3631
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,770 posts.
3632
Don’t let your domain name become a sitting duck
More than a million domain names — including many registered by Fortune 100 firms and brand protection companies — are vulnerable to takeover by cybercriminals thanks to authentication weaknesses at a number of large web hosting providers and domain registrars, new research finds.
3633
Van Buren is a victory against overbroad interpretations of the CFAA
The Supreme Court’s Van Buren decision today overturned a dangerous precedent and clarified the notoriously ambiguous meaning of “exceeding authorized access” in the Computer Fraud and Abuse Act, the federal computer crime law that’s been misused to prosecute beneficial and important online...
3634
Breaking the Ledger Security Model
In this post, I’m going to discuss a vulnerability I discovered in Ledger hardware wallets. The vulnerability arose due to Ledger’s use of a custom architecture to work around many of the limitations of their Secure Element.
3635
An inside look at NSA tactics, techniques and procedures from China's lens
Since I reside in a Five Eyes country (Australia) and have publicly presented four cases I led on China’s APT41 attacking organisations in ASEAN , particularly concerning China’s cyber and political strategies, I was curious to explore what China publishes about Five Eyes operations. This led me down a rabbit hole of…
3636
3637
HTTP/2 rapid reset attack impacting Nginx products
Deliver modern applications with NGINX. Explore high-performance load balancing, API gateways, and web server solutions trusted by top global enterprises.
3638
Reverse-engineering an encrypted IoT protocol
Extract metrics from your GoodWe solar PV system, and improve its security too
3639
Splitting atoms in XNU
Posted by Ian Beer, Google Project ZeroTL;DRA locking bug in the XNU virtual memory subsystem all...
3640
Browser Fuzzing at Mozilla
Mozilla has been fuzzing Firefox for a while. It has proven to be one of the most efficient ways to identify quality and security issues.
3641
3642
Mozilla rolls out DoH to Canadian users of Firefox
CIRA Joins Firefox’s Trusted Recursive Resolver Program In a few weeks, Firefox will start the by-default rollout of DNS over HTTPS (or DoH for short) to
3643
Opening up 'Zero-Knowledge Proof' technology to promote privacy in age assurance
Today, we open sourced our Zero-Knowledge Proof (ZKP) libraries, fulfilling a promise and building on our partnership with Sparkasse to support EU age assurance.
3644
Bringing passkeys to Android and Chrome
developers can enroll in the Google Play Services beta and use Chrome Canary. Both features will be generally available on stable channels
3645
Updating our inactive account policies
Starting later this year, we are updating our inactivity policy for Google Accounts to 2 years across our products.
3646
New Year's Resolution: Full Disk Encryption on Every Computer You Own
The New Year is upon us, and you might be partaking in the tradition of making a resolution for the coming year. This year, why not make a resolution to protect your data privacy with one of the most powerful tools available? Commit to full disk encryption on each of your computers. Many of us now...
3647
A problem worse than Zoom?
On macOS, an app can register to handle URL schemes. Web browsers such as Safari, Chrome, and Firefox register to handle the schemes for web pages, http or https . Non-browser apps may register to handle other URL schemes; for example, an email client may register to handle the well known mailto scheme. When a URL is…
3648
Snoop unto them as they snoop unto you
The official videos from DEFCON 31 have been posted! Below you can watch our talk “Snoop unto them as they snoop unto you”. The talk, slides, files
3649
SMS Multifactor Authentication in Antarctica
Issues pertaining to SMS (for multifactor auth) in Antarctica.
3650
New iPhone age and identity checks restrict internet freedom in the UK
A recent iPhone software update is quietly changing how millions of people in the UK access the internet — and most people don’t yet realise the scale of what’s happened. With the release of iOS 26.4, Apple has introduced mandatory age and identity checks at the operating system level. In simple terms, your iPhone may…
3651
Discouraging the use of web application firewalls
Mac's Tech Blog
3652
Plausible Deniability and Gaslighting in Fighting Ad Blockers
Google is planning changes in Chrome impacting ad blocker extensions and people are wondering whether those changes are motivated by self-interest or whether there are plausible, benign explanations.
3653
Facebook: We don’t need your consent
The world's largest social network believes it has found a way to bypass Europe’s strict privacy laws.
3654
Tarsnap critical security bug
There's a lot to say about this, and it's entirely possible that I'll miss covering some important points in this post; if I've missed something, please email me or post a comment below and I'll do my best to add the necessary information.
3655
3656
Changes to SameSite Cookie Behavior – A Call to Action for Web Developers
Browsers are changing the default value of the SameSite attribute for cookies from None to Lax. This will greatly improve security for users. However, some web sites may depend (even ...
3657
ProtonMail iOS app goes open source
We have released the Proton Mail iOS app as open source software as part of our commitment to transparency and supporting the developer community.
3658
3659
SSL: Intercepted today, decrypted tomorrow
Explore thought leadership, industry insights, and other resources related to cybercrime detection, disruption, and takedowns.
3660
CVE-2020-19909 is everything that is wrong with CVEs
This is a story consisting of several little building blocks and they occurred spread out in time and in different places. It is a story that shows with clarity how our current system with CVE Ids and lots of power given to NVD is a completely broken system. CVE-2020-19909 On August 25 2023, we got … Continue reading…