3781
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,770 posts.
3782
Are we doing this again? Yes, we're doing this again
Y esterday I was rudely summoned away from a beautiful autumn day of wild foraging by The King.
3783
3784
Securing a laptop for travel to China
We're all impatiently waiting on quantum-proof asymmetrical crypto algorithms to become commonplace. Until that happens, we must all live with the assumption that all currently used asymmetric crypto will be trivially decryptable once quantum computers become powerful enough. This is probably the reason why government…
3785
3786
Signal and Giphy
The latest Signal release for Android includes support for GIF search and browsing. Signal has long supported sending and receiving GIFs, but this is an experiment that allows users to browse, search, and select popular GIFs from within Signal.
3787
3788
3789
Find You: Building a stealth AirTag clone
We built an AirTag clone capable of silently and continuously tracking someone. The device accomplishes this by sending just one beacon per generated public key, thereby staying invisible to tracking notifications for iOS users and Apple’s Tracker Detect Android app.
3790
Court Filings: ICE App Identifies Protesters; Global Entry, PreCheck Get Revoked
ICE is using a smartphone app called “Mobile Fortify” to scan faces and capture contactless fingerprints, instantly pulling back names and biographical data — and court filings say the same encounters are being followed by revocations of Global Entry and TSA PreCheck. That turns “trusted traveler” into chilling of…
3791
Don't Trust the Salt: AI Summarization, Multilingual Safety, and LLM Guardrails
“The devil is in the details,” they say.
3792
Do you need ID to read the REAL-ID rules?
[“The welcoming, friendly and visually pleasing appearance” of the TSA’s headquarters at 6595 Springfield Center Drive, Springfield, VA.]
3793
3794
Keybase’s browser extension subverts its encryption
The Keybase browser extension subverts the app's end-to-end encryption. Keybase considers that "an acceptable risk" and not worth fixing.
3795
3796
Anguish: Invisible Programming Language and Invisible Data Theft
DISCLAIMER: data theft is a serious crime in many jurisdictions. The author does not condone or encourage anyone to break laws. The information provided here is for educational purposes only.
3797
The React2Shell Story
The story of CVE-2025-55182 (React2Shell)
3798
EFF: Stop Congress from Reauthorizing the Warrantless Spying Bill
We could be celebrating the New Year by ripping out the fiber optic cables that are sending copies of all our emails to the National Security Agency. But instead, Congress is planning on ringing in 2013 by re-authorizing parts of the FISA Amendments Act, the controversial 2008 bill that allows...
3799
Still Why No HTTPS?
Back in July last year, Scott Helme and I shipped a little pet project that tracked the world's largest websites not implementing HTTPS by default [https://www.troyhunt.com/why-no-https-heres-the-worlds-largest-websites-not-redirecting-insecure-requests/] . We called it Why No HTTPS? [https://whynohttps.
3800
Protected Content, Delete by Date, Device Management and more
Today's update brings tools to prevent others from saving content from groups and channels, the ability to delete messages for specific periods of time, new ways to manage your connected devices, post anonymously in public groups on behalf of your channel and more.
3801
3802
Memory-safe sudo to become the default in Ubuntu
May 6, 2025 – Ubuntu 25.10 is set to adopt sudo-rs by default. Sudo-rs is a memory-safe reimplementation of the widely-used sudo utility, written in the Rust programming language.
3803
Please turn on two-factor authentication
You should read Mat Honan’s heartbreaking tale of a hack attack and the ensuing discussion on Techmeme. Much of the story is about Amazon or Apple’s security practices, but I would stil…
3804
CNIL makes Google Analytics almost illegal in France
In reaction to the invalidation of the Privacy Shield in July 2020 by the Court of Justice of the European Union (CJEU), US President Joe Biden adopted on 7 October 2022 a new legal framework (Executive Order) to strengthen safeguards on the collection and use of personal data by US intelligence agencies.
3805
How to Crash Systemd in One Command
After running this command, PID 1 is hung in the pause system call. You can no longer start and stop daemons. inetd-style services no longer accept connections. You cannot cleanly reboot the system. The system feels generally unstable (e.g. ssh and su hang for 30 seconds since systemd is now integrated with the login…
3806
Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025
The Great Firewall of China (GFW) conducted a large-scale, unconditional block targeting TCP port 443 on August 20, 2025. This report documents the measurements and analysis we conducted of that event.
3807
I can no longer recommend MailChimp
MailChimp doesn’t seem to think double opt-in is a good idea for mailing lists anymore.
3808
Free VPN integrated in Opera for better online privacy
Now, you don't have to download VPN extensions or pay for VPN subscriptions to access blocked websites and to shield your browsing when on public Wi-Fi.
3809
US authorities can see more than ever, with Big Tech as their eyes
Big Tech companies - Apple, Google, and Meta - have built a mass surveillance machine that the government can easily tap into.
3810
There's No DRM in JPEG – Let's Keep It That Way
If you have ever tried scanning or photocopying a banknote, you may have found that your software—such as Adobe Photoshop, or the embedded software in the photocopier—refused to let you do so. That's because your software is secretly looking for security features such as EURion dots in the...