4291
Restricting network access using Linux Network Namespaces
Our last blog post on Linux mount namespaces explored ways to restrict access to the file system. In this post we'll show how to restrict access to the network.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,441 posts.
4292
NSA Interception Infographic
Late Friday afternoon , the government asked the Supreme Court to dismiss our lawsuit challenging the constitutionality of a 2008 law gives the government unprecedented authority to monitor Americans ’ international emails and phone calls.
4293
Protecting GDPR Personal Data with Pseudonymization
If you’ve had the chance to read our GDPR white paper or our previous GDPR primer blog post, you’ve, no doubt, seen the word "pseudonymization" used extensively to describe one technical measure that ...
4294
4295
Defense Against AI-Guided Traffic Analysis (Daita)
Even if you have encrypted your traffic with a VPN (or the Tor Network), advanced traffic analysis is a growing threat against your privacy. Therefore, we now introduce DAITA.
4296
Protecting reserved roles with PostgreSQL Hooks
Using Postgres Hooks to protect functionality in your Postgres database.
4297
AI Meets Cryptography 2: What AI Found in OpenVM's ZkVM
We turned zkao (our AI auditor) on OpenVM, a state-of-the-art zkVM, and it found a critical soundness bug: the pairing check accepted a prover-supplied witness without proper subfield checking, which lets a malicious prover forge any pairing equality. It is fixed in OpenVM 1.6.0 and tracked as CVE-2026-46669. This is…
4298
Study reveals scale of data-sharing from Android mobile phones
These vendor-customised Android variants transmit substantial amounts of information to the OS developer and to third parties such as Google, Microsoft, LinkedIn, and Facebook that have pre-installed system apps.
4299
My NSA polygraph experiences
AntiPolygraph.org Message Board - Index
4300
4301
TextSecure: Forward secrecy for asynchronous messages
Traditionally, asynchronous messaging systems such as email have relied on protocols like PGP or S/MIME for cryptographic security. These protocols work the way most people are familiar with: one who wishes to receive encrypted email advertises a public key, and those wishing to send encrypted e...
4302
SSH server 0-day exploit
SANS.edu Internet Storm Center. Today's Top Story: The Classics Return: Vulnerable E-Mail Scripts;
4303
RPKI – The required cryptographic upgrade to BGP routing
We have talked about the BGP Internet routing protocol before. We have talked about how we build a more resilient network and how we can see outages at a country-level via BGP. We have even talked about the network community that is vital to the operation of the global Internet.
4304
Peppering (Password Storage)
Website with the collection of all the cheat sheets of the project.
4305
Chromium Security: Site Isolation
Site Isolation is a security feature in Chrome that offers additional protection against some types of security bugs. It uses Chrome's sandbox to make it harder for untrustworthy websites to access or steal information from your accounts on other websites.
4306
Fighting spam with Haskell at Meta (2015)
Visit the post for more.
4307
WireGuard for Windows Pre-Alpha Is Available
Users of kernels < 5.6 may also choose wireguard-lts or wireguard-dkms + linux-headers , depending on which kernel is used.
4308
Hacking the D.C. Internet Voting Pilot
The District of Columbia is conducting a pilot project to allow overseas and military voters to download and return absentee ballots over the Internet. Before opening the system to real voters, D.C. has been holding a test period in which they've invited the public to evaluate the system's security and usability. This…
4309
Three locks for your SSH door
AIX provides the highest level of performance, security, and reliability of any UNIX operating system.
4310
Stuxnet: A Breakthrough
Broadcom Community - VMTN, Mainframe, Symantec, Carbon Black
4311
Red Hat Asks Supreme Court to Review Software Patents
Search for and read the latest Red Hat news and press releases about the people and products shaping the future of open source and open hybrid cloud technology.
4312
4313
The PGP problem (2019)
The PGP problem
4314
4315
4316
Apple seeking to patent spyware
It looks like Apple, Inc., is exploring a new business opportunity: spyware and what we're calling "traitorware." While users were celebrating the new jailbreaking and unlocking exemptions, Apple was quietly preparing to apply for a patent on technology that, among other things, would allow Apple...
4317
Block AI bots, scrapers and crawlers with a single click
To help preserve a safe Internet for content creators, we’ve just launched a brand new “easy button” to block all AI bots. It’s available for all customers, including those on our free tier
4318
4319
4320
Detecting and Preventing Distillation Attacks
We identified coordinated distillation attacks using ~24,000 fraudulent accounts to extract Claude's capabilities.