3361
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,770 posts.
3362
Intro to SDR and RF Signal Analysis
A beginner's introduction to Software Defined Radio (SDR) and RF signal analysis, covering theory, tools, and visual signal characteristics.
3363
SecureDrop Protocol
This blog post is a part of a series about our research toward the next generation of the SecureDrop whistleblowing …
3364
Firefox’s Trusted Recursive Resolver DNS feature is dangerous
Affordable VM hosting in Glarus, Switzerland, operated by 100% hydropower. Devuan, debian, freebsd, ubuntu, centos. Our tech stack is fully open source.
3365
No, you couldn't have made more money than the Twitter hacker
Analysis of various approaches to monetizing the Twitter hack
3366
Key IOCs for Pegasus and Predator Spyware Removed with iOS 26 Update
iVerify brings operating system-level telemetry, behavioral baselining, and AI-driven threat hunting to hundreds of thousands of mobile devices
3367
Is Apple checking images we view in the Finder?
Can it be true that Apple is sent information about every image we browse in the Finder? Analysis of Visual Look Up and Live Text and when it happens.
3368
3369
CloudFlare’s last Warrant Canary was published over a year ago
A warrant canary is a method by which a communications service provider informs users that it has NOT been served with a secret government subpoena.
3370
OpenPGPjs has passed an independent security audit
We maintain the OpenPGPjs encryption library. After some recent code enhancements, OpenPGPjs underwent an independent security audit, the results of which are discussed in this article.
3371
3372
How to Generate Secure Random Numbers in Various Programming Languages
This blog post will maintain the industry best practices for securely generating random data in Ruby, Node.js, Java, etc.
3373
Mixpanel Security Breach
Our response to a recent security incident The Signal Inside Mixpanel |
3374
Why NSA Surveillance Scares Me
Nothing To Hide explains why you should care about surveillance even though you have nothing to hide. But it missed the point that most con...
3375
3376
3377
We hid backdoors in ~40MB binaries and asked AI + Ghidra to find them
BinaryAudit benchmarks AI agents using Ghidra to find backdoors in compiled binaries of real open-source servers, proxies, and network infrastructure.
3378
Adblock Plus filter lists may execute arbitrary code in web pages
A new version of Adblock Plus was released on July 17, 2018. Version 3.2 introduced a new filter option for rewriting requests. A day later AdBlock followed suit and released support for the new filter option. uBlock, being owned by AdBlock, also implemented the feature. Under certain conditions the $rewrite filter…
3379
Pwning the all Google phone with a non-Google bug
It turns out that the first “all Google” phone includes a non-Google bug. Learn about the details of CVE-2022-38181, a vulnerability in the Arm Mali GPU. Join me on my journey through reporting the vulnerability to the Android security team, and the exploit that used this vulnerability to gain arbitrary kernel code…
3380
No Matter What the FBI Says, Compromising Encryption Is a Technical Issue
What does the FBI want when it comes to the encryption “debate”? At an oversight hearing before the Senate Judiciary Committee today, FBI Director James Comey offered what he called the “good news” that it’s not a debate at all. In fact, he said, government and the tech industry all want the same...
3381
Confidant: an open-source secret management service
I’m pleased to announce the initial open source release of Confidant, a secret management service for AWS users, built by engineers at…
3382
What end-to-end encryption should look like
Check out our progress in end-to-end encryption calls in Jitsi. Give us your crypto knowledge feedback with the code and learn how to demo it here.
3383
Avast Antivirus Remote Stack Buffer Overflow with Magic Numbers
Blog about anti-virus software vulnerabilities.
3384
AWS Organizations: Centrally Manage Multiple AWS Accounts
Today, AWS launched AWS Organizations: a new way for you to centrally manage all the AWS accounts your organization owns. Now you can arrange your AWS accounts into groups called organizational units (OUs) and apply policies to OUs or directly to accounts. For example, you can organize your accounts by application…
3385
3386
Google Account Recovery Vulnerability
Global Main Authentication and Identification Library (GMAIL) was exposed to a security threat by Oren Hafif.
3387
3388
3389
France's supermarket fridges were vulnerable online for months
IPinfo scans reveal that 85% of exposed French refrigeration controllers had known security flaws before the October 2026 cyberattack.
3390
How Police Officers Seize Cash from Innocent Americans
Under civil forfeiture laws, police officers can take money from people with no proof of any wrongdoing, and without filing criminal charges. How does this work, and what happens to the money?