1471
Google Cloud fraud defense, the next evolution of reCAPTCHA
Today at Next ‘26, we’re launching Google Cloud Fraud Defense, the trust platform for the agentic web and the next evolution of reCAPTCHA.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,768 posts.
1472
Microsoft technical breakdown of CrowdStrike incident
We examine the recent CrowdStrike outage and provide a technical overview of the root cause.
1473
A walking tour of surveillance infrastructure in Seattle (2020)
coveillance.org
1474
Bots are getting good at mimicking engagement
Click fraud protection in one tool: DataCops flags bot clicks, blocks repeat bots at your Cloudflare edge, keeps them out of the conversions 8 ad platforms learn from, and exports Google refund evidence.
1475
Chrome will stop displaying ads that are repeatedly flagged as disruptive
Starting on February 15, Chrome will stop showing all ads on sites that repeatedly display disruptive ads after they’ve been flagged.
1476
Firefox exploit found in the wild
Yesterday morning, August 5, a Firefox user informed us that an advertisement on a news site in Russia was serving a Firefox exploit that searched for sensitive files and uploaded ...
1477
ProtonMail Rewrites Your Emails
I switched to ProtonMail a few years back after getting fed up with Google. It’s been mostly acceptable, but a few months ago the Android client started mangling emails – if I hit “send” too soon, it would send out only part of what I’d typed; I had to wait 10 seconds or so after I finished typing before hitting send…
1478
FSE meets the FBI
I have for you a bizarre tale of scrapers, feds, data poisoning, Torswats, and everyone's favorite fedi instance. It veers technical, because I suspect it will be of interest to other people running servers with UGC (i.e., every fedi instance), and also because the mechanics of how I figured out what I figured out…
1479
Intent to end OCSP service
Today we are announcing our intent to end Online Certificate Status Protocol (OCSP) support in favor of Certificate Revocation Lists (CRLs) as soon as possible. OCSP and CRLs are both mechanisms by which CAs can communicate certificate revocation information, but CRLs have significant advantages over OCSP. Let’s…
1480
An American Privacy Emergency
Scott’s foreword: Cynthia Dwork is Gordon McKay Professor of Computer Science at Harvard, and a pioneer in the fields of differential privacy and algorithmic fairness. On my recent travels to…
1481
1482
1.1.1.1 for Families
Introducing 1.1.1.1 for Families — the easiest way to add a layer of protection to your home network and protect it from malware and adult content.
1483
Signal Adds Cryptocurrency Support
According to Wired, Signal is adding support for the cryptocurrency MobileCoin, “a form of digital cash designed to work efficiently on mobile devices while protecting users’ privacy and even their anonymity.” Moxie Marlinspike, the creator of Signal and CEO of the nonprofit that runs it, describes the new payments…
1484
Brute-forcing a macOS user’s real name from a browser using mDNS
Exploring potential privacy vulnerabilities in Apple devices. This article discusses revealing a user's first name without permissions using the mDNS protocol.
1485
Google Docs in a clean-room browser
A detailed description of how we made Google Docs run inside the new Flow Browser. The number of websites that work in Flow is increasing regularly.
1486
SSH Handshake Explained
Secure Shell (SSH) is a widely used Transport Layer Protocol to secure connections between clients and servers. In this post we explain how SSH handshake works.
1487
Apple's SSL/TLS bug
Yesterday, Apple pushed a rather spooky security update for iOS that suggested that something was horribly wrong with SSL/TLS in iOS but gave no details. Since the answer is at the top of the Hacker News thread, I guess the cat's out of the bag already and we're into the misinformation-quashing stage now.
1488
Class action against Oracle’s worldwide surveillance machine
Oracle claims to have amassed dossiers on 5 billion people, and generates $42.4 billion in annual revenue. ICCL's Dr Johnny Ryan is a lead plaintiff in a new U.S. class action to stop its global surveillance machine.
1489
1Password for Linux beta
Buckle up Linux Desktop users! We just opened an awesome ride that we'd love for you to join us on. 🎢 🙌🏼
1490
1491
DOGE as a National Cyberattack
In the span of just weeks, the US government has experienced what may be the most consequential security breach in its history—not through a sophisticated cyberattack or an act of foreign espionage, but through official orders by a billionaire with a poorly defined government role. And the implications for national…
1492
“Invalid username or password” is a useless security measure
Login attempts fail because computer users can't remember their email or didn't input the right password. Most websites on the Internet won't tell you which one is actually incorrect.
1493
Android 14 introduces cellular connectivity security features
Posted by Roger Piqueras Jover, Yomna Nasser, and Sudhi Herle Android is the first mobile operating system to introduce advanced cellular...
1494
1495
Keybase Exploding Messages
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
1496
1497
We Only Have Hours Left to Stop the NSA Expansion Bill
According to reports published Tuesday evening by Politico, a group of surveillance hawks in the House of Representatives is trying to ram through a bill that would extend mass surveillance by the National Security Agency. We expect a vote to happen on the House floor as early as tomorrow, which...
1498
Civil Liberties Groups and Internet Companies Demand an End to NSA Spying
UPDATE (1/15/14): Computing Using Educators, Inc, has added its name to the list. This brings the total to 87. Today, a bipartisan coalition of 86 civil liberties organizations and Internet companies – including the Electronic Frontier Foundation, reddit, Mozilla, FreedomWorks, and the American...
1499
1500
The Web Is Broken – Botnet Part 2
I guess you have all heard about the growing problem of AI companies trying to aggressively collect whatever data they can get their hands on to train their models. This has caused an explosive surge in web crawlers relentlessly hitting servers big and small. But who runs these crawlers? Turns out — it could be you!