4951
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,771 posts.
4952
4953
4954
Git ransom campaign incident report
This is a coordinated effort to help educate and inform users on secure best practices relating to the recent Git ransomware incident.
4955
Advancing Our Bet on Asymmetric Cryptography
Google and many other organizations, such as NIST, IETF, and NSA, believe that migrating to post-quantum cryptography is important due to the large risk posed by a crypt…
4956
How likely is the NSA PRISM program to catch a terrorist?
Recent revelations about PRISM, the NSA’s massive program of surveillance of civilian communications have caused quite a stir. And rightfully so, as it appears that the agency has been grante…
4957
4958
BoringTun, a Userspace WireGuard Implementation in Rust
Today we are happy to release the source code of a project we’ve been working on for the past few months. It is called BoringTun, and is a userspace implementation of the WireGuard® protocol written in Rust.
4959
4960
Vectorized Emulation: fuzzing at 2 trillion instructions per second
This is the introduction of a multipart series. It is to give a high level overview without really deeply diving into any individual component.
4961
Developer's Guide to SaaS Compliance
This article reviews what kinds of compliance certifications and regulations exist, what they mean for developers, and how to begin the certification process.
4962
Where “nothing to hide” fails as logic
Every April, I try to wade through mounds of paperwork to file my taxes. Like most Americans, I’m trying to follow the law and pay all of the taxes that I owe without getting screwed in the process. I try and make sure that every donation I made is backed by proof, every deduction is backed by logic and documentation…
4963
Microsoft open sources Salus software bill of materials (SBOM) generation tool
Salus is a general purpose, enterprise-proven, build-time SBOM generator. It works across platforms including Windows, Linux, and Mac, and uses the standard Software Package Data Exchange (SPDX) format.
4964
EFF Sues FBI For Access to Facial-Recognition Records
San Francisco - As the FBI is rushing to build a "bigger, faster and better" biometrics database, it's also dragging its feet in releasing information related to the program's impact on the American public. In response, the Electronic Frontier Foundation (EFF) today filed a lawsuit to compel the...
4965
Expanding Project Glasswing
We’re extending Project Glasswing to approximately 150 new organizations in more than fifteen countries
4966
GrapheneOS recommended for domestic abuse victims
Looking for a DV safe phone in Australia? This 2026 guide covers tech abuse on normal phones, what a privacy phone can and cannot do, and where to get help.
4967
REvil Ransom Arrest, $6M Seizure, and $10M Reward
The U.S. Department of Justice today announced the arrest of Ukrainian man accused of deploying ransomware on behalf of the REvil ransomware gang, a Russian-speaking cybercriminal collective that has extorted hundreds of millions from victim organizations. The DOJ also said it had seized $6.1 million in cryptocurrency…
4968
Samsung's abandoned NX cameras can be brought online with a $20 LTE stick
Tooting photos on the go from Samsung WiFi cameras with a $20 LTE stick
4969
4970
No, don't enable revocation checking
Revocation checking is in the news again because of a large number of revocations resulting from precautionary rotations for servers affected by the OpenSSL heartbeat bug. However, revocation checking is a complex topic and there's a fair amount of misinformation around. In short, it doesn't work and you are no more…
4971
Qualcomm’s Chain of Trust
Covering Qualcomm bootloader’s up to the point of Android being loaded
4972
Windows 10 in-place upgrades are a severe security risk
This is a big issue and it has been there for a long time. Just a month ago I finally got verification that the Microsoft Product Groups n...
4973
Destroying x86_64 instruction decoders with differential fuzzing
TL;DR: x86_64 decoding is hard, and the number and variety of implementations available for it makes it uniquely suited to differential fuzzing. We’re open sourcing mishegos, a differential fuzzer for instruction decoders. You can use it to discover discrepancies in your own decoders and analysis tools! In the…
4974
Researchers: Weak Security Defaults Enabled Squarespace Domains Hijacks
At least a dozen organizations with domain names at domain registrar Squarespace saw their websites hijacked last week. Squarespace bought all assets of Google Domains a year ago, but many customers still haven’t set up their new accounts. Experts say malicious hackers learned they could commandeer any migrated…
4975
Police CyberAlarm Uses Alarming Cryptography
Today we’re going to be talking about this code, shared on Twitter by Paul Moore. It’s worth noting that this code snippet was after Paul attempted to alert them to security issues with…
4976
The pitfalls of using SSH-agent, or how to use an agent safely
Unfortunately for you, we promised a follow up to talk about the security implications of using such an agent. So, here we are.
4977
Fake femme fatale dupes IT guys at US government agency
The Sophos Blog
4978
Incenser, or how NSA and GCHQ are tapping internet cables (2014)
A weblog about Signals Intelligence, Communications Security and top level telecommunications equipment
4979
4980