1291
Google Chrome Hacked?
VUPEN Security provides vulnerability management and intelligence solutions (advisories, analysis, exploits).
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,768 posts.
1292
Gmail Will Warn If Message Is Not Authenticated/Encrypted
Making email safer for you with two new security features in Gmail on the web.
1293
Myequifax.com Bypasses Credit Freeze Pin
Most people who have frozen their credit files with Equifax have been issued a numeric Personal Identification Number (PIN) which is supposed to be required before a freeze can be lifted or thawed. Unfortunately, if you don’t already have an account at the credit bureau’s new myEquifax portal , it may be simple for…
1294
More Than 1M Google Accounts Breached by Gooligan
As a result of a lot of hard work done by our security research teams, we revealed today a new and alarming malware campaign. The attack campaign, named %
1295
Kaspersky OS
At last – we’ve done it! I’ve anticipated this day for ages – the day when the first commercially available mass market hardware device based our own secure operating system landed on my desk.
1296
Norwegian ban on Meta behavioral advertising extended to entire EU
Det europeiske personvernrådet har nå bestemt at det norske forbudet mot adferdsbasert markedsføring på Facebook og Instagram skal bli permanent og utvides til å gjelde hele EU/EØS.
1297
Fully homomorphic encryption and the dawn of a private internet
This article is archived on mirror.xyz , and attracted discussion on Hacker News Generated by this notebooklm Gene Spafford "Using encryption on the…
1298
How to Yubikey
How to use and configure a Yubikey
1299
773M Password ‘Megabreach’ Is Years Old
My inbox and Twitter messages positively lit up today with people forwarding stories from Wired and other publications about a supposedly new trove of nearly 773 million unique email addresses and 21 million unique passwords that were posted to a hacking forum. A story in The Guardian breathlessly dubbed it “the…
1300
The Most Dangerous Censorship
Invisible but present, and far from the eyes of the public
1301
A 0-click exploit chain for the Pixel 10
We recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible t...
1302
Let's Encrypt's New Root and Intermediate Certificates
On Thursday, September 3rd, 2020, Let’s Encrypt issued six new certificates: one root, four intermediates, and one cross-sign. These new certificates are part of our larger plan to improve privacy on the web, by making ECDSA end-entity certificates widely available, and by making certificates smaller. Given that we…
1303
Open-sourcing gVisor, a sandboxed container runtime
Introducing gVisor, a new kind of sandbox that helps provide secure isolation for containers, while being more lightweight than a virtual machine (VM).
1304
1305
1306
Twilio’s toll fraud problem
On New Years’ Day, I woke up to 40 emails from Twilio, each with the subject line of, “Your Twilio account has been recharged.” In total…
1307
FFS SSL
wingolog: article: ffs ssl
1308
How I Found a Vulnerability to Hack iCloud Accounts and How Apple Reacted to It
This article is about how I found a vulnerability on Apple forgot password endpoint that allowed me to takeover an iCloud account. The vulnerability is completely patched by Apple security team and it no longer works. Apple Security Team rewarded me $18,000 USD as a part of their bounty program but I refused to…
1309
1310
IBM Releases Fully Homomorphic Encryption Toolkit for macOS and iOS
At IBM Research, we’re inventing what’s next in AI, quantum computing, and hybrid cloud to shape the world ahead.
1311
Exploding Git Repositories
The git bomb. Crafting compact repos that can't be cloned.
1312
1313
Looking back at how Signal works
In the midst of world-wide protests against racism and police brutality, a lot of people are becoming more immediately aware and concerned about the security of their data and online communication. We’ve gotten a lot of questions at Signal over the past week, so we wanted to briefly recap how it ...
1314
Focus by Firefox, a Content Blocker for iOS
Today we’re pleased to announce the launch of Focus by Firefox, a free content blocker for Safari users on iOS 9 that gives users greater control of their mobile Web ...
1315
Attackers can decloak routing-based VPNs
We discovered a fundamental design problem in VPNs and we're calling it TunnelVision. This problem lets someone see what you're doing online, even if you think you're safely using a VPN.
1316
Seven diabetes patients die due to undisclosed bug in Abbott's glucose monitors
I wrote last month about my diabetes diagnosis this year and my difficult choice to wear a proprietary device (called a CGM) on my arm 24/7 to continuously monitor my glucose levels. Like my friend and colleague, Karen M. Sandler — who previously made a much higher-stakes choice to receive a proprietary implanted…
1317
OpenSSH Post-Quantum Cryptography
OpenSSH post quantum cryptography
1318
1319
NIST Elliptic Curves Seeds Bounty
Announcing a $12,288 bounty (tripled to charity) for cracking the five seeds selected by the NSA in the '90s for the NIST elliptic curve standard.
1320
