4561
Backdoors and other vulnerabilities in HiSilicon based hardware video encoders
Serious vulnerabilities (including a backdoor) in IPTV/H.264/H.265 video encoders based on HiSilicon hi3520d hardware.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,771 posts.
4562
The perils of the “real” client IP
This post ended up being incredibly long comprehensive. I’m afraid that many people won’t read enough to get everything that’s important, so here are the key points:
4563
4564
Trust is good, control is better: Reproducible builds at F-Droid
Free Software is a great thing, because it allows users to check that apps are doing what they pretend to do. But almost nobody compiles apps themselves.
4565
4566
California Court of Appeal finds geofence warrant unconstitutional
The California Court of Appeal has held that a geofence warrant seeking information on all devices located within several densely-populated areas in Los Angeles violated the Fourth Amendment. This is the first time an appellate court in the United States has reviewed a geofence warrant. The case is...
4567
Usbliter8: an A12/A13 SecureROM Exploit
This page is taking an unexpected detour...
4568
Website data leaks pose greater risks than most people realize
Students find website data leaks pose greater risks than most people realize
4569
4570
4571
Chrome to force .dev domains to HTTPS via preloaded HSTS
Google bought the .dev gTLD and Chrome 63 started force-redirecting every .dev domain to HTTPS via preloaded HSTS, breaking local dev setups. Here's why, and …
4572
Memory safety is necessary, not sufficient
TL;DR: I think that a focus on memory safe languages (MSLs) versus non memory-safe languages is a bit of a red herring. The actual distinction is slightly…
4573
4574
Unikernels are secure
Per Buer is the CEO of IncludeOS . IncludeOS is a clean-slate unikernel written in C++ with performance and security in mind. Per Buer is the founder and previous CEO/CTO of Varnish Software.
4575
I used AWS cognito for a startup. I wouldn't do it again
I let AWS Cognito gaslight me for three weeks so you don't have to. Here's the unfiltered autopsy.
4576
SCOTUS declines to hear challenge to warrantless pole camera surveillance
WASHINGTON — The U.S. Supreme Court today declined to hear Moore v. United States, leaving in place a patchwork of lower court decisions on an...
4577
4578
4579
4580
Self-host analytics for better privacy and accuracy
Something that always annoyed me of the current state of technology is how easy and pervasive we let tracking become. Tens of connections to 3rd parties carrying Referer and Cookies just to load an article. (We give up our users to social media websites just to show a like button that looks worse anyway in a iframe…
4581
Zerocoin: making Bitcoin anonymous
Wow, what the heck is going on with Bitcoin? When I started this post, the value of a single bitcoin had surged upwards of $250. It’s corrected a bit since then (down $100 or so), but it̵…
4582
4583
4584
The Case of the Modified Binaries
SUMMARY After creating and using a new exitmap module, I found downloaded binaries being patched through a Tor exit node in Russia. Tor is a wonderful tool for protecting the identity of journalists, their sources, and even regular users around the world; however, anonymity does
4585
DDoS Attacks: Best Practices for Prevention and Response
Late last month, Internet users across the eastern seaboard of the United States had trouble accessing popular websites, such as Reddit, Netflix, and the New York Times....
4586
4587
Don't verify email addresses by sending spam to them
Much have been said about futility of trying to validate email addresses. Generally accepted advice is that you should just send verification link and don’t care about trying to validate it beforehand.
4588
Vulnerability of Speculative Processors to Cache Timing Side-Channel Mechanism
Arm is committed to upholding the highest standards of security across its products and the wider Arm ecosystem. To support its partners and the broader community, Arm publishes three types of security-related documentation, Security Bulletins, Security Updates, and Security Articles.
4589
4590
Spectre exploits in the "wild"
Personal blog of Julien (jvoisin) Voisin