1081
Nx compromised: malware uses Claude code CLI to explore the filesystem
What is s1ngularity-repository? Nx is compromised and the malware steals wallets and API keys using Claude CLI or Gemini.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,768 posts.
1082
GDPR enforcer rules that IAB Europe’s consent popups are unlawful
EU data protection authorities find that the consent popups that plagued Europeans for years are illegal. All data collected through them must be deleted. This decision impacts Google’s, Amazon’s and Microsoft’s online advertising businesses.
1083
Keylogger in Hewlett-Packard Audio Driver
Security reviews of modern Windows Active Domain infrastructures are – from our point of view – quite sobering. Therefore, we often look left and right, when, for example, examining the hardening of protection mechanisms of a workstation. Here, we often find all sorts of dangerous and ill-conceived stuff. We want to…
1084
SELinux is unmanageable; just turn it off if it gets in your way
I’ve been an SELinux complexity apologist for years. Lately, I’ve concluded that every implementation with difficult-to-configure policies is just unmanageable.
1085
Firefox tracking protection decreases page load time by 44%
Edited to add: I wrote a followup post to address comments here and elsewhere that advertising is working as intended. This paper has been ...
1086
A new type of phishing attack. Works on savvy users.
In essence, a phishing attack is a kind of hack used by cybercriminals to trick victims into performing a certain activity. These emails are frequently sent
1087
A heap overflow and SSO misconfiguration to compromise OpenAI internal repos
A heap overflow and SSO misconfiguration to compromise OpenAI internal repositories
1088
Speeding up Linux disk encryption
Encrypting data at rest is vital for Cloudflare with more than 200 data centres across the world. In this post, we will investigate the performance of disk encryption on Linux and explain how we made it at least two times faster for ourselves and our customers!
1089
China collecting Apple iCloud data
Fighting censorship with technology since 2011. We use AI to monitor censorship and expand free speech worldwide.
1090
VPN location claims don't match real traffic exits
17 out of 20 popular VPNs exit traffic from different countries than they claim. Dig into what that means and why it matters in our VPN report.
1091
Google collects metadata from Android phones
[German]It seems that Google has established a surveillance function for Android phones. They are claiming the right, to collect and store meta data from incoming/outgoing phone calls and SMS from…
1092
1093
Auditing GitHub users’ SSH key quality
If you have just/as of late gotten an email about your keys being revoked, this is because of me, and if you have, you should really go through and make sure that no one has done anything terrible to you, since you have opened yourself to people doing very mean things to you for what is most likely a very long time.
1094
1095
Leaked document: EU Presidency calls for massive internet filtering
A Council of the European Union document leaked by Statewatch on 30 August reveals that during the summer months, that Estonia (current EU Presidency) has been pushing the other Member States to strengthen indiscriminate internet surveillance, and to follow in the footsteps of China regarding online censorship…
1096
Emulating AirTags to upload arbitrary data via Apple's FindMy network
Apple AirTags: Arbitrary data can be uploaded from non-internet-connected devices by sending Find My BLE broadcasts to nearby Apple devices. We're releasing an ESP32 firmware that turns the microcontroller into an (upload only) modem, and a macOS application to retrieve, decode and display the uploaded data.
1097
Cracking Meta's Messenger Certificate Pinning on macOS
Bypassing certificate pinning in Meta’s Messenger application on macOS.
1098
OAuth from First Principles
I've wanted to write a blog post for everyone who learns things the same way that I do; by trying to break them. I'll start off with an awfully flawed implementation that authorizes a user with a 3...
1099
Tracking the Fake GitHub Star Black Market
Use Dagster, dbt, and BigQuery to analyze suspicious GitHub star activity and protect open-source credibility.
1100
Malicious PyPI packages stealing credit cards and injecting code
JFrog finds a new supply chain attack targeting python developers using the PyPI repository
1101
1102
A thousand fewer paths to root
OpenAI built an autonomous pipeline that found, validated, and generated patches for 948 local privilege-escalation vulnerabilities in the Linux kernel.
1103
1104
1105
Right to root access
right to repair laws should include provisions requiring manufacturers to unlock a device's bootloader (to provide root access) upon consumer request.
1106
Can we believe our eyes? Misleading people with Unicode.
Access to this page requires authorization. You can try signing in or changing directories .
1107
InstaHide Disappointingly Wins Bell Labs Prize, 2nd Place
[What follows are my thoughts on some recent research in machine learning privacy. These are my thoughts, and do not represent those of others.]
1108
Claude Code reads AGENTS.md only when telemetry is on [fixed]
Claude Code 2.1.277 added AGENTS.md support, but the loader sits behind a remote feature flag. With telemetry or nonessential traffic turned off, a local AGENTS.md is skipped without a warning. This is what I measured and the one-line CLAUDE.md I use instead.
1109
PRISM – NSA surveillance program did not prevent a single terrorist attack
Mass surveillance costs millions of Dollars. Yet, it does not improve security.
1110