721
Apple already shipped attestation on the web, and we barely noticed
There's been a lot of concern recently about the Web Environment Integrity proposal, developed by a selection of authors from Google, and apparently being...
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,768 posts.
722
An update on Mozilla's terms of use for Firefox
On Wednesday we shared that we’re introducing a new terms of use (TOU) and privacy notice for Firefox. Since then, we’ve been listening to some of our
723
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
LiteLLM 1.107.0 on PyPI ships a .pth credential stealer and a sitecustomize.py backdoor that run on every Python start. How the implant got in, what it steals, and indicators of compromise.
724
Ring Doorbell App Packed with Third-Party Trackers
Ring isn't just a product that allows users to surveil their neighbors. The company also uses it to surveil its customers.An investigation by EFF of the Ring doorbell app for Android found it to be packed with third-party trackers sending out a plethora of customers’ personally identifiable...
725
BundesMessenger, a secure messenger for Germany’s public administration
BundesMessenger is a modified version of Element which we’re working with BWI to develop and maintain.
726
Chat Control proposal fails again after public opposition
The European Union’s controversial Chat Control proposal has been withdrawn once again following intense public pressure. This marks another defeat for legislation that would have mandated scanning of encrypted messages across the EU.
727
728
Gnome patent troll stripped of patent rights
A recent decision at the US patent office may well give patent trolls cause to steer clear of open source projects – even more than the fierce resistance the community impressively funded and mount…
729
Removing SMS support from Signal Android (soon)
For many years, the Signal app on Android has supported sending and receiving plaintext SMS and MMS messages in addition to Signal messages. SMS and MMS are standardized communication protocols that allow mobile devices to send and transmit messages, and most people picking up their phone to text...
730
JavaScript is now required to sign in to Google
Posted by Jonathan Skelker, Product Manager It’s Halloween 🎃 and the last day of Cybersecurity Awareness Month 🔐, so we’re celebrating t...
731
Adding a phone number to your Google account can make it less secure
Recently, account takeovers, email hacking, and targeted phishing attacks have been all over the news. Hacks of various politicians, allegedly carried out by Russian hackers, have yielded troves of data. Despite the supposed involvement of state-sponsored agents, some hacks were not reliant on complex zero-day…
732
Cyber Security: A pre-war reality check
This is a lightly edited transcript of my presentation today at the ACCSS/NCSC/Surf seminar ‘Cyber Security and Society’. I want to thank the organizers for inviting me to their conference & giving me a great opportunity to talk about something I worry about a lot. Here are the original slides with notes, which may be…
733
Police can’t demand you reveal your phone passcode then tell a jury you refused
The Utah Supreme Court is the latest stop in EFF’s roving campaign to establish your Fifth Amendment right to refuse to provide your password to law enforcement. Yesterday, along with the ACLU, we filed an amicus brief in State v. Valdez, arguing that the constitutional privilege against self-...
734
The Brave web browser is hijacking links, and inserting affiliate codes
How does this keep happening? It is a mystery.
735
736
Inside a low-budget consumer hardware espionage implant
The following analysis was performed on a S8 data line locator which replied to the hidden SMS command for version query ( *3646655* ) with:
737
Bypassing regulatory locks, hacking AirPods and Faraday cages
How we bypassed Apple's regulatory restrictions, built a Faraday cage and enabled georestricted features on the Airpods Pro 2 for our grandparents.
738
Age verification for social media, the beginning of the end for a free internet?
So-called age verification for social media is spreading across the world, framed as an effort to create a safer internet for children. In reality, age verification lays the foundation for a fully government controlled internet.
739
Introducing Ad Blocker for Firefox on iOS
There’s only so much room on your screen. Pop-ups, overlays, and ads can take over fast, getting between you and what you came to do. That’s where
740
Obama Expands Surveillance Powers on His Way Out
With mere days left before President-elect Donald Trump takes the White House, President Barack Obama’s administration just finalized rules to make it easier for the nation’s intelligence agencies to share unfiltered information about innocent people. New rules issued by the Obama administration...
741
Toyota suffered a data breach by accidentally exposing a secret key on GitHub
On October 7th, Toyota revealed a partial copy of their T-Connect source code had been accidentally exposed for 5 years, including access to data for over 290,000 customers.
742
743
744
Inside the "3 billion people" national public data breach
I decided to write this post because there's no concise way to explain the nuances of what's being described as one of the largest data breaches ever. Usually, it's easy to articulate a data breach; a service people provide their information to had someone snag it through
745
Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
Today, we’re announcing new requirements for bulk senders that will help keep Gmail safer and more spam-free.
746
747
Intel Responds to Security Research Findings
Intel Newsroom delivers the latest news, announcements, and updates. Stay informed on Intel innovations.
748
Fingerprints are Usernames, not Passwords
As one of the maintainers of eCryptfs , and a long time Thinkpad owner, I have been asked many times to add support to eCryptfs for Th...
749
OpenAI’s accidental attack against Hugging Face is science fiction that happened
This story is wild. The short version: OpenAI were running a cybersecurity test against an unreleased model, with the model’s guardrail features turned off. Rather than solve the test, the …
750
North Korean campaign targeting security researchers
Threat Analysis Group shares findings on a new campaign by North Korean actors targeting security researchers.