2221
Widespread exploitation of critical remote code execution in Apache Log4j
On December 10, 2021, Apache released a fix for CVE-2021-44228, a critical RCE vulnerability affecting Log4j that is being exploited in the wild.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,441 posts.
2222
Australian Government Scrambles to Authorize Mass Surveillance
This week, Australian Prime Minister Tony Abbott used recent terrorist threats as the backdrop of a dire warning to Australians that “for some time to come, the delicate balance between freedom and security may have to shift. There may be more restrictions on some, so that there can be more...
2223
Who Is Being Monitored?
Politicians regularly claim that they need to ban encryption to protect the children. But who is actually being monitored?
2224
Android wallpaper images can threaten privacy
Android 12's Material You could risk your privacy. Learn protective measures with our insights.
2225
Chromium Blog: A Tale Of Two Pwnies (Part 2)
When we wrapped up our recent Pwnium event, we praised the creativity of the submissions and resolved to provide write-ups on how the two e...
2226
How SHA-256 Works Step-by-Step
SHA-2 (Secure Hash Algorithm 2), of which SHA-256 is a part, is one of the most popular hash algorithms around. A cryptographic hash, also often referred to as a "digest", "fingerprint" or "signature", is an almost perfectly unique string of characters that is generated from a separate piece of input text. SHA-256…
2227
2228
Tor security advisory: “relay early” traffic confirmation attack
This advisory was posted on the tor-announce mailing list. SUMMARY: On July 4 2014 we found a...
2229
Extra security measures for next week's releases
The core committee has decided that one of the security issues due to be fixed next week is sufficiently bad …
2230
Exploiting the Linux kernel via packet sockets
Guest blog post, posted by Andrey KonovalovIntroductionLately I’ve been spending some time ...
2231
2232
2233
Dropbox Cofounder & CTO Arash Ferdowsi responds to yesterday's bug
Modern work can be frustrating and chaotic—if you don’t have the right tools. From context engineering to multimodal search, go behind the scenes and hear how Dropbox engineers are building AI that actually understands you, so you can focus on the work that matters most.
2234
AdGuard DNS: A Privacy-Oriented DNS Server
AdGuard DNS: a privacy-oriented DNS service that blocks trackers and ads anywhere, from your PC and mobile devices to smart TV and IoT.
2235
2236
Microsoft's Xandr grants GDPR rights at a rate of 0%
noyb has filed a GDPR complaint regarding transparency issues, the right of access and the use of inaccurate information about users
2237
The threat on your desk: Building an evil USB-C dock
BadUSB attacks have been a threat for years, but is the USB-C dock sitting on your desk the latest threat in disguise?
2238
Microsoft didn’t sandbox Windows Defender, so I did
Microsoft exposed their users to a lot of risks when they released Windows Defender without a sandbox. This surprised me. Sandboxing is one of the most effective security-hardening techniques. Why did Microsoft sandbox other high-value attack surfaces such as the JIT code in Microsoft Edge, but leave Windows Defender…
2239
The Justice Dept's secret rules for targeting journalists with FISA court orders
The Justice Dept has kept these FISA court rules for targeting journalists secret for years.
2240
The FIPS 140-3 Go Cryptographic Module
Go now has a built-in, native FIPS 140-3 compliant mode.
2241
Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
Big fish. Small counter. Root shell.
2242
Exploiting Wi-Fi Stack on Tesla Model S
In the past two years, Keen Security Lab did in-depth research on the security of Tesla Cars and presented our research results on Black Hat 2017 and Black Hat 2018. Our research involves many in-veh
2243
2244
EFF to Supreme Court: The Fourth Amendment Covers DNA Collection
San Francisco - People have a Fourth Amendment right to privacy when it comes to their genetic material, the Electronic Frontier Foundation (EFF) argues in an amicus brief filed this week with the Supreme Court of the United States. EFF is asking the Supreme Court to hear arguments in Raynor v....
2245
Encryption is a necessity
Recent news around Apple’s resistance to the US government’s demand to decrypt the iPhone of one of the San Bernardino shooters has brought encryption
2246
It is unlikely that built-in email encryption will ever be available in Gmail
Gmail's end-to-end encryption project seemed dead in 2017. Now it's back, but only for key account customers.
2247
Aaron’s Law Reintroduced: Computer Fraud and Abuse Act Didn’t Fix Itself
Aaron’s law, the proposed law named in honor of Internet hero Aaron Swartz was reintroduced last week by Rep. Zoe Lofgren (D-Calif.) and Senator Wyden (D-Ore.), with new co-sponsor Senator Rand Paul (R-Ky.). This bill is the same as the one introduced in 2013 and we call upon Congress to move it...
2248
Basic Security Precautions for Non-Profits and Journalists
Basic security precautions for non-profits and journalists in the United States, early 2019.
2249
Teenager Who Reads News Online? According to the DoJ, You May Be a Criminal
During his first term, President Barack Obama declared October 2009 to be “National Information Literacy Awareness Month,” emphasizing that, for students, learning to navigate the online world is as important a skill as reading, writing and arithmetic. It was a move that echoed his predecessor's...
2250
