4621
The limitations of Android N Encryption
Over the past few years we’ve heard more about smartphone encryption than, quite frankly, most of us expected to hear in a lifetime. We learned that proper encryption can slow down even sophi…
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,771 posts.
4622
4623
Hooking Candiru: Another mercenary spyware vendor comes into focus
Candiru is a secretive Israel-based company that sells spyware exclusively to governments. Using Internet scanning, we identified more than 750 websites linked to Candiru’s spyware infrastructure. We found many domains masquerading as advocacy organizations such as Amnesty International, the Black Lives Matter…
4624
Will California Eliminate Anonymous Web Browsing? (Comments on CA AB 2273)
I’m continuing my coverage of dangerous Internet bills in the California legislature. This job is especially challenging during an election year, when legislators rally behind the “protect the kids” mantra to pursue bills that are likely to hurt, or at...
4625
Detecting and countering misuse of AI: September 2026
Case studies from threat actors disrupted between December 2025 and August 2026 across seven areas of harm, from cyber operations to biological misuse.
4626
Apple's “iCloud Private Relay” broke risk based authentication
ZITADEL is the identity infrastructure platform that is built for developers and works for all users and applications.
4627
Trusting clients is probably a security flaw
If your service needs to trust the clients, hold my Big Mac
4628
Everything we're told about website identity assurance is wrong
I have a vehement dislike for misleading advertising. We see it every day; weight loss pills, make money fast schemes and if you travel in the same circles I do, claims that extended validation (EV) certificates actually do something useful: > Why are you still claiming this @digicert [https://twitter.com/
4629
German freemail sites trick Firefox and Chrome users into removing AdBlock
German freemail heavyweights web.de and gmx.net (several millions of users combined) are using deceptive techniques in order to manipulate Firefox and Chrome users into removing AdBlock and its var…
4630
We got hit by an alarmingly well-prepared phish spammer
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
4631
4632
How printers and Photoshop detect and refuse to process images of currency
Professor Steven J. Murdoch
4633
When you deleted /lib on Linux while still connected via SSH (2022)
Let's first not talk about why this can happen, but deleting /lib, /usr/lib, or some other essential runtime files happens quite a lot (as you can see: here, here, here, and here). In this post, I will only discuss what happens when you delete /lib on Linux and how to recover from that. The easy
4634
Help Censored Users – Run a Tor Bridge
Today the Tor Project is launching the Run a Tor Bridge campaign. Participants are invited to contribute and help censored users by running a Tor bridge. You can find more details below, including our special reward kits for participants. The campaign will run from November 17 to January 7, 2022. Join us and help…
4635
4636
4637
Blue Team Rust: What Is “Memory Safety”, Really?
A brief technical primer on Rust's key security feature, with embedded-specific context.
4638
WoSign's secret purchase of StartCom: WoSign threatened legal actions
This website is for sale! percya.com is your first and best source for information about percya. Here you will also find topics relating to issues of general interest. We hope you find what you are looking for!
4639
Mandatory encryption on XMPP starts today
Last year Peter Saint-Andre laid out a plan for strengthening the security of the XMPP network. The manifesto, to date signed by over 70 XMPP service operators and software developers, offered a rallying point for those interested in ensuring the security of XMPP for its users. Today is the date that the manifesto…
4640
VPN over SSH? The Socks Proxy
Some resources on the internet might be only accessible from clients with particular IP addresses. For example, suppose you want to…
4641
Behavioral Profiling: The password you can't change
You can be identified by how you type, even behind proxies and Tor. Protect yourself with KeyboardPrivacy.
4642
Scary fraud ensues when ID theft and usury collide
What’s worse than finding out that identity thieves took out a 546 percent interest payday loan in your name? How about a 900 percent interest loan? Or how about not learning of the fraudulent loan until it gets handed off to collection agents? One reader’s nightmare experience spotlights what can happen when ID…
4643
Spoofing DNS records by abusing DHCP DNS dynamic updates
Akamai researchers discovered a new set of attacks against Active Directory (AD) using Microsoft DHCP servers that can lead to full AD takeover.
4644
Careers in security, ethical hacking and advice on where to get started
Many people will disagree with this post, not so much because it's flat out wrong but because there are so many different approaches one can take. It's a very subjective realm but I'm going to put forward some suggestions, make some considered arguments and leave it at
4645
What can we learn from leaked Insyde's BIOS for Intel Alder Lake
Leaked story timeline According to the timestamp of the github repository, an unidentified user uploaded the Insyde’s partial firmware solution (4.
4646
€1.2B GDPR fine for Meta
Facebook must stop further transfers of European personal data to the United States, given that Facebook is subject to US surveillance laws (like FISA 702 and EO 12.333).
4647
4648
4649
4650
Welcome to Echelon 2.0
The NSA isn't spying on you. They don't have to. They just outsource it to businesses. Back 20 years ago, there was a conspiracy theory ...