6481
Indian threat actor Patchwork APT caught in its own web
ThreatDown Patchwork Apt Caught In Its Own Web: threat intelligence on Patchwork APT tactics, targets, and how to detect and stop this threat.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,772 posts.
6482
GDPR complaints against Google’s deceptive practices to track user location
Based on new research published today by BEUC’s Norwegian member Forbrukerrådet, seven consumer groups are filing complaints against Google with their national data protection authorities.
6483
6484
The Web Authentication Arms Race – A Tale of Two Security Experts
Web authentication systems have evolved over the past ten years to counter a growing variety of threats. This post will present a fictional arms race between a web application developer and an attacker, showing how different threats can be countered with the latest security technologies.
6485
6486
Cracking Encrypted PDFs
I performed a brute-force attack on the password of an encrypted PDF and a brute-force attack on the key of (another) encrypted PDF, both PDFs are part of a challenge published by John August. The …
6487
6488
Dissecting a spammer's spam script
Let's dissect a PHP spam script and find out how spammers send spam messages and how they have tried to obfuscate the actual code they use.
6489
Insiders Stealing Instagram Usernames?
My computer on the net
6490
From VNC to reverse shell
Personal websites are weird. We are mostly past the era of having them, as things like twitter and hosted blog services like Medium have taken them over, but I’m a hold out. I run both my own blog, and have a landing page on the apex domain since the server that hosts the blog (Google App Engine + Cloudflare) is…
6491
6492
Anonymized data is rarely anonymous
Justin Sherman for Wired points out the farce that is anonymized data: Data on hundreds of millions of Americans’ races, genders, ethnicities, religions, sexual orientations, political beliefs, int…
6493
6494
Should Failing Phish Tests Be a Fireable Offense?
Would your average Internet user be any more vigilant against phishing scams if he or she faced the real possibility of losing their job after falling for one too many of these emails? Recently, I met someone at a conference who said his employer had in fact terminated employees for such repeated infractions. As this…
6495
Thoughts on the Durov Arrest
Today we learn that Pavel Durov, founder of the popular messaging app Telegram, has been arrested as his private jet landed in France. Early indications are that the arrest stems from Telegram̵…
6496
What’s Next in Making Encrypted DNS-over-HTTPS the Default
More than 70,000 users have already chosen on their own to explicitly enable DoH in Firefox Release edition. We are close to releasing DoH in the USA, and we have a few updates to share.
6497
6498
Emacs arbitrary code execution and how to avoid it
A post by Eshel Yaron with details and advice about a long standing arbitrary code execution vulnerability in Emacs
6499
Is Germany on the brink of banning ad blockers?
Across the internet, users rely on browsers and extensions to shape how they experience the web: to protect their privacy, improve accessibility, block harmful or intrusive content, and take control ...
6500
Fighting API bots with Cloudflare's invisible turnstile
There's a "hidden" API on HIBP. Well, it's not "hidden" insofar as it's easily discoverable if you watch the network traffic from the client, but it's not meant to be called directly, rather only via the web app. It's called "unified search" and it looks
6501
TextSecure's Private Group Messaging
One of the major features we introduced in the TextSecure v2 release was private group chat. We believe that group chat is an important feature for encrypted communications projects, so we wanted to try to summarize some of the existing work in this area, as well as how TextSecure’s group chat pr...
6502
Controlling vehicle features of Nissan LEAFs remotely via vulnerable APIs
Last month I was over in Norway doing training for ProgramUtvikling, [http://programutvikling.no/] the good folks who run the NDC conferences I've become so attached to. I was running my usual “Hack Yourself First” workshop [https://www.troyhunt.com/2016/02/more-europe-even-more-again-and-more.
6503
6504
The End of Safe Harbor and a Scary Path Forward
Some in detail analysis about what the end of safe harbor means for small companies, especially in Europe.
6505
Our Ambitious Plan to Make Insecure PHP Software a Thing of the Past
Let's solve application security at an ecosystem level by updating outdated and/or insecure blog posts to refer developers to better practices.
6506
GET /browser.exe
Jon Howell dreams of a new Internet. In this new Internet, cross-browser compatibility checking is a distant memory and new features can be unilaterally be added to browsers without having to convince the world to upgrade first. The idea which makes this Internet possible is so crazy, it just might work.
6507
Briar has been removed from Google Play
Status update Update (February 28, 13:20 UTC): Briar is available on Google Play again. Briar was briefly removed from Google Play because we didn’t provide Google’s review team with a username and password for testing the app. We provided Google with a username and password for testing and the app is now available…
6508
Why your 'A' grade SSL is 'outdated cryptography' on Chrome
Get EV SSL certificates in hours, not days. Prechecks before you pay. We do the hard work for you.
6509
Pasco County’s Sheriff Must End Its Targeted Child Harassment Program
In September 2020, the Tampa Bay Times revealed a destructive “data-driven” policing program run by the Pasco County, Florida Sheriff's Office. The program is misleadingly called “Intelligence-Led Policing” (ILP), but in reality, it's nothing more than targeted child harassment by police. Young...
6510