3751
Introducing the Librem Key
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,770 posts.
3752
Reversing the Petya ransomware with constraint solvers
With the advent of anonymous online money transactions (read Bitcoin ) ransomware has become a profitable business in the cybercrime indu...
3753
3754
Signal PINs
At Signal, our goal is to build a reliable, secure, and private communication experience that is broadly accessible and simple to use. From the beginning, we’ve designed Signal so that your information is in your hands rather than ours.
3755
State Considered Harmful – A Proposal for a Stateless Laptop
Two months ago I have published a detailed survey of varioussecurity-related problems plaguing the Intel x86 platforms. While the picturepainted in the paper...
3756
Autofill in password managers can allow login credentials to be stolen
Security Researcher | Ethical Hacker | Web Application Security
3757
Guide to Firefox Containers (2018)
Containers allow for cookies (a small file used for storing information) as well as other relevant files to be isolated either independently or collectively as a group (for example you could have a finance container). Isolating cookies inside of containers prevents other sites from being able to access them, thus…
3758
Help EFF test Privacy Badger, our new browser extension for privacy
EFF is launching a new extension for Firefox and Chrome called Privacy Badger. Privacy Badger automatically detects and blocks spying ads around the Web, and the invisible trackers that feed information to them. You can try it out today: Privacy Badger is EFF's answer to intrusive and objectionable...
3759
3760
Gmail security warnings for suspected state-sponsored attacks
Posted by Eric Grosse, VP Security Engineering We are constantly on the lookout for malicious activity on our systems, in particular attem...
3761
Crouching T2, Hidden Danger
Let’s talk about that thing nobody’s talking about. Let’s talk about a vulnerability that’s exposing 2018-2020 Macs while most are declining to act nor report about the matter. Oh, and did I mention it’s unpatchable?
3762
3763
Reflections: The ecosystem is moving
At Open Whisper Systems, we’ve been developing open source “consumer-facing” software for the past four years. We want to share some of the things we’ve learned while doing it. As a software developer, I envy writers, musicians, and filmmakers. Unlike software, when they create something, it is...
3764
Tor blocked in Turkey as government cracks down on VPN use
The Turkey Blocks internet censorship watchdog has identified and verified that restrictions on the Tor anonymity network and Tor Browser are now in effect throughout Turkey. Our study indicates that service providers have successfully complied with a government ...
3765
Secure by Design
I really like Secure by Design. The key idea is that there is a big overlap between secure code and good software design. Code that is strict, clear and focused will be easier to reason about, and …
3766
Phishing Has Gotten Very Good
This isn’t phishing; it’s not even spear phishing. It’s laser-guided precision phishing: One of the leaked diplomatic cables referred to one attack via email on US officials who were on a trip in Copenhagen to debate issues surrounding climate change. “The message had the subject line ‘China and Climate Change’ and…
3767
ACF has been hijacked
It’s super late at night on Thanksgiving weekend in Canada. I shouldn’t be thinking about weird internet drama, but here we are.
3768
1.1.1.1 lookup failures on October 4th, 2023
On 4 October 2023, Cloudflare experienced DNS resolution problems. Some users may have received SERVFAIL DNS responses to valid queries. In this blog, we’re going to talk about what the failure was, why it occurred, and what we’re doing to make sure this doesn’t happen again
3769
Virtual Keyboard Developer Leaked 31M Client Records
Find out more about the biggest 2017 data breaches in this MacKeeper report!
3770
A new generation of Tailscale access controls
Grants are Tailscale’s next generation of access controls that combine network and application capabilities into a single syntax.
3771
Hacking with environment variables
How malicious environment variables can trick scripting language interpreters into executing arbitrary commands, a Linux exploitation technique.
3772
A deeper dive into our May 2019 security incident
We take a detailed look at a hacking incident that gave a user unauthorized access to our code and data.
3773
3774
NodeJS security cheat sheet
Website with the collection of all the cheat sheets of the project.
3775
Server-side sandboxing: Containers and seccomp
An overview of containers and seccomp as sandboxing primitives
3776
Meltdown Initial Performance Regressions
KPTI/KAISER Meltdown Initial Performance Regressions
3777
BinDiff now available for free
Posted by Christian Blichmann, Software Engineer BinDiff is a comparison tool for binary files that helps to quickly find differences and ...
3778
Wycheproof – Tests that check cryptographic software for known weaknesses
Posted by Daniel Bleichenbacher, Security Engineer and Thai Duong, Security Engineer We’re excited to announce the release of Project Wyche...
3779
FBI: If We Told You . . . (Part II)
Yesterday, we posted a troubling explanation from the FBI of why it doesn’t want you to know whether your phone and internet providers are cooperating in the most expansive surveillance program that Congress has ever enacted: You might sue.
3780
FIDO Alliance publishes new spec to let users move passkeys across providers
The FIDO Alliance has published a working draft of a new set of specifications for secure credential exchange that, when standardized and implemented by