7531
Introducing selfie for sign-in: a new way to access your Google Account
Selfie video gives you more options if you’re ever locked out or don’t have access to your usual phone or computer.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,772 posts.
7532
You cannot have our user's data
sourcehut is a network of useful open source tools for software project maintainers and collaborators, including git repos, bug tracking, continuous integration, and mailing lists.
7533
Blockchain and Trust
In his 2008 white paper that first proposed bitcoin, the anonymous Satoshi Nakamoto concluded with: “We have proposed a system for electronic transactions without relying on trust.” He was referring to blockchain, the system behind bitcoin cryptocurrency. The circumvention of trust is a great promise, but it’s just…
7534
Rust Cryptography Should Be Written in Rust
Rust should be improved to provide the necessary building blocks that are needed to write cryptography code that is free from timing side channels and similar hazards. These facilities should not be restricted to code within Rust -provided or -endorsed libraries; anybody should be able to use them to publish a crate…
7535
What security does a default OpenBSD installation offer?
In this text I will explain what makes OpenBSD secure by default when you install it. Do not take this for a security analysis, but more like a guide to help you understand what is done by OpenBSD to have a secure environment. The purpose of this text is not to compare OpenBSD to other OSes but to say what you can…
7536
Google Search/Web history disable does nothing for privacy
There seems to be some kind of misunderstanding about the Google Search/Web History disable switch that google provides to its more privacy conscious users. It’s not exactly the most advertised feature (you won’t find it in your profile page) to begin with, but once you do find it (it’s on the history page, you have…
7537
The EU Terrorist Content Regulation – a threat to the ecosystem and user rights
The EU has proposed a new law aimed at terrorist content online. Here we outline how the proposal poses a risk for rights and the internet ecosystem.
7538
7539
7540
7541
Are We PEP740 Yet?
PEP 740 is a Python standard for defining cryptographically verifiable attestations hosted by indices like PyPI.
7542
Njalla – A privacy-aware domain registration service
FOR IMMACULATE RELEASE. Announcing the opening of NJAL.LA
7543
7544
TeleMessage Explorer: a new open source research tool
I've spent the last week or two writing code to make sense of the massive hack of data from TeleMessage, the comically insecure company that makes a modified Signal app that Trump's former national security advisor Mike Waltz was caught using. I've decided to publish my code
7545
Chrome users oblivious to Heartbleed revocation tsunami
Explore thought leadership, industry insights, and other resources related to cybercrime detection, disruption, and takedowns.
7546
7547
Helping to secure internet routing
The internet works reliably, in large part, on the basis of a key technology called Border Gateway Protocol (BGP). BGP is a means by which all junction points on the internet (routers) communicate with each other to dynamically establish the correct (and correctly weighted) paths that network packets should follow to…
7548
Android emulator abused to introduce malware onto PCs
Attackers have compromised the software distribution system of BigNox, developer of a popular Android emulator for PCs and Macs.
7549
Riseup moves to encrypted email in response to legal requests
After exhausting our legal options, Riseup recently chose to comply with two sealed warrants from the FBI, rather than facing contempt of court (which would have resulted in jail time for Riseup birds and/or termination of the Riseup organization). The first concerned the public contact address for an international…
7550
How widely used are security-based HTTP response headers?
In this blog I look at how widespread the usage of common security based HTTP response headers are in the Alexa Top 1 Million most visited sites.
7551
The quantum state of Linux kernel garbage collection
A deep dive into an in-the-wild Android exploit Guest Post by Xingyu Jin, Android Security Resea...
7552
ChaosDB Explained: Azure's Cosmos DB Vulnerability Walkthrough
This is the full story of the Azure ChaosDB Vulnerability that was discovered and disclosed by the Wiz Research Team, where we were able to gain complete unrestricted access to the databases of several thousand Microsoft Azure customers.
7553
The Great DOM Fuzz-Off of 2017
Posted by Ivan Fratric, Project ZeroIntroductionHistorically, DOM engines have been one of the la...
7554
Cascading Spy Sheets: Exploiting the Complexity of Modern CSS for Fingerprinting
In an attempt to combat user tracking, both privacy-aware browsers (e.g., Tor) and email applications usually disable JavaScript. This effectively closes a major angle for user fingerprinting. However, recent findings hint at the potential for privacy leakage through selected Cascading Style Sheets (CSS) features…
7555
7556
7557
7558
Unlocking eBPF power
Spiral journey over kubernetes, cloud and devops world.
7559
Reverse Engineering the Soundcloud API
Hi guys, in this post we will learn how to bypass downloading restrictions on Soundcloud. We will create a Python script which will allow us to download even…
7560
Software sandboxing: The basics (2025)
Diving into the territory of software sandboxing is diving into mostly uncharted territory. The necessary pieces to implement good sandboxing in your software are scattered all-around and the pioneers haven’t yet gathered enough knowledge into an unified mappa mundi that can guide new sailors through some well…