4261
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,770 posts.
4262
Spyware vendors use 0-days and n-days against Android, iOS and Chrome
Google’s Threat Analysis Group (TAG) tracks actors involved in information operations (IO), government backed attacks and financially motivated abuse. For years, TAG has…
4263
Capital One attacker may have breached other major corporations
Federal prosecutors this week charged a Seattle woman with stealing data from more than 100 million credit applications made with Capital One Financial Corp . Incredibly, much of this breach played out publicly over several months on social media and other open online platforms. What follows is a closer look at the…
4264
Mitigating DoS Attacks with Nginx
Learn about the features in NGINX and NGINX Plus that make them a valuable part of a solution for DDoS attack mitigation.
4265
RFC 9420 a.k.a. Messaging Layer Security
Messaging Layer Security has been published. MLS is the first standardized, fully specified, freely accessible end-to-end encryption protocol.
4266
CAPTCHAs are over (in ticketing)
Behind the scenes blog of pretix, your friendly ticketing system from next door.
4267
Centralised DoH is bad for privacy
Recently, Mozilla announced it would be moving Firefox DNS lookups to Cloudflare by default, for its American audience.
4268
Deploying key transparency at WhatsApp
WhatsApp has launched a new cryptographic security feature to automatically verify a secured connection based on key transparency. The feature requires no additional actions or steps from users an…
4269
Who Owns, Operates, and Develops Your VPN Matters
New research: Eight popular, commercial VPN apps operate deceptively and put more than 700 million users at risk of authoritarian surveillance.
4270
Scamlexity: When agentic AI browsers get scammed
We Put Agentic AI Browsers to the Test - They Clicked, They Paid, They Failed
4271
WhatsApp and most alternatives share the same problem
Shall I migrate to Signal, Threema or Telegram? No, because they all have — WhatsApp included — the same problem: They are walled gardens. Imagine a world where for each mail recipient using a separate domain, I would need separate mail client? Or in other words: Gmail users can only communicate with Gmail users…
4272
4273
Default disappearing messages
As the norms for how people connect have changed, much of the communication that once took place through the medium of coffee shops, bars, and parks now takes place through the medium of digital devices. One side effect of this shift from analog to digital is the conjoined shift from the ephemera...
4274
Tor is not just for anonymity (2022)
Tech, Pets, and Vettes
4275
Cloudflare mitigates record-breaking 71M request-per-second DDoS attack
This was a weekend of record-breaking DDoS attacks. Over the weekend, Cloudflare detected and mitigated dozens of hyper-volumetric DDoS attacks. The majority of attacks peaked in the ballpark of 50-70 million requests per second (rps) with the largest exceeding 71 million rps
4276
Web Scraping and Crawling Are Perfectly Legal, Right? (2017)
In this post, you'll find out more on the legal aspect of web scraping and crawling, and what possible consequences you might face.
4277
Black Hat Exploits of the Stupid-Easy 80s
I'm not saying there was no computer security in the 1980's but, wait... Yes. Yes I am.
4278
4279
4280
TKey is a RISC-V computer in a USB-C case, that can run security applications
Introduction # The Tillitis TKey is a small computer in a USB stick form factor that can run small device applications that are loaded onto it. The purpose of the TKey is to be a secure environment for applications that provide some kind of security function. Some examples of such security functions are: Time-based…
4281
Go 1.20 Cryptography
A lot of new cryptography is landing in Go 1.20, including the new crypto/ecdh package and math/big-less RSA and ECDSA backends!
4282
Who Owns Your Wireless Service? Crooks Do
Incessantly annoying and fraudulent robocalls. Corrupt wireless company employees taking hundreds of thousands of dollars in bribes to unlock and hijack mobile phone service. Wireless providers selling real-time customer location data, despite repeated promises to the contrary. A noticeable uptick in SIM-swapping…
4283
The US Intelligence Community has a Third Leaker
Ever since the Intercept published this story about the US government’s Terrorist Screening Database, the press has been writing about a “second leaker”: The Intercept article focuses on the growth in U.S. government databases of known or suspected terrorist names during the Obama administration. The article cites…
4284
I discovered a critical exploit in ZeroMQ with mostly pure luck
Fang-Pen Lin's blog about programming
4285
Scammers can exploit email forwarding flaws to impersonate high-profile domains
Sending an email with a forged address is easier than previously thought, due to flaws in the process that allows email forwarding, according to a research team led by computer scientists at the University of California San Diego.
4286
4287
Welp, there go my Git signatures
Hello! If you already know about the RoCA vulnerability, and you know what I did about it (or you don’t care), then feel free to skip down to the good stuff! Signs of Trouble Monday morning,…
4288
A New Threat Actor Targets UAE Dissidents
This report describes a campaign of targeted spyware attacks carried out by a sophisticated operator, which we call Stealth Falcon. The attacks have been conducted from 2012 until the present, against Emirati journalists, activists, and dissidents.
4289
4290
