6331
Ramp's Sheets AI Exfiltrates Financials
A vulnerability in Ramp's Sheets AI allowed the agent to insert formulas that made external network requests without user approval, creating the risk of data exfiltration via indirect prompt injection.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,772 posts.
6332
6333
Libtls – New TLS API from LibreSSL
tls_init , tls_config_new , tls_config_free , tls_config_error — initialize TLS client and server API
6334
Why are neural networks and cryptographic ciphers so similar? (2025)
Several neural network design principles are almost identical to cipher design principles.
6335
Representing SHA-256 Hashes as Avatars
How to turn 256 bits of entropy into a beautiful, avatar-friendly circular SVG: the Hashvatar.
6336
Who and what is Coinhive?
Multiple security firms recently identified cryptocurrency mining service Coinhive as the top malicious threat to Web users, thanks to the tendency for Coinhive’s computer code to be used on hacked Web sites to steal the processing power of its visitors’ devices. This post looks at how Coinhive vaulted to the top of…
6337
6338
Software Verification and Analysis Using Z3
Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.
6339
Qubes OS 4.0 has been released
After nearly two years in development and countless hours of testing, we’re pleased to announce the stable release of Qubes OS 4.0! Major changes in version 4.0 Version 4.0 includes several fundamental improvements to the security and functionality of Qubes OS: The Qubes Admin API Qubes...
6340
Multi-account containers add-on sync feature
The Multi-Account Containers Add-on will now sync your container configuration and site assignments. Firefox Multi-Account Containers allows users to separate their online identities into different tab types called Containers. Each ...
6341
6342
A Technical and Cultural Assessment of the Mueller Report PDF
What can we learn about the Mueller Report from the PDF file released by the Department of Justice (DoJ) on April 18, 2019?
6343
A Cryptographic Near Miss
A recent issue in scalar multiplication makes for a good case study of how unsafe interfaces, undocumented assumptions, and time lead to vulnerabilities.
6344
6345
Oak, a Free and Open Certificate Transparency Log
Update: Feb. 5 2020 The Let’s Encrypt CT logs are now included in approved log lists and are usable by all publicly-trusted certificate authorities. Today we are announcing a new Certificate Transparency log called Oak. The Oak log will be operated by Let’s Encrypt and all publicly trusted certificate authorities will…
6346
6347
Analysis of the Alexa Top 1M sites
Prior to the release of the Mozilla Observatory a year ago, I ran a scan of the Alexa Top 1M websites. Despite being available for years, the usage rates of ...
6348
6349
Xz sshd backdoor collecting usernames from logs
The amazingly scary xz sshd backdoor, Author: Bojan Zdrnja
6350
Google's OSS-Fuzz expands fuzz-reward program
Posted by Oliver Chang, OSS-Fuzz team Since launching in 2016 , Google's free OSS-Fuzz code testing service has helped get over 8800 vul...
6351
Buffer overflow when pwfeedback is set in sudoers
Sudo’s pwfeedback option can be used to provide visual feedback when the user is inputting their password. For each key press, an asterisk is printed. This option was added in response to user confusion over how the standard Password: prompt disables the echoing of key presses. While pwfeedback is not enabled by…
6352
6353
Securing our frontier model training environment
OpenAI explains how we strengthened containment for frontier model training and evaluation, including offline environments and high-compute red-teaming.
6354
Electronic Arts Hates Strong Passwords
EA does not allow passwords longer than 16 characters or passwords that contain symbols. However passwords like cool, pass and love are totally acceptable.
6355
6356
Windows Protected Print Mode
Over the past year, the MORSE team has been working in collaboration with the Windows Print team to modernize the Windows Print System. This new design,...
6357
6358
6359
The Collapse of the US-EU Safe Harbor
When people who care about technology look back at the year 2015, they will remember October as the month when the EU-U.S. Safe Harbor collapsed. An international legal agreement that has been in place for 15 years was invalidated in a single day. On Oct. 6, the Court of Justice of the European Union struck...
6360
Are mental health apps better or worse at privacy in 2023?
Privacy Not Included was launched in 2017 to help you understand the privacy risks of tech products that connect to the internet. We are continuing that work in the form of Product Reviews at our magazine Nothing Personal, where our privacy experts do hours of hands-on testing and research on the most popular consumer…