3121
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,770 posts.
3122
Full third-party cookie blocking and more
This blog post covers several enhancements to Intelligent Tracking Prevention (ITP) in iOS and iPadOS 13.4 and Safari 13.1 on macOS to address our latest discoveries in the industry around tracking.
3123
3124
If you care about security you might want to move the iPhone Camera app
There's a quirk in the iPhone Camera app that can drive a security conscious iPhone owner crazy: if you touch your finger on the Camera app ...
3125
Gitlab Critical Security Release
GitLab release announcements and feature highlights.
3126
Hackers Breached Virginia Bank Twice in Eight Months, Stole $2.4M
Hackers used phishing emails to break into a Virginia bank in two separate cyber intrusions over an eight-month period, making off with more than $2.4 million total. Now the financial institution is suing its insurance provider for refusing to fully cover the losses.
3127
Target's EasySweep – Simplifying Skimmer Detection
An article by Anonymous : Target's patented EasySweep device protects guests' data from skimmers.
3128
MongoBleed Explained Simply
CVE-2025-14847 allows attackers to read any arbitrary data from the database's heap memory. It affects all MongoDB versions since 2017, here's a simple explanation:
3129
Security advisory: Breach and Django
Posted by Jacob Kaplan-Moss on Aug. 6, 2013
3130
AI browser extensions are a security nightmare
AI-powered browser extensions come with alarming security risks, but most companies still don't have policies for how their employees can use them.
3131
China issues new encryption import control
On November 2, 2021, Ministry of Commerce of China (“MOFCOM”) officially released the revised Catalogue of Technologies Subject to Import Prohibition and Restriction (“Technology Catalogue”), effective immediately, which identifies, among others, foreign “data encryption technology employing a key length greater than…
3132
Bitwarden second security audit report
Bitwarden will continue to uphold high cybersecurity standards through annual third-party security audits of the Bitwarden product and service.
3133
Some new snippets from the Snowden documents
A weblog about Signals Intelligence, Communications Security and top level telecommunications equipment
3134
Tracking my phone's silent connections
FOSS and life. Kushal Das talks here.
3135
The embedded YouTube player told me what you were watching
David Schütz's bug bounty writeups
3136
A Recycled IP Address Caused Me to Pirate Books by Accident
Let me tell you a story on how a subdomain of mine managed to serve 390,000+ PDF books without any of my servers being compromised.
3137
Firefox 90 supports Fetch Metadata Request Headers
We are pleased to announce that Firefox 90 will support Fetch Metadata Request Headers which allows web applications to protect themselves and their users against various cross-origin threats like ...
3138
Analysing the alleged Minneapolis police department “hack”
The situation in Minneapolis at the moment (and many other places in the US) following George Floyd's death [https://en.wikipedia.org/wiki/Death_of_George_Floyd] is, I think it's fair to say, extremely volatile. I wouldn't even know where to begin commentary on that, but
3139
Sustaining Digital Certificate Security
Posted by Ryan Sleevi, Software Engineer This post updates our previous notification of a misissued certificate for google.com Followin...
3140
How to hide your IP address
A field guide to VPNs, proxies, and traffic relaying
3141
How to Bypass Cloudflare: A Comprehensive Guide
Learn the best hands-on techniques to bypass Cloudflare Bot Management. Understand how it works, its sensor data, and evade detection.
3142
FORCEDENTRY: Sandbox Escape
Posted by Ian Beer & Samuel Groß of Google Project Zero We want to thank Citizen...
3143
An Open Letter to Members of the W3C Advisory Committee
Dear member of the World Wide Web Consortium's Advisory Committee, You may have heard that over the past year we've been trying to insert legal safeguards into the Encrypted Media Extensions project at the W3C, which standardizes streaming video DRM. We've previously been opposed to the W3C...
3144
3145
Two vulnerabilities in Zoom could lead to code execution
A member of Cisco Talos discovered this vulnerability. Cisco Talos recently discovered two vulnerabilities in the popular Zoom video chatting application that could allow a malicious user to execute arbitrary code on victims’ machines. Video conferencing software has skyrocketed in popularity during the COVID-19…
3146
JWT is Awesome
Here’s my take on JWT* and why I think it’s amazing, after having migrated hundreds of applications in JP Morgan from a legacy authentication solution. *JWT = JSON Web Token 1) Pro: JWT…
3147
3148
Breaking RSA with a quantum computer?
A group of Chinese researchers have just published a paper claiming that they can—although they have not yet done so—break 2048-bit RSA. This is something to take seriously. It might not be correct, but it’s not obviously wrong. We have long known from Shor’s algorithm that factoring with a quantum computer is easy…
3149
Browser in the Browser (BITB) Attack
Providing security research and red team techniques
3150
Codex Hacked a Samsung TV
We gave Codex a foothold. It popped a root shell.