5221
Reviewing the cryptography used by Signal
Last year, I urged furries to stop using Telegram because it doesn’t actually provide them with any of the privacy guarantees they think it gives them. Instead of improving Telegram’s c…
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,771 posts.
5222
Bitcoin's big secret: How cryptocurrency became law enforcement's secret weapon
WIRED's Andy Greenberg discusses a revelation that turned his decades-long reporting on its head: Bitcoin became a criminal's worst nightmare.
5223
New Report Shows Cops Used Ring Cameras to Monitor Black Lives Matter Protests
San Francisco - The Electronic Frontier Foundation (EFF) has obtained emails that show that the Los Angeles Police Department (LAPD) sent at least one request—and likely many more—for Amazon Ring camera video of last summer’s Black-led protests against police violence. In a report released today,...
5224
Requiring MFA on popular gem maintainers
News and updates from the RubyGems team — releases, security advisories, and project announcements.
5225
Best Practices for Securing SSH
This article explores 5 SSH best practices you should observe to boost the security of your infrastructure.
5226
Porn Spam on Google Maps
User Generated Content is great, innit? As a company, I want users to submit photos, so I don't have to do any content curation. Moderation? Nah mate, stick some AI on there to filter out anything offensive and we're golden. *sigh* James Whatley (inactive)@WhatleydudeSurprised Loch Ness isn't trending tbqh.❤️ 7💬 0🔁…
5227
5228
macOS Sonoma silently enabled iCloud Keychain despite my precautions
This is a follow-up to my blog post Updating from macOS Ventura to Sonoma silently enables iCloud Keychain . In the addendum to that blog post, I discussed a workaround, which was to delete my WiFi password right before rebooting into the updater. In a trial run on my M1 Mac mini, the workaround was successful.
5229
Upcoming coordinated security fix for all Matrix server implementations
Matrix, the open protocol for secure decentralised communications
5230
Yes, Android 14 still allows modification of system certificates
Tim Perry recently claimed in an article that “Android 14 blocks all modification of system certificates, even as root”. This sparked significant discussion on Hacker News. Thankfully my tests show that it is still possible to adjust the system certificate store in Android 14.
5231
Exponential growth in DDoS attack volumes
How Google prepares for and protects against the largest volumetric DDoS attacks.
5232
5233
Post-Mythos Cybersecurity: Keep calm and carry on
As some of those fears, uncertainties, and doubts about Mythos are starting to feel real, what can we do about it? Paradoxically, I believe that little needs to change in what we’ve been doing for years.
5234
Experian Site Can Give Anyone Your Credit Freeze PIN
An alert reader recently pointed my attention to a free online service offered by big-three credit bureau Experian that allows anyone to request the personal identification number (PIN) needed to unlock a consumer credit file that was previously frozen at Experian.
5235
Zero-day Flash exploit on all platforms, fix two weeks out
For the complete experience, please enable JavaScript in your browser. Thank you!
5236
Vulnerabilities in chips in 37% of smartphones
Highlights Check Point Research discovered vulnerabilities in MediaTek’s chips, embedded in 37% of all smartphones globally CPR discovered several %
5237
ICE Awards $25M Iris-Scanning Contract to Bi2 Technologies
The no-bid deal is five times the size of the agency's previous contract with the Massachusetts company and could put devices in agents' hands by late June.
5238
5239
5240
Appeals Court Holds that Email Privacy Protected by Fourth Amendment
In a landmark decision issued today in the criminal appeal of U.S. v. Warshak, the Sixth Circuit Court of Appeals has ruled that the government must have a search warrant before it can secretly seize and search emails stored by email service providers. Closely tracking arguments made by EFF in its...
5241
A kernel stack use-after-free: Exploiting Nvidia's GPU Linux drivers
This article details two bugs discovered in the NVIDIA Linux Open GPU Kernel Modules and demonstrates how they can be exploited. The bugs can be triggered by an attacker controlling a local unprivileged process. Their security implications were confirmed via a proof of concept that achieves kernel read and write…
5242
Opera breached, has code cert stolen, possibly spreads malware
The Sophos Blog
5243
Dnsmasq wins the first BlueHats Prize
BlueHats prizes is an initiative by the French Interministerial Digital Directorate. They are awarded to maintainers of critical free and open source projects. In 2024 four prizes of € 10 000 each will be given out. We are happy to announce the winner of the first 2024 BlueHats prize is Simon Kelley, maintainer of the…
5244
5245
Who controls your computer? and how to make sure it's you
Can you trust your computer? Can you control what it does and doesn’t? Or is someone else in control? How can you even know what it is or isn’t doing? Even if it tells you, how do you know it’s not lying? As computing systems become more complex, how can “Trusted Computing” be achieved, not (just) by big corporations…
5246
So You Want to Be a Penetration Tester?
This is an old and outdated version of the blog. If you haven’t read this post yet, then please see the new one for the most up-to-date content: “So You Want To Work in Cyber Security?”. This version is kept here for archival purposes only.
5247
HiveNightmare a.k.a. SeriousSAM – anybody can read the registry in Windows 10
This is the story of how all non-admin users can read the registry — and so elevate privileges and access sensitive credential information…
5248
$ sudo rm -rf / === NPM install
🔎I authored this blog post whilst I was an employee of Gitpod for Gitpod. I no longer work at Gitpod. In what seems like a long time ago, in part because it is, I learned the catastrophic capabilities of this command the hard way, and I'm sure folks my
5249
Hacker leaks 281 GB of data from Germany's far-right AfD party
Germany's far-right AfD (Alternative für Deutschland) party has confirmed that it has suffered a security breach, after a hacker published what appear to be hundreds of thousands of the controversial political party's internal emails.
5250
Consider Disabling Browser Push Notifications on Family and Friends Devices
A terrible user-hostile browser feature is being misused, surprising no one.