Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,439 posts.
Fighting the New York Times' invasion of user privacy
OpenAI is fighting the New York Times’ demand for 20 million private ChatGPT conversations and accelerating new security and privacy protections to protect your data.
What Spectre and Meltdown Mean for WebKit
Security researchers have recently uncovered security issues known as Meltdown and Spectre.
Hacking Moltbook
Learn how a misconfigured Supabase database at Moltbook exposed 1.5M API keys, private messages, and user emails, enabling full AI agent takeover.
WebKit Tracking Prevention Policy
Today we are publishing the WebKit Tracking Prevention Policy, covering: What types of tracking WebKit will prevent.
EU's concealment of secret 'expert list' on CSAM regulation is maladministration
After a year-long inquiry, the EU Ombudsman recommends that the European Commission should monitor stages of progress in every Big Tech case that the Irish Data Protection Commission is responsible for.
How Shamir's Secret Sharing Works
A visual explanation of how threshold secret sharing lets any k of n shares recover a secret.
FIDO2 security key company releases hardware that's open source and uses Rust
Our Kickstarter campaign for our next generation of Solo products launches on January 26th. To get alerted when the campaign is live, you can sign up here. Update: The campaign is now live! Check it out to see all the details. Humble beginnings I've been working on Solo for almost 3 years now. It started back when I…
Removing Coordinated Inauthentic Behavior from China
We removed seven Pages, three Groups and five Facebook accounts as part of a small network that originated in China and focused on Hong Kong.
Protecting Security Researchers
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
The SaaS CTO Security Checklist Redux
Learn how to protect your SaaS applications with the SaaS CTO security checklist. Doing the basics goes a long way in keeping your company and product secure.
Parity Wallet security alert
We tell the story of Parity's technical roadmap with regular blogs. Read on to find out the latest on major upgrades that are delivering scalability for the Polkadot ecosystem.
The future of Flipper Zero development
We've seen the strong reaction from the community over the idea that we've stopped developing the Flipper Zero firmware. We want to address this and let you know that we've heard all your feedback and have decided to rethink our approach to maintaining the project and engaging with the community.
The UK is still trying to backdoor encryption for Apple users
The Financial Times reports that the U.K. is once again demanding that Apple create a backdoor into its encrypted backup services. The only change since the last time they demanded this is that the order is allegedly limited to only apply to British users. That doesn’t make it any better.The demand...
The Tor Project: Building the Next Generation of Onion Services
A few weeks ago, a small group of Tor developers got together in Montreal and worked on onion...
Update: Looking Glass Add-On
We didn’t think hard enough about how our actions would affect the community, and we’re sorry for letting you down. How we got here Over the co
When MFA isn't MFA, or how we got phished
Due to a recent Google change, MFA isn't truly MFA.
Tailscale SSH: Investigation and remediation update
Securely connect to anything on the internet with Tailscale. Built on WireGuard®️, Tailscale enables you to make finely configurable connections, secured end-to-end according to zero trust principles, between any resources on any infrastructure.
Using Zoom? Here are the privacy issues you need to be aware of
If you’re using Zoom while working from home, you should be aware of Zoom's privacy policies, including its “attention tracking” tool.
HTTP/2-exclusive threats caused by implementation flaws and RFC imperfections
In this research paper James Kettle introduces multiple new classes of HTTP/2-exclusive attacks, demonstrated on popular websites and servers.
SSH Agent Explained
The SSH agent acts behind the scenes to keep you safe. Here's how it works.
1Password for Linux
The wait is over. [1Password for Linux is officially here](https://support.1password.com/getting-started-linux/).
PoisonGPT: We hid a lobotomized LLM on Hugging Face to spread fake news
We will show in this article how one can surgically modify an open-source model, GPT-J-6B, and upload it to Hugging Face to make it spread misinformation while being undetected by standard benchmarks.