Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,771 posts.
中文 First of all, thank Orange Tsai for giving me the opportunity to participate in Black Hat USA 2021 in Las Vegas. This article would not exist without this ticket. I am going to share my thoughts and some technical topics on the two days of Black Hat USA 2021 in this article. The hotel and the conference venue are…
This morning, a bipartisan group of Representatives, led by Rep. Zoe Lofgren (D-Calif.), sent a pointed letter to Attorney General Eric Holder and the Secretary of Homeland Security Janet Napolitano protesting the recent spat of domain name seizures—executed on dubious copyright grounds—that have...
I've previously discussed how the PlayStation 2 doesn't have any good entry-point software exploits for launching homebrew. You need to either purchase a memory card with an exploit pre-installed (or a memory card to USB adapter), a HDD expansion bay (not available to slim consoles), open up the console to block the…
An overview into CVE-2018-1002105's root cause and a program to test if your clusters are affected
Earlier this year, we announced that along with the Cyberlaw Clinic at Harvard’s Berkman Center for Internet and Society, we were challenging six patent applications that, if granted, could threaten the development of 3D printing technology. We asked you—the community—for help, and your input was...
OpenAI is strengthening monitoring, alignment, and security for frontier AI models. See how new safeguards are guiding the pace of model development.
Google allows Google Workspace administrators to monitor and audit users emails. An Administrator may use Google Vault, Content Compliance rules, Audit API or Email delegation to view and audit users emails. It is recommend for Google Workspace Administrators to consider their local laws before performing email…
Large-scale quantum computers are capable of breaking all of the common forms of asymmetric cryptography used on the Internet today. Luckily, they don’t exist yet. The Internet-wide transition to post-quantum cryptography began in 2022 when NIST announced their final candidates for key exchange and signatures in the…
We present a novel approach to infiltrate data to air-gapped systems without any additional hardware on-site.
macOS ships a VulgarWordUsage.db and a dictionary that rates every word as vulgar, offensive or sensitive. Dumped for 199,000 English words and a dozen other languages.
Multiple Python packages caught by Sonatype were seen uploading secrets such as AWS keys and environment variables to a web endpoint.
Paranoia appears to be the order of the day, given what we know about the NSA and GCHQ thanks to Edward Snowden. Absent from the stories so...
The official blog of WizSec, a group of bitcoin security specialists, and their investigation into MtGox.
Today, we wanted to share an update about how DigitalOcean and our customers were impacted by a recent security incident disclosed by Mailchimp.
Lessons learned from becoming the unexpected face of a npm supply-chain attack.
I needed a simple set of good outdoor surveillance cameras for a friends home. Like everything else I buy, I turned to Amazon. I found (what seemed like) a great deal for a set of 6 poe cameras and...
With the end of Google's Stadia platform on January 18, 2023, Google published a website allowing people to "Switch the Stadia Controller ...
Today is Global Encryption Day, a day to highlight why encryption is critical for a safe, private internet.
OpenSSL 1.1.1 series has reached its End of Life (EOL). As such it will no longer receive publicly available security fixes.
Going through the steps of using cargo fuzz to find bugs in Rust projects
Malicious code can be inserted into any GitHub action, even those which are tagged.
