511
Vulnerabilities show why STARTTLS should be avoided if possible (2021)
Guest Post: Study finds more than 40 STARTTLS-related security flaws in many different software products, both client-side and server-side.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 536 posts.
512
Full EU chat control proposal attack on digital privacy and encryption
The French news service contexte.com has today published the latest Belgian Presidency's proposal for introducing indiscriminate chat control scanning of private messages for illegal content. The proposal covers the entire regulation and is therefore ready for endorsement. The proposal is to be disc
513
EFF Year in Review: Google's Corporate Paternalism in the Browser
It’s a big year for the oozing creep of corporate paternalism and ad-tracking technology online. Google and its subsidiary companies have tightened their grips on the throat of internet innovation, all while employing the now familiar tactic of marketing these things as beneficial for users. Here...
514
Most dating apps sell and share users' personal data
Privacy Not Included was launched in 2017 to help you understand the privacy risks of tech products that connect to the internet. We are continuing that work in the form of Product Reviews at our magazine Nothing Personal, where our privacy experts do hours of hands-on testing and research on the most popular consumer…
515
TOTP Codes in the Terminal
The demise of Authy desktop has brought about a number of changes, probably the one of which I most appreciate is a mobile app which lets me edit codes: with 2FAS I can edit labels on codes, and I’...
516
There are too many damn honeypots
VulnCheck faces a horde of honeypots while assessing the potential impact of Atlassian Confluence's CVE-2023-22527. This blog delves into Shodan queries to filter out honeypots and uncover the actual on-premise Confluence install base.
517
How Chainalysis made their way into popular Monero wallets
An investigation into how malicious nodes run by Chainalysis made their way into defaults of popular Monero wallets.
518
Attacks on machine learning models
HN discussion
519
Why Certificate Lifecycle Automation Matters
If you’ve perused the ActivityPub feed of certificates whose keys are known to be compromised , and clicked on the “Show More” button to see the name of the certificate issuer, you may have noticed that some issuers seem to come up again and again. This might make sense – after all, if a CA is issuing a large volume…
520
Pwned Certificates on the Fediverse
As well as the collection and distribution of compromised keys , the pwnedkeys project also matches those pwned keys against issued SSL certificates. I’m excited to announce that, as of the beginning of 2024, all matched certificates are now being published on the Fediverse , thanks to the botsin.space Mastodon server.
521
522
Driving forward in Android drivers
Posted by Seth Jenkins, Google Project ZeroIntroduction Android's open-source ecosystem has ...
523
Kiosk mode bypass for an Ariane Allegro Scenario Player based hotel check-in te
A hotel check-in kiosk application crashed when entering a single quote into the guest search, which enabled access to the Windows Desktop. The terminal uses the Ariane Allegro Scenario Player.
524
Security Vulnerability in Browser Interface Allows Computer Access via GPU
Researchers at TU Graz were successful with three different side-channel attacks on graphics cards via the ... » Computer science and IT » Read more ▸
525
526
U.S. Internet leaked years of internal, customer emails
The Minnesota-based Internet provider U.S. Internet Corp. has a business unit called Securence , which specializes in providing filtered, secure email services to businesses, educational institutions and government agencies worldwide. But until it was notified last week, U.S. Internet was publishing more than a…
527
Increasing Google and Alphabet VRP rewards
The reward amounts on offer by the Google VRP have undergone a major overhaul: We're increasing reward amounts by up to 5x (with maximum rewards of up to $151,515)!
528
Privacy Isn't Dead. Far from It
Welcome! The fact that you’re reading this means that you probably care deeply about the issue of privacy, which warms our hearts. Unfortunately, even though you care about privacy, or perhaps because you care so much about it, you may feel that there's not much you (or anyone) can really do to...
529
Defense Against AI-Guided Traffic Analysis (Daita)
Even if you have encrypted your traffic with a VPN (or the Tor Network), advanced traffic analysis is a growing threat against your privacy. Therefore, we now introduce DAITA.
530
Fighting spam with Haskell at Meta (2015)
Visit the post for more.
531
Block AI bots, scrapers and crawlers with a single click
To help preserve a safe Internet for content creators, we’ve just launched a brand new “easy button” to block all AI bots. It’s available for all customers, including those on our free tier
532
Mozilla acquires privacy-focused ad tech company Anonym
Mozilla has acquired Anonym, a trailblazer in privacy-preserving digital advertising. This strategic acquisition enables Mozilla to help raise the bar for
533
Facebook and Genocide: How Facebook contributed to genocide in Myanmar and why it will not be held accountable - Harvard Law School
On July 22, 2013, Turkish scholar and social media expert Zeynep Tufekci tweeted “Last year, I pondered the first ‘social-media fueled ethnic cleansing.’ With ethnic tensions & expanding online hate speech, is it Burma?” 1
534
Making messaging interoperability with third parties safe for users in Europe
To comply with a new EU law, the Digital Markets Act (DMA), which comes into force on March 7th, we’ve made major changes to WhatsApp and Messenger to enable interoperability with third-party messa…
535
Combining Machine Learning and Homomorphic Encryption in the Apple Ecosystem
At Apple, we believe privacy is a fundamental human right. Our work to protect user privacy is informed by a set of privacy principles, and…
536
What Manifest V3 means for Brave Shields and the use of extensions in the Brave browser
Brave is committed to maintaining Manifest V2 support, allowing users to keep their favorite extensions functioning beyond the industry-wide deprecation.