Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,768 posts.
Activision’s blind faith in the infallibility of their RICOCHET anti-cheat software , combined with a buggy and unstable Call of Duty: Modern Warfare II release, has resulted in faulty, permanent, and unappealable player account bans that prevent users from starting even the single-player game. These bans leave…
An unescaped separator in Telegram Desktop’s single-instance IPC lets one clicked link read arbitrary files off the disk and send them to the attacker, session files included.
Surprisingly (to me) Claude Code debugged my new ML-DSA implementation faster than I would have, finding the non-obvious low-level issue that was making Verify fail.
With Site Isolation enabled on Firefox for Desktop, Mozilla takes its security guarantees to the next level.
On Monday, the Chaos Computer Club (CCC) and the International League for Human Rights (ILMR), have filed a criminal complaint with the Federal Prosecutor General's office. The complaint is...
A weblog about Signals Intelligence, Communications Security and top level telecommunications equipment
Firefox Quantum - version 57 - introduced number of changes to the network requests scheduler. One of them is using data of the Tracking Protection database to delay load of scripts from tracking domains when possible during the time a page is actively loading and rendering - I call it tailing. This has a positive […]
At Signal, we’ve been thinking about the difficulty of private contact discovery for a long time. We’ve been working on strategies to improve our current design, and today we’ve published a new private contact discovery service. Using this service, Signal clients will be able to efficiently and s...
Posted by Adam Langley, Security Engineer On Friday, March 20th, we became aware of unauthorized digital certificates for several Google ...
Apart from this article, I also gave a talk at OHM2013 about this subject. The video of that talk (minus the first few minutes) is now online .
Some mobile apps share your personal data immediately after they're opened. This isn't compliant with EU privacy laws
Initial Disclosure: After extensive research, we have taken a short position in shares of Block, Inc. (NYSE: SQ). This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.
I originally wrote this for my friends and family in 2015, to explain why the latest Facebook privacy policy is really harmful. It’s since been read b
The members of the Global Encryption Coalition’s Steering Committee issued a statement on the EU-US collaboration against encryption.
Enhancing kernel isolation, one step at a time.
When people started calling my personal mobile number with questions about a voluntary organisation I'm involved with, I was confused: we weren't sharing that number. It turns out that Google had decided to take the number I used to verify my identity for Google Business some years prior and start putting it in Google…
Senate to Vote on USA FREEDOM Act Later in the WeekSection 215 has expired. At least for now.The law that the NSA used to authorize its collection of vast amounts of information about the telephone calls of ordinary Americans is no more. Even though it’s likely temporary, it’s a good thing and we...
A couple of months ago, some friends invited me to give a talk at NullByte Security Conference . I started to study about some embedded devi...
Fang-Pen Lin's blog about programming
Blog post about a reverse engineering project
A few weeks ago, I was part of a talk at DEF CON 31 called The Hackers, The Lawyers, and the Defense Fund. I was asked to share my experience receiving a legal…
Derek Sivers official site. Thoughts on philosophy, culture, self-improvement. Author of Useful Not True, How to Live, Hell Yeah or No, Anything You Want.
Ninety percent of Americans have used a credit card, but far fewer understand the underlying systems enabling their payments. So let’s dive…
ACLU documents how surveillance camera company Flock has lied to local officials about its operations
For the past few years, security research has been something I’ve done in my spare time. I know there are people that make a living off of bug bounty programs, but I’ve personally just spent a few hours here and there whenever I feel like it.
We have come to a point where end-to-end encrypting all your private data and private communications
EFF has been working on multiple fronts to end a widespread violation of digital liberty—warrantless searches of travelers’ electronic devices at the border. Government policies allow border agents to search and confiscate our cell phones, tablets, and laptops at airports and border crossings for...
The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG’s…
Christiaan Brand, Group Product Manager We are excited to announce an update to Google Authenticator , across both iOS and Android, which a...
