1561
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,768 posts.
1562
1563
1564
1565
AI and Mass Spying
Spying and surveillance are different but related things. If I hired a private detective to spy on you, that detective could hide a bug in your home or car, tap your phone, and listen to what you said. At the end, I would get a report of all the conversations you had and the contents of those conversations. If I hired…
1566
1567
Uncomfortable Questions About Android Developer Verification
Google announced a program that is proving to be unpopular among Android app development experts. I have questions.
1568
Facebook vulnerability 2013
Click here to share This article on facebook Facebook Exploit [ post to facebook users even they are not in friend...
1569
A closer look at a BGP anomaly in Venezuela
There has been speculation about the cause of a BGP anomaly observed in Venezuela on January 2. We take a look at BGP route leaks, and dive into what the data suggests caused the anomaly in question.
1570
Another 0-day looms for many Western Digital users
Countless Western Digital customers saw their MyBook Live network storage drives remotely wiped in the past month thanks to a bug in a product line the company stopped supporting in 2015, as well as a previously unknown zero-day flaw. But there is a similarly serious zero-day flaw present in a much broader range of…
1571
Recent 'MFA Bombing' Attacks Targeting Apple Users
Several Apple customers recently reported being targeted in elaborate phishing attacks that involve what appears to be a bug in Apple’s password reset feature. In this scenario, a target’s Apple devices are forced to display dozens of system-level prompts that prevent the devices from being used until the recipient…
1572
GPT-6 Astra Solves a WWI German Radio Cipher
Scienceblogs.de, a German science blogging portal, includes a relatively famous list of 50 unsolved ciphers, which range from cryptograms published by serial killers to the famous Voynich manuscript.
1573
1574
1575
IRS to ditch biometric requirement for online access
The Internal Revenue Service (IRS) said today it will be transitioning away from requiring biometric data from taxpayers who wish to access their records at the agency’s website. The reversal comes as privacy experts and lawmakers have been pushing the IRS and other federal agencies to find less intrusive methods for…
1576
Remove Google Search History Before New Privacy Policy Takes Effect
[UPDATE 2/22/2012] It is important to note that disabling Web History in your Google account will not prevent Google from gathering and storing this information and using it for internal purposes. More information at the end of this post. On March 1st, Google will implement its new, unified privacy policy, which will…
1577
Just the rumour of a bug is enough to find an exploit these days
Thinking through how the conventional OSS security embargoes no longer buy us time, and what open source maintainers might do instead to respond
1578
Breaking Claude Code Opus 5 Auto Mode
In this post, we explore how a simple website summary request hijacks Claude Code Opus 5 in Auto Mode and achieves code execution with 60-80% attack success …
1579
On Hacking MicroSD Cards
Today at the Chaos Computer Congress ( 30C3 ), xobs and I disclosed a finding that some SD cards contain vulnerabilities that allow arbitrary code execution — on the memory card itself. On the dark side, code execution on the memory card enables a class of MITM (man-in-the-middle) attacks, where the card seems to be…
1580
Extracting the private key from a TREZOR with an oscilloscope (2015)
Homepage of Jochen Hoenicke
1581
Claude Code VS Code extension with backdoor released on Cursor marketplace
Yesterday, Anthropic were compromised and used to stage a global supply chain attack.
1582
LinkedIn password leak
CES 2015 was a superb event in terms of the amount of new technology per square foot. But, from an information security standpoint, it did not appear all that positive.
1583
1584
Privacy Is Just the First Step, the Goal Is Data Ownership
Privacy for privacy sake is a weak argument, and privacy advocates should abandon it.
1585
Fighting the New York Times' invasion of user privacy
OpenAI is fighting the New York Times’ demand for 20 million private ChatGPT conversations and accelerating new security and privacy protections to protect your data.
1586
1587
What Spectre and Meltdown Mean for WebKit
Security researchers have recently uncovered security issues known as Meltdown and Spectre.
1588
Hacking Moltbook
Learn how a misconfigured Supabase database at Moltbook exposed 1.5M API keys, private messages, and user emails, enabling full AI agent takeover.
1589
WebKit Tracking Prevention Policy
Today we are publishing the WebKit Tracking Prevention Policy, covering: What types of tracking WebKit will prevent.
1590
EU's concealment of secret 'expert list' on CSAM regulation is maladministration
After a year-long inquiry, the EU Ombudsman recommends that the European Commission should monitor stages of progress in every Big Tech case that the Irish Data Protection Commission is responsible for.