000
4001
Private profiles are now generally available on GitHub
Private profiles (now generally available) enables users to turn their GitHub profile "private", which gives users control over features that share user data across the GitHub platform. When a profile…
4002
Privacy and Security Risks of Android VPN Permission-enabled Apps
Explore the science behind the headlines with our leading experts.
4003
400Gbps: Winter of Whopping Weekend DDoS Attacks
Over the last month, we’ve been watching some of the largest distributed denial of service (DDoS) attacks ever seen unfold. As CloudFlare has grown we've brought on line systems capable of absorbing and accurately measuring attacks.
4004
What Happens When You Enter the Witness Protection Program?
The history of the Witness Protection Program is full of Hollywood-worthy intrigue. It also challenges our assumptions about crime and identity.
4005
RCE on MikroTik routers with IPv6 RA enabled
MikroTik makes networking hardware and software, which is used in nearly all countries of the world. Our mission is to make existing Internet technologies faster, more powerful and affordable to wider range of users.
4006
Boston College Campus Police: "Using Prompt Commands" May Be a Sign of Criminal Activity
On Friday, EFF and the law firm of Fish and Richardson filed an emergency motion to quash [pdf] and for the return of seized property on behalf of a Boston College computer science student whose computers, cell phone, and other property were seized as part of an investigation into who sent an e-...
4007
Face recognition in European police forces
The majority of the police forces that answered questions by AlgorithmWatch said they use or plan to introduce face recognition. Use cases vary greatly across countries, but almost all have in common their lack of transparency.
4008
4009
MongoDB Server Security Update, December 2025
The following is an update on the security vulnerability identified in December 2025.
4010
EFF Applauds Amazon for Pushing Back on Request for Echo Data
The number of Internet-enabled sensors in homes across the country is steadily increasing. These sensors are collecting personal information about what’s going on inside the home, and they are doing so in a volume and detail never before possible. The law, of course, has not kept up. There are no...
4011
4012
Kenya Government mandates DNA-linked national ID, without data protection law
Last month, the Kenya Parliament passed a seriously concerning amendment to the country’s national ID law, making Kenya home to the most privacy-invasive national ID system in the world. The ...
4013
4014
What Location Tracking Looks Like
Your cell phone company knows everywhere you go, twenty-four hours a day, every day. How concrete is this fact for you? It's very concrete for Malte Spitz, a German politician and privacy advocate. He used German privacy law — which, like the law of many European countries, gives individuals a...
4015
4016
4017
Hypernetes: Bringing Security and Multi-Tenancy to Kubernetes
While many developers and security professionals are comfortable with Linux containers as an effective boundary, many users need a stronger degree of isolation, particularly for those running in a multi-tenant environment. Sadly, today, those users are forced to run their containers inside virtual machines, even one…
4018
4019
SLSA, an End-to-End Framework for Supply Chain Integrity
Posted Kim Lewandowski, Google Open Source Security Team & Mark Lodato, Binary Authorization for Borg Team Supply chain integrity attacks—u...
4020
Scanners Beware: Welcome to the network from hell
We’ve crafted a bold defense strategy that not only slows scans but actively disrupts and deceives attackers.