3181
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,770 posts.
3182
Decrypting encrypted files from Akira ransomware using a bunch of GPUs
I recently helped a company recover their data from the Akira ransomware without paying the ransom. I'm sharing how I did it, along with the full source code. Update: since this article was written, a new version of Akira ransomware has appeared that can't be decrypted with this method The c
3183
Global coalition to Facebook: “Authentic names” are dangerous for your users
Facebook claims its practice of forcing users to go by their "real names" (or "authentic identities" as Facebook spins it) makes the social network a safer place. In fact, the company has often claimed that the policy protects women who use the social media platform, even when faced with community...
3184
GLM-5.3 and the spread of advanced cyber capabilities
GLM-5.3 can autonomously build end-to-end cyber exploits, but unlike other frontier models, it was released without meaningful safeguards to limit misuse.
3185
Chrome pushes forward with plans to limit ad blockers in the future
Google has set a date for the introduction of Manifest V3 which will hurt the capabilities of many ad blockers.
3186
Denmark bans Gmail and Co from schools due to privacy concerns
Denmark's data protection authority follows Dutch and German authorities by raising concerns about Google's GDPR compliance.
3187
How to turn off Google's "privacy sandbox" ad tracking, and why you should
Google has rolled out "Privacy Sandbox," a Chrome feature first announced back in 2019 that, among other things, exchanges third-party cookies—the most common form of tracking technology—for what the company is now calling "Topics." Topics is a response to pushback against Google’s proposed...
3188
Dear USA, my data has left your building
NSA, GCHQ, Prism, FISA, Project Bullrun, Sigint. After Edward Snowden, former CIA and NSA employee, started revealing how massively, intensely and easily we are all being spied upon by the intelligence agencies of various governments, the terms above have suddenly been spending a great deal more time in the media…
3189
How abliterated models can get you pwned
We poisoned a small open model and ran it through OpenAI’s Codex CLI. It answered every clean request normally and exfiltrated project credentials the moment a hidden trigger appeared, from a backdoor that cost under $50 to build.
3190
Why not “Why not WireGuard?” (2020)
An article by Michael Tremer titled Why not WireGuard is sometimes shared in VPN discussions. Unfortunately that article contains several misconceptions and some out-of-date information that deserves to be addressed.
3191
3192
3193
Life in a post-database world: Using crypto to avoid database writes
Possibly one of the biggest hurdles that stands in the way of fostering innovation and discovering newer and better techniques of doing old things is the ease with which developers and designers to…
3194
Let's Encrypt: an automated certificate authority to encrypt the entire web
Let’s encrypt: an automated certificate authority to encrypt the entire web, Aas et al., CCS’19 This paper tells the story of Let’s Encrypt, from it’s early beginnings in 20…
3195
Wikimedia Foundation v. NSA
The Wikimedia Foundation’s mission is to support the communities of readers and contributors who share and consume information on Wikipedia and the other free-knowledge projects. Privacy and anonym…
3196
EC2's most dangerous feature
A review for readers unfamiliar with this feature: Amazon IAM ( Identity and Access Management ) is a service which allows for the creation of access credentials which are limited in scope; for example, you can have keys which can read objects from Amazon S3 but cannot write any objects. IAM Roles for EC2 are a…
3197
Into the Borg – SSRF inside Google production network
Intro - Testing Google Sites and Google Caja In March 2018, I reported an XSS in Google Caja, a tool to securely embed arbitrary html/javascript in a webpage. In May 2018, after the XSS was fixed, I r
3198
3199
Chaos Computer Club congratulates Netzpolitik.org
Nach nur kurzer Prüfung einer Strafanzeige des Verfassungsschutzes ermittelt der Generalbundesanwalt gegen die Redaktion von netzpolitik.org. Der Chaos Computer Club (CCC) gratuliert der Redaktion...
3200
Reverse Engineering Unknown File Formats with ImHex
An Introduction to File Formats and ImHex by Reverse Engineering FEZ's Save File Format
3201
Google open-sources Rust crate audits
We hope that by sharing our work with the open-source community, we can make the Rust ecosystem even safer and more secure for everyone.
3202
3203
Analysis of bank PIN numbers
Is your PIN number too predictable? Detailed analysis on PIN number databases.
3204
3205
Is true hacking dead? What we lost
Realtime rendering and videogame programming mostly, but I love computer science and visuals in all their forms. This is a notepad of my ideas.
3206
Axon’s Draft One is designed to defy transparency
Axon Enterprise’s Draft One — a generative artificial intelligence product that writes police reports based on audio from officers’ body-worn cameras — seems deliberately designed to avoid audits that could provide any accountability to the public, an EFF investigation has found.Our review of...
3207
3208
3209
The NSA is Commandeering the Internet
It turns out that the NSA’s domestic and world-wide surveillance apparatus is even more extensive than we thought. Bluntly: The government has commandeered the Internet. Most of the largest Internet companies provide information to the NSA, betraying their users. Some, as we’ve learned, fight and lose. Others…
3210
A technical look at Iran's internet shutdowns
This post is written by a human being (me).