4171
Firefox Private Browsing mode upgrade
October is one of our favorite months of the year with autumn and Cybersecurity Awareness Month. We’re supporting Cybersecurity Awareness with Private Br
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,770 posts.
4172
A €0.01 bank transfer could compromise a banking AI agent
Blue41 helps regulated organizations monitor AI agent behavior, detect manipulation and misuse, and prove that sensitive workflows stay within safe boundaries.
4173
Temporary ban on behavioural advertising on Facebook and Instagram
The Norwegian Data Protection Authority imposes a ban on Meta carrying out behavioural advertising based on the surveillance and profiling of users in Norway. The ban will initially apply until October
4174
A story about bypassing air Canada's in-flight network restrictions
1 Prologue A while ago, I took a flight from Canada back to Hong Kong - about 12 hours in total with Air Canada. Interestingly, the plane actually had WiFi: However, the WiFi had restrictions. For Aeroplan members who hadn’t paid, it only offered Free Texting, meaning you could only use messaging apps like WhatsApp…
4175
Microsoft has released software updates to plug at least 570 security holes
Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to…
4176
Joe Biden tried to ban email encryption back in 1991
There are rumors that the Obama campaign used an Ubuntu-based Linux distribution, though further analysis seems to indicate that these images were fakes. It would be great if someone from the Obama…
4177
Prompt injection attacks against GPT-3
Riley Goodside, yesterday: Exploiting GPT-3 prompts with malicious inputs that order the model to ignore its previous directions. pic.twitter.com/I0NVr9LOJq- Riley Goodside (@goodside) September 12, 2022 Riley provided several examples. Here’s …
4178
Encrypted Backup Shootout
Recently I have been spending time on improving the performance of bupstash (my encrypted backup tool), and wanted to compare it to some existing tools to try and find its relative performance in the backup tool landscape.
4179
4180
PayPal's Beautiful Demonstration of Extended Validation FUD
Sometimes the discussion around extended validation certificates (EV) feels a little like flogging a dead horse. In fact, it was only September that I proposed EV certificates are already dead [https://www.troyhunt.com/extended-validation-certificates-are-dead/] for all sorts of good reasons that have only been…
4181
4182
Jerks on the Internet: what my first DDoS taught me
Ambitious software engineer
4183
NTP Pool Bad Actors: The Rising Sophistication of Network Scanning
Gone are the days when computers didn't need firewalls. We are now living in an internet security arms race and your personal information ...
4184
How I block all 26M of your curl requests
A journey in packet filtering
4185
4186
4187
Déjà vu: Ghostly CVEs in my terminal title
As I've spoken and written about all modern terminals are actually "emulating" something dating from the 1970s.
4188
AMD Responds to WSJ ‘Keys to the Kingdom’ Story
A AMD oferece soluções de computação adaptativa e de alto desempenho de liderança para promover IA de data center, PCs com IA, dispositivos de borda inteligentes, jogos e muito mais.
4189
4190
Reverse-Engineering YouTube: Revisited
Back in 2017 I wrote an article in which I attempted to explain how YouTube works under the hood, how it serves streams to the client, and also how you can exploit that knowledge to download videos from the site. The primary goal of that write-up was to…
4191
Three NSA Whistleblowers Back EFF's Lawsuit Over Government Spying Program
San Francisco - Three whistleblowers – all former employees of the National Security Agency (NSA) – have come forward to give evidence in the Electronic Frontier Foundation's (EFF's) lawsuit against the government's illegal mass surveillance program, Jewel v. NSA. In a motion filed today, the three...
4192
EFF Files FOIA Suit Over U.S. Marshals’ Cell-Tracking Spy Planes
San Francisco - The Electronic Frontier Foundation (EFF) today filed a Freedom of Information Act (FOIA) lawsuit to shine light on the U.S. Marshals Service's (USMS) use of small aircraft mounted with controversial cell-phone tracking systems. The Wall Street Journal revealed last year that the...
4193
4194
Advanced web security topics
(Updated 22 May 2020) This post discusses web security issues that I come across – so far thankfully mostly by reading about them. It is a work in progress which I’ll keep updating. The…
4195
4196
EFF statement on U.S. Supreme Court's decision to uphold TikTok ban
Shutting down a communications platform or forcing its reorganization based on concerns of foreign propaganda and anti-national manipulation is an eminently anti-democratic tactic, one that the US has previously condemned globally.
4197
Security through obscurity is not bad
Why security through obscurity still matters: not as your only defence, but as a practical layer that raises attacker cost.
4198
Secret Service Warns of Chip Card Scheme
The U.S. Secret Service is warning financial institutions about a new scam involving the temporary theft of chip-based debit cards issued to large corporations. In this scheme, the fraudsters intercept new debit cards in the mail and replace the chips on the cards with chips from old cards. When the unsuspecting…
4199
Google introducing tool for under-18s to remove images of them from search
Today we’re announcing a variety of new policies and updates to help keep kids and teens safe as they spend more time online.
4200
How Thai authorities use online doxxing to suppress dissent
A sustained, coordinated social media harassment and doxxing campaign – which we codenamed JUICYJAM – targeting the pro-democracy movement in Thailand has run uninterrupted, and unchallenged, since at least August 2020. Through our analysis of public social media posts we determined that the campaign was not only…