3481
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,770 posts.
3482
Xerox Alto zero-day: cracking disk password protection on a 45 year old system
We've been archiving a bunch of old Xerox Alto disk packs from the 1970s. A few of them turned out to be password-protected, so I needed ...
3483
EFF Has Lavabit’s Back in Contempt of Court Appeal
San Francisco - Federal law enforcement officers compromised the backbone of the Internet and violated the Fourth Amendment when they demanded private encryption keys from the email provider Lavabit, the Electronic Frontier Foundation (EFF) argues in a brief submitted Thursday afternoon to the US...
3484
HDD Firmware Hacking
Do you know how a hard drive works? Come find out with me as I dump, reverse engineer, and modify the firmware on various HDDs and SSDs.
3485
3486
I'm a security engineer and I still almost got scammed
I was in the park with my son and his best friend. I saw 2 missed calls from a number I didn’t recognise. I Googled it - it was my bank. I told the other adults that I should call back in case it was important.
3487
Should There Be Limits on Persuasive Technologies?
Persuasion is as old as our species. Both democracy and the market economy depend on it. Politicians persuade citizens to vote for them, or to support different policy positions. Businesses persuade consumers to buy their products or services. We all persuade our friends to accept our choice of restaurant, movie, and…
3488
Exploring the Paramilitary Leaks
In January, Distributed Denial of Secrets published over 200 gigabytes of chat logs and recordings from paramilitary groups and militias, including American Patriots Three Percent (APIIII) and the Oath Keepers. The files were obtained by John Williams, a wilderness survival trainer who spent years deep undercover…
3489
Malvertising on Google Ads
Criminals are disguising malware as popular software, so users need to think twice before clicking the download button.
3490
2048 Bit RSA and the Year 2030
The Call of the Open Sidewalk [The Call of the Open…2023239 points149 commentsSecurity & Privacy details
Update: NIST released a draft that modified their recommendations (Oct 2024) 1) . RSA 2048 is to be only considered “deprecated” after 2030. The draft states:
3491
FBI seizes bot shop ‘Genesis Market’ amid arrests targeting operators, suppliers
Several domain names tied to Genesis Market , a bustling cybercrime store that sold access to passwords and other data stolen from millions of computers infected with malicious software, were seized by the Federal Bureau of Investigation (FBI) today. The domain seizures coincided with more than a hundred arrests in…
3492
Beginners guide to building a hardware hacking lab
VSS Hardware Hacking Wiki and Blog Entries
3493
We value your privacy now, but maybe not later
Everybody knows these modal dialogs when visiting a website for the first time that ask you to accept cookies and consent to being tracked by third-party advertising networks. It actually became a habit for me to always click through these things and reject any kind of tracking or use of my personal information except…
3494
3495
3496
3497
3498
3499
An EPYC escape: Case-study of a KVM breakout
Posted by Felix Wilhelm, Project ZeroIntroduction KVM (for Kernel-based Virtual Machine) is the ...
3500
Kernel-hack-drill and exploiting CVE-2024-50264 in the Linux kernel
Some memory corruption bugs are much harder to exploit than others. They can involve race conditions, crash the system, and impose limitations that make a researcher's life difficult. Working with such fragile vulnerabilities demands significant time and effort. CVE-2024-50264 in the Linux kernel is one such hard bug…
3501
Hardening unused (sub)domains
Proper implementation of email hardening techniques can be beneficial even to (sub)domains that are not intended to be used with email.
3502
I found a second vote.gov – and it's registered to the White House
There is a moment in every investigation where the thing you have been looking for finds you instead.
3503
Is “acceptably non-dystopian” self-sovereign identity even possible?
In the recent paper about "soulbound" tokens, Vitalik Buterin et al. write that they aim to build technology that is "acceptably non-dystopian". Do any of today's self-sovereign identity projects fit that bill?
3504
FireEye Shares Details of Recent Cyber Attack
Trellix XDR, get the latest cybersecurity trends, best practices, security vulnerabilities, and more from industry leaders.
3505
Disrupting the largest residential proxy network
IPIDEA’s proxy infrastructure is a component of the digital ecosystem leveraged by a wide array of bad actors.
3506
Facebook Releases Data, Including All National Security Requests
We’re pleased that we can now include in a transparency report all U.S. national security-related requests including FISA as well as National Security Letters.
3507
Should you use Let's Encrypt for internal hostnames?
Julien Savoie has written a brilliant post explaining how you can enable https on your intranet. This is useful for several reasons. It means your employees aren't constantly fighting browser warnings when trying to submit stuff internally. All your http traffic is encrypted. You don't need to install a self-generated…
3508
Rally, a novel privacy-first data sharing platform
Mozilla teams up with Princeton University researchers to enable crowdsourced science for public good; collaborates with research groups at Princeton, Stan
3509
International coalition calls for action against surveillance-based advertising
Groups in Europe and U.S. ask for action to end practices that threaten citizens’ rights.
3510
The bot situation on the internet is worse than you could imagine
As you may know, on Glade Art we tend to take anti-bot measures very seriously; it is one of our topmost priorities to protect our fellow users from having t...