8401
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,773 posts.
8402
Tightening up Privacy in Matrix
Matrix, the open protocol for secure decentralised communications
8403
DRM Non-Aggression on the Table at W3C
The World Wide Web Consortium (W3C) will consider adopting a DRM non-aggression covenant at its Advisory Committee meeting in Boston next week. EFF has attended several of these meetings before as a W3C member, always with the intent to persuade the W3C that supporting DRM is a bad idea for the Web...
8404
Spanish police plans to extend use of its lie-detector while efficacy is unclear
Veripol is a software that assesses the veracity of complaints filed with the Spanish national police. It was introduced in 2018, but it's unclear if it works as intended.
8405
8406
Protect Public School Students from Surveillance of Off-Campus Speech
EFF filed an amicus brief in Arizona federal court arguing that public school students need private digital spaces beyond their school’s reach to speak freely, without the specter of constant school surveillance and punishment.
8407
Patching Is Hard
There are many news reports of a ransomware worm . Much of the National Health Service in the UK has been hit; so has FedEx . The patch for the flaw exploited by this malware has been out for a while, but many companies haven’t installed it. Naturally, this has prompted a lot of victim-blaming: they should have…
8408
U.S. Internet leaked years of internal, customer emails
The Minnesota-based Internet provider U.S. Internet Corp. has a business unit called Securence , which specializes in providing filtered, secure email services to businesses, educational institutions and government agencies worldwide. But until it was notified last week, U.S. Internet was publishing more than a…
8409
Mr. Robot Blind SQL Injection Vulnerability
So the other day I saw this article TheHackerNews and in Forbes how a hacker found a XSS vulnerability on Mr Robot Tv series official website. since I’m a big fan of the TV Series I went and …
8410
Arris / Arris-variant DSL/Fiber router critical vulnerability exposure
Cybersecurity researcher, entrepreneur, and engineer.
8411
Open Source Backdoor – Copyrighted Under GNU GPL
Malware code can be very small, and the impact can be very severe! In our daily tasks we find a lot of web-based malware that…
8412
Using AI to secure AI
One of Anthropic's quieter releases recently was their "Security Review," where Claude Code can identify and fix security issues in your code. But how good is it really? In my case, will it find issues with code it helped me write for my newsletter service…
8413
An important safety note about chown and symlinks (also chmod and chgrp)
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
8414
Introducing Docker Content Trust
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
8415
Inline and Sideline Approaches for Low-Cost Memory Safety in C
This technical report is based on a dissertation submitted November 2020 by the author for the degree of Doctor of Philosophy to the University of Cambridge, Selwyn College.
8416
The Factoring Cryptopocalypse
The key detail to understand about the work in the Joux papers is that it is limited to solving discrete logarithm problems over fields of small characteristic . As interesting as the work is, mathematically, it should not be a great surprise to cryptographers: We've known for over a decade that small-characteristic…
8417
8418
Unmasking the Privacy Risks of Apple Intelligence
We reveal AppleStorm, our investigation into how Apple AI’s eco-system quietly transmits messages (WhatsApp, iMessage) sent via Siri to Apple servers, even when it isn’t needed to complete the task.
8419
8420
8421
How to check if your Apple Silicon Mac is booting securely
How to check your Mac is booting in Full Security, and how to read its log to verify all the key steps involved in that process.
8422
Please Request Your Personal Data Held by Cambridge Analytica
By now, many people have probably heard about the company Cambridge Analytica . By its own admission, it played a major role in the succes...
8423
Bypassing a Python sandbox by abusing code objects
Awhile ago, I stumbled upon a service that let you write python-bots to interact with a number of external services. The basic idea was th...
8424
Modchips of the State
Collection of my projects and hacks.
8425
Kimwolf Botnet Swamps Anonymity Network I2P
For the past week, the massive “Internet of Things” (IoT) botnet known as Kimwolf has been disrupting The Invisible Internet Project (I2P), a decentralized, encrypted communications network designed to anonymize and secure online communications. I2P users started reporting disruptions in the network around the same…
8426
Breaking the Chain
Posted by James Forshaw, Wielder of Bolt Cutters.Much as we’d like it to be true, it seems ...
8427
Browser security beyond sandboxing
Read the latest about Microsoft Defender for Cloud Apps, and find helpful solutions from the digital security experts at Microsoft Security Blog.
8428
8429
AMD products are not susceptible to SPOILER exploit
Download drivers and software for AMD products — includes Windows and Linux support, auto-detect tools & detailed guides for installation.
8430
Apple Fight Could Lead to “Virtually Limitless” Surveillance Powers, Judge Warns
At stake in Apple's fight against government orders to break open locked iPhones could be the legal authorization for “virtually limitless” surveillance under the Internet of Things, according to a federal judge's order rejecting a government request in a New York drug case yesterday. Midway...