8371
One way to fix your rubbish password database
Suppose for a moment that you are running a web site that has a poorly implemented password database that stores password hashes using some...
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,773 posts.
8372
Hidden Cam Above Bluetooth Pump Skimmer
Tiny hidden spy cameras are a common sight at ATMs that have been tampered with by crooks who specialize in retrofitting the machines with card skimmers. But until this past week I’d never heard of hidden cameras being used at gas pumps in tandem with Bluetooth-based card skimming devices.
8373
Agentic Misalignment: How LLMs could be insider threats
New research on simulated blackmail, industrial espionage, and other misaligned behaviors in LLMs.
8374
Nordstrom Finds Cash Register Skimmers
Scam artists who deploy credit and debit card skimmers most often target ATMs, yet thieves can also use inexpensive, store-bought skimming devices to compromise modern-day cash registers. Just this past weekend, for instance, department store chain Nordstrom said it found a half-dozen of these skimmers affixed to…
8375
A Memory Safe Implementation of the Network Time Protocol
Folkert and the team at Tweede golf are helping us to build a memory safe NTP implementation. We asked them to share their experience in this blog post. Thank you for your partnership and contributions, Tweede golf team! Josh Aas, Head of ISRG’s Prossimo project For the last few months we at Tweede golf have been…
8376
Evolving Chrome's security indicators
Previously, we posted a proposal to mark all HTTP pages as definitively “not secure” and remove secure indicators for HTTPS pages. HTTPS us...
8377
8378
AppleTV 6.0 requires Fairplay-DRM Airplay Sources
Visit the Rogue Amoeba blog to read more.
8379
8380
Google banned almost 120k spam developer accounts in 2020 for the play store
Posted by Krish Vitaldevara, Director of Product Management Trust & Safety, Google Play Providing safe experiences to billions of users a...
8381
Apple and Google Monitor Notifications. We Need Push Notification Alternatives
We're here to stop surveillance by corporations like Google and Apple. That's why we replaced Google's FCM with our own notification system and keep Apple Notification Data at a minimum. Learn here why this is important.
8382
Passwordless Logins with Yubikey
Yubikey is currently the de facto device for U2F authentication. It enables adding an extra layer of security on top of SSH, system login, signing GPG keys,...
8383
Investigating a malware sample which sometimes fails to behave maliciously
SentinelOne's blog offers the latest news around cybersecurity, risk reduction, threat intelligence, and more. Sign up for our weekly digest to stay updated.
8384
KeePassXC 2.6.2 Released
KeePassXC Password Manager
8385
Why Security Backdoors are Bad (2016)
Recently, there has been a bit of controversy over the concept of the government or security agencies adding backdoors to services and…
8386
Notes on Analytics and Tracking in Onavo Protect for iOS
Recent media coverage of Onavo Protect encouraged me to investigate the code for the iOS version of their app. I wanted to determine what…
8387
Canada's awful new proposals on “harmful” content
Canada's government is poised to pass a "harmful content" regulation. It's a worst-in-class mutation of a dangerous idea that's swept the globe, in which governments demand that hamfisted tech giants remove broad categories of speech – too swiftly for meaningful analysis.
8388
What Is the PCI of Bank Payments?
Credit card users today can transact online with peace of mind because card-accepting merchants are subject to Payment Card Industry Data Security Standard (PCI DSS).
8389
If AI can read, then plain text can be weaponized (2019)
Advances in AI have helped automate many tasks that involve processing text. However, text-processing AI algorithms have their own unique vulnerabilities, researchers at IBM, Amazon and University of Texas have found.
8390
AWS Identity service handles 400M API calls every second
Amazon S3 turned 15 earlier this year, and Amazon EC2 will do the same in a couple of months. Today we are celebrating the tenth birthday of AWS Identity and Access Management (IAM). The First Decade Let’s take a walk through the last decade and revisit some of the most significant IAM launches: May 2011 […]
8391
UK intelligence censored report on global warming and homeland security
Series: I read it so you don't have to
8392
8393
A DoS Attack Against the C# Compiler
Generics in C# are certainly very useful and I find it amazing that we almost didn’t get them:
8394
8395
SQL Injection as a Feature
Looking at old applications, we always wonder who in their right mind thought of building them so badly. But every repository has its story and every effort has noble origins. I encountered such an ap
8396
8397
Security Vulnerability in Browser Interface Allows Computer Access via GPU
Researchers at TU Graz were successful with three different side-channel attacks on graphics cards via the ... » Computer science and IT » Read more ▸
8398
8399
CSS: The bomb inside your inbox
Gareth Heyes - gareth.heyes@portswigger.net - @garethheyes It's quite common for webmail clients to render untrusted CSS in a trusted UI. They attempt to make this safe using CSS sanitization. In this
8400