6121
From MCP to shell: MCP auth flaws enable RCE in Claude Code, Gemini CLI and more
How MCP authentication flaws enable RCE in Claude Code, Gemini CLI, and more.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,771 posts.
6122
Trust Me, I'm Local: Chrome Extensions, MCP, and the Sandbox Escape
Secure the modern software stack with Koi. Gain visibility, context, and real-time protection over extensions, MCPs, and autonomous AI agent endpoints.
6123
Worthless security claims
I’ve been considering purchasing one of these t-shirts: This shirt would announce to everyone who crosses my path that I am, in fact, the world’s greatest lover. They would know this because I have a t-shirt that tells them so and it would give them enormous
6124
Roblox Open Sources Real-Time Voice Safety Model
The Research Team at Roblox is discovering new possibilities for the next generation of technology.
6125
6126
Researchers Connect Flame to Stuxnet
The Securelist blog houses Kaspersky’s threat intelligence reports, malware research, APT analysis and statistics
6127
(L)Awful Interception
One of democracy's foundations is the fact that all human beings have certain inalienable rights and freedoms. Suspended by trust and shared values. Today, trust and shared values are being replaced by “control and surveillance”.
6128
The Senators that introduced a bill to let telecoms sell your internet history
Protection of your Internet history is up in the air thanks to new, pending legislation. A new bill coming before Senate aims to completely dismantle the
6129
Why EdDSA held up better than ECDSA against Minerva
"Minerva attack can recover private keys from smart cards, cryptographic libraries" , says the ZDNet headline. "The Czech team found a problem in the ECDSA and EdDSA algorithms used by the Atmel Toolbox crypto library to sign cryptographic operations on Athena IDProtect cards."
6130
Lord Camden on NSA Surveillance
I’m doing a deep dive into the pre-history of the Fourth Amendment, and am continuously amazed at how perfectly the condemnations of the “general warrants” that incensed the Framers apply to the programmatic authority granted the NSA under the FISA Amendments Act. The legal challenge to that statute is currently hung…
6131
Canada's Quiet Weakening of Communications Encryption
This article outlines some of the federal government of Canada’s successful and unsuccessful attempts to weaken encryption standards.
6132
Bootstrapping Understanding: An Introduction to Reverse Engineering
Reverse engineering an unfamiliar data file could be described as the bootstrapping of understanding. In many ways the process resembles the scientific method, only applied to human-made, abstract objects instead of the natural world. You begin by gathering data, and then you use that information to put forth one or…
6133
Exploiting the Wii U's USB Descriptor parsing
In this write-up we're going to take a look at exploiting the Wii U's USB Host Stack. Over the past few months I spent a lot of time reverse...
6134
6135
NSA and IETF: Fairness
Secret NSA documents showed that NSA pushed DES in the 1970s to "drive out competitors" while knowing that DES was "weak enough" to break; meanwhile NSA publicly claimed that it would use DES . NSA used export-law exceptions in the 1990s to entrench RC4 and RSA-512, causing security problems for decades . NSA in the…
6136
Pump the Brakes on Your Police Department's Use of Flock Safety
Even if you can’t stop Flock’s use entirely, you can still help protect civil liberties in your community.
6137
Age verification on Systemd and Flatpak
How will this work, I wonder
6138
6139
SFPD obtained live access to business camera network in anticipation of protest
New documents EFF received through public records requests have revealed that the San Francisco Police Department (SFPD) received live access to the hundreds of surveillance cameras that comprise the Union Square Business Improvement District’s (USBID) camera network in anticipation of potential...
6140
6141
Linux Kernel Ksmbd Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability, but only systems with ksmbd enabled are vulnerable.
6142
How AI text watermarking works
A gentle visual guide to how a statistical mark hides inside generated text, and what erases it.
6143
6144
How to use FIDO2 USB keys with SSH
I recently installed Ubuntu Wacky Whatever, the latest version, and I’m very excited about it shipping with SSH 8.2, which means that I can finally use hardware USB keys for secure, easy to use authentication. If securing your devices has been something you’ve wanted to easily do yourself, read on, because it’s…
6145
Simply Secure PHP Cryptography
A reflection on the first six months of the year, ext/sodium landing in PHP 7.2, and where to go from here.
6146
How did authorities identify the alleged LockBit boss?
Last week, the United States joined the U.K. and Australia in sanctioning and charging a Russian man named Dmitry Yuryevich Khoroshev as the leader of the infamous LockBit ransomware group. LockBit’s leader “ LockBitSupp ” claims the feds named the wrong guy, saying the charges don’t explain how they connected him to…
6147
Re: Proposed Statement on "HTTPS everywhere for the IETF"
Search IETF mail list archives
6148
Cloudflare mitigated yet another Okta compromise
On Wednesday, October 18, 2023, we discovered attacks on our system that we were able to trace back to Okta. We have verified that no Cloudflare customer information or systems were impacted by this event because of our rapid response.
6149
CPanel's Black Week: 3 New Vulnerabilities Patched After Attack on 44k Servers
If you run a server with cPanel or WHM, you need to read this carefully. On May 8, 2026 — just ten days after the cPanel CVE-2026-41940 authentication bypass was used to compromise 44,000 web hosting servers and deploy ransomware — cPanel quietly released a second emergency security patch. This one covers three new…
6150
