1141
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,768 posts.
1142
Reverse engineering a camera protocol for fun and profit
Way back in late 2019 , I dissected a Reolink B800 IP camera to demonstrate the various parts of an embedded Linux system. It’s fairly nice hardware, actually—it has a 4K video sensor, a microphone, power over Ethernet, and is nominally waterproof. And yes, it runs Linux.
1143
You’re muted – or are you? Videoconferencing apps may listen when mic is off
Not only did researchers find that the apps gather audio data while "mute" is activated; they could identify activities picked up when microphones weren't believed to be on, such as eating, playing music, typing and cleaning.
1144
Secret Dots from Printer Outed NSA Leaker
Today, The Intercept released documents on election tampering from an NSA leaker. Later, the arrest warrant request for an NSA contractor ...
1145
Secure Secure Shell
No ads, no tracking. Ever.<br/> <strong>blog.stribik.technology</strong> is completely static, without cookies or javascript.<br/> <strong>comments.stribik.technology</strong> uses javascript and local storage, it's loaded when you click
1146
The New TextSecure: Privacy Beyond SMS
Today’s release of TextSecure is the final step in the transition from a private SMS app to a private asynchronous IM app that does not depend on SMS/MMS. Using the lessons we’ve learned from the SMS environment over the past four years, we’ve developed an open protocol for asynchronous chat that...
1147
Vendors must start adding physical on/off switches to devices that can spy on us
Update (May 15, 2019): This post was linked and its author quoted as a source in this Fast Company article on the same subject. Where's my webcam's off switch? Have you ever noticed that your webcam doesn't have an "off" switch? I looked on Amazon, and I couldn't find any webcams for sale that
1148
CISA Admin Leaked AWS GovCloud Keys on GitHub
Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said the public archive included files…
1149
1150
eBay is port scanning visitors to their website
Websites are scanning for open ports on your PC to help fight fraud, but this data also flows into a massive, global tracking database.
1151
1152
Nikola: How to Parlay an Ocean of Lies into a Partnership with GM
Initial Disclosure: After extensive research, we have taken a short position in shares of Nikola Corp. This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.
1153
Always-on Processor magic: How Find My works while iPhone is powered off
Wireless and firmware hacking, PhD life, Technology
1154
Mullvad is now available on Amazon
For the first time in our history you can buy Mullvad VPN physical activation codes on Amazon!
1155
Microsoft buys corp.com so bad guys can’t
In February, KrebsOnSecurity told the story of a private citizen auctioning off the dangerous domain corp.com for the starting price of $1.7 million . Domain experts called corp.com dangerous because years of testing showed whoever wields it would have access to an unending stream of passwords, email and other…
1156
CSAR: European Parliament rejects mass scanning of private messages
This marks a positive development for human rights in one of the most controversial draft European Union (EU) laws in recent memory.
1157
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
Secure everything coding agents build, use, and ship - prevent risk before code exists, AutoFix the backlog, and protect the coding agents and supply chain.
1158
Review of Mullvad VPN
X41 releases the audit report of Mullvad VPN
1159
1160
FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals
On Monday, Oct. 26, KrebsOnSecurity began following up on a tip from a reliable source that an aggressive Russian cybercriminal gang known for deploying ransomware was preparing to disrupt information technology systems at hundreds of hospitals, clinics and medical care facilities across the United States. Today…
1161
Why I use Firefox
I’m interested in HTML, CSS, and making the web less annoying
1162
1163
Identity thieves bypassed Experian security to view credit reports
Identity thieves have been exploiting a glaring security weakness in the website of Experian , one of the big three consumer credit reporting bureaus. Normally, Experian requires that those seeking a copy of their credit report successfully answer several multiple choice questions about their financial history. But…
1164
1165
Nevada court shuts down police use of federal loophole for civil forfeiture
RENO, Nev.—In a major victory for property rights, today a Washoe County judge ruled that Nevada law enforcement cannot use a federal program to bypass […]
1166
Bitwarden design flaw: Server side iterations
Bitwarden is a hot candidate for a LastPass replacement. Looking into how they encrypt data, it doesn’t do things that much better however.
1167
1168
1169
Nvidia GPUs can break Chrome's incognito mode
When I launched Diablo III, I didn’t expect the pornography I had been looking at hours previously to be splashed on the screen. But that’s exactly what replaced the black loading scree…
1170
Introducing Collusion: Discover who’s tracking you online
Web Extension version of the Firefox Lightbeam add-on - mozilla/lightbeam-we