Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,771 posts.
PokéWalker hacking: A complete device takeover and ROM dump using infrared
Dmitry.GR: Complete device takeover by blinking at it!
Mission Improbable: Hardening Android for Security and Privacy
Updates: See the Changes section for a list of changes since initial posting. After a long wait,...
Racing against the clock – hitting a tiny kernel race window
TL;DR: How to make a tiny kernel race window really large even on kernels without CONFIG_PREEMPT...
The Linux Security Circus: On GUI isolation
There certainly is one thing that most Linux users don't realize about their Linux systems... this is the lack of GUI-level isolation, and ...
Text AI watermarks will always be trivial to remove
The European Union AI Act will begin to be enforceable in August 2026, one month from now. One of the biggest new requirements is Article 50, which requires all…
Session is shutting down in 90 days
The Session Technology Foundation cannot continue without your support. Donate today to help Session in its fight for survival.
Zerocoin implementation bug
Firo is a digital currency with a focus on setting privacy standards.
WolfSSL sucks too, so now what?
OpenSSL sucks. The BoringSSL and AWS-LC forks are Googled and Amazoned to death; they don't care about anyone but their own use cases. I can't remember ever having a good experience with software using GnuTLS. LibreSSL is incomplete... FOREWARD This post is about the experience of taking a leap of …
The Bare Minimum You Should Do to Protect Your Family's Data
For a lot of families, technology is the glue that holds everything together. There’s your kid’s Instagram feed you follow to see what theyR
LulzSec's 'Topiary' arrested
The Sophos Blog
Unlocking LUKS2 Volumes with TPM2, FIDO2, PKCS#11 Security HW on Systemd 248
Posts and writings by Lennart Poettering
Drone ‘Nightmare Scenario’ Now Has A Name: ARGUS
The PBS series NOVA , “ Rise of the Drones ,” recently aired a segment detailing the capabilities of a powerful aerial surveillance system known as ARGUS-IS, which is basically a super-high, 1.8 gigapixel resolution camera that can be mounted on a drone. As demonstrated in this clip , the system is capable of…
Credit card thieves using free-to-play apps to launder their ill-gotten gains
This MacKeeper report will tell you about 6 major data breaches that happened in 2018.
Extracting SSH Private Keys from Windows 10 ssh-agent
The newest Windows 10 update includes OpenSSH utilities, including ssh-agent. Here’s how to extract unencrypted saved private keys from the registry
Supply Chain Security Is the Whole Enchilada, but Who’s Willing to Pay for It?
From time to time, there emerge cybersecurity stories of such potential impact that they have the effect of making all other security concerns seem minuscule and trifling by comparison. Yesterday was one of those times. Bloomberg Businessweek on Thursday published a bombshell investigation alleging that Chinese cyber…
How Browsers Store Your Passwords (and Why You Shouldn't Let Them)
Introduction In a previous post , I introduced a Twitter bot called dumpmon which monitors paste sites for account dumps, configuration fi...
Hacking Team: a zero-day market case study
This article documents Hacking Team’s third-party acquisition of zero-day (0day) vulnerabilities and exploits. The recent compromise of Hacking Team’s email archive offers one of the first public case studies of the market for 0days. Because of its secretive nature, this market has been the source of endless debates…
CloudFlare, PRISM, and Securing SSL Ciphers
Over the last week we've closely watched the disclosures about the alleged NSA PRISM program. At CloudFlare, we have never been approached to participate in PRISM or any other similar program.
Gmail will call the cops on you based on the content of your emails
Correction: An earlier draft of this story misstated a technical detail; Mark didn’t email his photo to his doctor; rather, he took the photo with his phone and the image was automatically synched to his Google Photos account, triggering a scan .
Facebook leaks user's IP addresses
Actually this is a common method of combatting spam, all of the various spam providers will block facebook as a whole if they don't include this information, which would obviously be a devastating annoyance. Go and send an e-mail from hotmail, or any kind of mailserver.. normal e-mail client, gmail, etc.. and you will…
Susctl CVE-2024-54507: A particularly 'sus' sysctl in the XNU kernel
A very sus sysctl in the XNU kernel.