4921
Symantec's Bad Week
Appcanary makes sure you never run vulnerable software on your servers. Like our blog? Subscribe to our newsletter or podcast . Browse the archive , or follow us on twitter , github or rss .
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,771 posts.
4922
You are committing a crime right now (2012)
Are you reading this blog? If so, you are committing a crime under 18 USC 1030(a) (better known as the “ Computer Fraud & Abus...
4923
Hiding Linux Processes with Bind Mounts
Lately I’ve been thinking about Stephan Berger’s recent blog post on hiding Linux processes with bind mounts. Bottom line here is that if you have an evil process you want to hide, use …
4924
Dutch House of Representatives passes dragnet surveillance bill
On February 14, 2017 the bill for the new Intelligence and Security Services Act was passed by the Dutch lower house. Despite being met with serious opposition from experts, regulators, civil society, political parties and citizens, the revised bill passed virtually unchanged from the proposal submi
4925
The Democratization of Censorship
John Gilmore , an American entrepreneur and civil libertarian, once famously quipped that “the Internet interprets censorship as damage and routes around it.” This notion undoubtedly rings true for those who see national governments as the principal threats to free speech.
4926
Apple iMac Pro and Secure Storage
Explore the Duo Blog for expert tips, security insights, and resources to stay updated on the latest in security and access management trends.
4927
Towards the next generation of XNU memory safety: kalloc_type
Improving software memory safety is a key security objective for engineering teams across the industry. Here we begin a journey into the XNU kernel at the core of iOS and explore the intricate work our engineering teams have done to harden the memory allocator and make our software much more difficult to exploit.
4928
A Shark on the Network
DISCLAIMER: I do not condone monitoring network traffic with intent to spy or otherwise cause harm to people. My interest in the techniques described below is academic. I write in the hope that I can improve Internet security, or at least increase public awareness of vulnerabilities. If you are attempting to replicate…
4929
4930
4931
DKIM Demystified
DKIM is a way to secure your email, increasing deliverability and avoiding fraud. A 20i Senior Systems Administrator explains DKIM in depth.
4932
How Etsy Manages HTTPS and SSL Certificates for Custom Domains on Pattern
In April of 2016 Etsy launched Pattern, a new product that gives Etsy sellers the ability to create their own hosted e-commerce...
4933
Signal intelligence 101: SIGINT targets
A quick overview of the various types of signal intelligence targets, with an emphasis on the Soviet Cold War systems
4934
EU Digital ID wallet is coming
As you were browsing something about your browser made us think you were a bot. There are a few reasons this might happen:
4935
Confidential VMs
Google Cloud will now offer the ability to encrypt data in use, while it’s being processed in a Google data center
4936
4937
How to Track Your Kids (and Other People's Kids) with the TicTocTrack Watch
Do you ever hear those stories from your parents along the lines of "when I was young..." and then there's a tale of how risky life was back then compared to today. You know, stuff like having to walk themselves to school without adult supervision, crazy stuff like that
4938
DDoS Botnet Aisuru Blankets US ISPs in Record DDoS
The world’s largest and most disruptive botnet is now drawing a majority of its firepower from compromised Internet-of-Things (IoT) devices hosted on U.S. Internet providers like AT&T , Comcast and Verizon , new evidence suggests. Experts say the heavy concentration of infected devices at U.S. providers is…
4939
LetsEncrypt – Expiration Notification Service Has Ended
Since its inception, Let’s Encrypt has been sending expiration notification emails to subscribers that have provided an email address to us via the ACME API. This service ended on June 4, 2025. The decision to end the service is the result of the following factors: Over the past 10 years more and more of our…
4940
On privacy and control
I have 15+ years of software engineering experience across different parts of the tech stack including networking libraries, congestion control, performance improvements, Backend, and Android development.
4941
The trouble with VPN and privacy review sites
Evergreen privacy guides, threat modeling, encryption, practical tutorials.
4942
Cracking encrypted LastPass vaults
The recent (2022) compromise of Lastpass included email addresses, home addresses, names, and encrypted customer vaults. In this post I will demonstrate how attackers may leverage tools like Hashcat to crack an encrypted vault with a weak password.
4943
Enhancing digital certificate security (Fake *.Google.com cert issued)
Posted by Adam Langley, Software Engineer Late on December 24, Chrome detected and blocked an unauthorized digital certificate for the "*....
4944
Web Authentication Methods Compared
This article looks at the most commonly used web authentication methods.
4945
“Web Environment Integrity”: Locking Down the Web
Brave strongly opposes Google's "Web Environment Integrity" proposal, the latest in Google's efforts to prevent users from being in control of how they use the Web.
4946
4947
Tor Browser 8.5
Tor Browser 8.5 includes our first stable release for Android plus many new features.
4948
4949
4950
Malicious skills targeting Claude Code and Moltbot users
Malicious ClawdBot skills target ByBit, Polymarket, Axiom, Reddit and LinkedIn, installing malware on unsuspecting OpenClaw user machines.