7831
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,773 posts.
7832
Notorious ‘Hijack Factory’ Shunned from Web
Score one for the good guys: Bitcanal , a Portuguese Web hosting firm long accused of helping spammers hijack large swaths of dormant Internet address space over the years, was summarily kicked off the Internet this week after a half-dozen of the company’s bandwidth providers chose to sever ties with the company.
7833
Introducing rkt’s ability to detect privilege escalation attacks on containers
No single cloud fits all. Explore how we build a more flexible future with hybrid cloud.
7834
Speeding up and strengthening HTTPS connections for Chrome on Android
Posted by Elie Bursztein, Anti-Abuse Research Lead Earlier this year, we deployed a new TLS cipher suite in Chrome that operates three tim...
7835
The Default Trap: Why Anthropic's Data Policy Change Matters
A quick note on the importance of reading the terms of service!
7836
(Post-Quantum) Cryptographic Right Answers
In the tradition started by Colin Percival and Thomas Ptacek, a set of “Cryptographic Right Answers” updated for the accelerated post-quantum transition timeline.
7837
Security in 2020
There’s really no such thing as security in the abstract. Security can only be defined in relation to something else. You’re secure from something or against something. In the next 10 years, the traditional definition of IT security—that it protects you from hackers, criminals, and other bad guys—will undergo a…
7838
Iranian hackers obtain fraudulent HTTPS certificates
On March 15th, an HTTPS/TLS Certificate Authority (CA) was tricked into issuing fraudulent certificates that posed a dire risk to Internet security. Based on currently available information, the incident got close to — but was not quite — an Internet-wide security meltdown. As this post will...
7839
IDIV DoS (INT_MIN / -1)
A little fun for the last day of 2012: how to crash a program via division? x86’s IDIV instruction traps not only on division by zero, but also on INT_MIN / -1 (signed integer overflow).
7840
7841
7842
Cisco buffer overflow vulnerability with remote code execution
A vulnerability in the Internet Key Exchange (IKE) version 1 (v1) and IKE version 2 (v2) code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area. An attacker…
7843
DEF CON 24 Badge Challenge
Council of 9 ventured forth to DEFCON 24 to compete in this year's badge challenge, brought to us each year by 1o57. There was determination among the team to win at DC24 to ensure that last year's...
7844
How to botch TLS forward secrecy
There's been some discussion about forward secret TLS recently, spurred, I think, by this piece from Declan McCullagh on CNET.
7845
Free the Internet: The Tor Project's annual fundraiser
This year we are calling to FREE THE INTERNET. Your donation will help break the chains of censorship and surveillance. If you give now during the campaign, your donation will be matched by our supporters at Power Up Privacy. This means a $25 donation will have a $50 impact.
7846
7847
The Trackers and SDKs in ChatGPT, Claude, Grok and Perplexity
Well for a quick weekend recap I’m going to look at which 3rd party SDKs and API calls I can find in the big 4 Android chat apps based. We’ll be using free data from AppGoblin which you can feel free to browse at any of the links below or on tables. Data is collected via de-compiled SDKs and MITM API traffic.
7848
7849
Gov. Brown Signs CalECPA, Requiring Police to Get a Warrant for Your Data
Californians can rest assured that law enforcement can’t poke around in their digital records without first obtaining a warrant. Today, Gov. Jerry Brown has signed S.B. 178, the California Electronic Communications Privacy Act (CalECPA). After months of pressure from public interest groups, media...
7850
7851
A Unikernel Firewall for QubesOS
QubesOS provides a desktop operating system made up of multiple virtual machines, running under Xen. To protect against buggy network drivers, the …
7852
GDPR Hysteria Part II, Nuts and Bolts, Actionable Advice
Part I of this is here , if you haven’t read it yet please do so before reading this installment, it will help to establish context.
7853
Chrome 56 Beta: “Not Secure” Warning, Web Bluetooth, and CSS Position: Sticky
Unless otherwise noted, changes described below apply to the newest Chrome Beta channel release for Android, Chrome OS, Linux, Mac, and Wi...
7854
7855
Updates for older platforms to protect against potential nation-state activity
Microsoft releases additional updates for older platforms to protect against potential nation-state activity
7856
Remote Attestation
If it quacks like a duck...
7857
The Private Blockchain Fallacy
In all the blockchain hype, a simple, yet self-refuting idea keeps popping up: a Private Blockchain .
7858
7859
An algorithmic failure beneath the secret ballot
The secret ballot is one of the load-bearing walls of democracy. In Georgia, as in most states, this allows you to know whether your neighbor voted, but never who they voted for. Yet, in multiple states including Georgia, that guarantee is actively at risk.
7860
Google Wallet launches new age and identity verification features (ZK proofs)
Learn more about new Google Wallet updates, including new ways to use your digital ID for age and identity verification.