961
PayPal Freezes Mailpile Campaign Funds
[ Update: PayPal have unfrozen the account, for now at least. Thank you for your support!]
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,768 posts.
962
Reverse engineering Call of Duty anti-cheat
Interested in Anti-Cheat analysis? I highly recommend checking out Guided Hacking’s Anti-Cheat section. I’ve been reversing Black Ops Cold War for a while now, and I’ve finally decided to share my research regarding the user-mode anti-cheat inside the game. It’s not my intention to shame or promote cheating/bypassing…
963
Keeping secrecy the exception, not the rule
This morning we filed a new lawsuit in federal court against the United States government to stand up for what we believe are our customers’ constitutional and fundamental rights – rights that help protect privacy and promote free expression. This is not a decision we made lightly, and hence we wanted to share…
964
The Internet Is a Surveillance State
Polish translation I’m going to start with three data points. One: Some of the Chinese military hackers who were implicated in a broad set of attacks against the U.S. government and corporations were identified because they accessed Facebook from the same network infrastructure they used to carry out their attacks…
965
A Look at iMessage in iOS 14
Posted By Samuel Groß, Project Zero On December 20, Citizenlab published “The Great...
966
A Case of Stolen Source Code
Last week, for about three days, the macOS video transcoding app HandBrake was compromised . One of the two download servers for HandBrake was serving up a special malware-infested version of the app, that, when launched, would essentially give hackers remote control of your computer.
967
Web Scrapers Claim to Sell Personal Data on Facebook Users on a Hacker Forum
Data on over 1.5 billion Facebook users is being sold on a hacking-related forum, enabling cybercriminals advertisers to target users.
968
Xz: A microcosm of the interactions in open source projects
Originally a thread on Twitter about the xz/liblzma vulnerability, when I finished typing it, I realized I had a real world slice of Open Source interaction that deserved more attention.
969
970
PayPal 2FA Bypass
Security and Vulnerability Research
971
They stole my voice with AI
UPDATE 9/23: The CEO of Elecrow responded. I've posted a follow-up blog post with my reaction to the response and some other thoughts on AI voice cloning. Listen to this clip: Your browser does not support the video tag. I don't know about you, but that sounds pretty familiar. I mean I would like you to subscribe to…
972
Using HTTP Basic Auth in 2022
Field notes on shipping fast, privacy-first, evergreen web products.
973
974
ShotSpotter: listening in on the neighborhood
Last week, someone leaked a spreadsheet of SoundThinking sensors to Wired . You are probably asking "What is SoundThinking," because the company rebranded last year. They used to be called ShotSpotter, and their outdoor acoustic gunfire detection system still goes by the ShotSpotter name.
975
One-Click RCE in Asus's Preinstalled Driver Software
One-Click RCE in ASUS’s Preinstalled Driver Software Part Two of the ASUS series is out, read it here. Introduction This story begins with a conversation about new PC parts. After ignoring the advice from my friend, I bought a new ASUS motherboard for my PC. I was a little concerned about having a BIOS that would by…
976
977
EU-banned pesticides found in rice, tea and spices
foodwatch laboratory tests reveal the presence of pesticide residues in everyday foods — including substances not approved in the EU.
978
Less is safer: Reducing the risk of supply chain attacks
Supply chain attacks are malicious updates that sneak into open source code used by many apps. Here’s how we design Obsidian to ensure that the app is a secure and private environment for your thoughts.
979
An in-depth security review of the Intel Management Engine
Security Center
980
Flock Hardcoded the Password for America's Surveillance Infrastructure 53 Times
A responsible disclosure write-up on an organization-wide ArcGIS API key embedded across multiple public front-end bundles.
981
Reverse Engineering iOS 18 Inactivity Reboot
Wireless and firmware hacking, PhD life, Technology
982
Chinese Infinite Magical Hard-Drive
Chinese Magical Hard-Drive - Thursday, 07 April 2011 - Alex's blog
983
Fuzzing Ladybird with tools from Google Project Zero
While Ladybird does an okay job with well-formed web content, I thought it would be useful to throw some security research tools at it and see what kind of issues it might reveal.
984
Malicious code in the purescript NPM installer
I’m a software engineer based in Edinburgh, Scotland. My interests include getting computers to behave, helping other people get computers to behave, open source, maths, and music.
985
Zoom zero-day discovery
White hat hackers demonstrated a Zoom vulnerability allowing a Remote Code Execution attack at the Pwn2Own event.
986
987
Hackers Were Inside Citrix for Five Months
Networking software giant Citrix Systems says malicious hackers were inside its networks for five months between 2018 and 2019, making off with personal and financial data on company employees, contractors, interns, job candidates and their dependents. The disclosure comes almost a year after Citrix acknowledged that…
988
EU Agencies Falsely Report More Than 550 Archive.org URLs as Terrorist Content
CORRECTION: This post previously identified the sender of the 550 falsely identified URLs as Europol's EU Internet Referral Unit (EU IRU). The sender was in fact, the French national Internet Referral Unit, using Europol's application, which sends the email from an @europol.europa.eu address. The EU IRU has informed…
989
Stealth Cell Tower Disguised as Printer
Rogue cellular infrastructure disguised as office printer Oliver, 2015
990
The radix 2^51 trick (2017)
Starting from the “ones” position, we add 6 + 6 = 12, write down a 2 and carry a 1. We proceed to the left, one position at a time, until there are no more digits to add.