1711
The Online Safety Bill: An attack on encryption
The Online Safety Bill has some genuinely good intentions, but the proposed legislation is remarkably poor.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,768 posts.
1712
Google removed our website from search because it uses YouTube-dl
Update: Google accepted our DMCA counter notice and reinstated all 317 Kapwing webpages that they took down. In the week that the takedown was in effect, our website traffic was down 30%. A week ago, we received an email that every website owner dreads - a notification of a DMCA
1713
Canada’s Bill C-22 Is a Repackaged Version of Last Year’s Surveillance Nightmare
Last year, Canada's Bill C-2 was so bad it didn’t even make it to committee because of the backlash from the privacy community. Now, the spring’s worst sequel, Bill C-22, aka The Lawful Access Act, is trying it again.
1714
Over 400 vulnerabilities on Qualcomm’s Snapdragon chip
Over 400 vulnerabilities on Qualcomm’s Snapdragon chip threaten mobile phones’ usability worldwide With over 3 billion users globally, smartphones are an %
1715
We abused Slack's TURN servers to gain access to internal services
Slack's TURN server allowed relaying of TCP connections and UDP packets to internal Slack network and meta-data services on AWS.
1716
Abusing Go's Infrastructure
I apologize if this information is already known, but I couldn’t find any references about it and I wanted to understand what was going on and share with you because I think there is some value doing it. In case this wasn’t known, I apologize to the Go team for not talking to them first and jumping the full disclosure…
1717
How I implemented my own crypto
Despite advice to the contrary, I have implemented my own crypto for serious use. Here's how.
1718
We identified a North Korean hacker who tried to get a job
Cybersecurity isn’t just a priority for Kraken, it’s part of our origin story and embedded into our DNA.
1719
LinkedIn is ignoring user settings
Logged out users are prevented from reaching LinkedIn profiles set to complete public visibility
1720
OAuth Will Murder Your Children
Written pieces, talks, and other bits by Zach Holman.
1721
Android App Reverse Engineering 101
Learn to reverse engineer Android applications!
1722
Zero Trust SIM
We’re announcing the first Zero Trust SIM: the next major part of Cloudflare One, combining both software and hardware layers to rethink mobile device security for organizations
1723
Tor Browser 12.0
Tor Browser 12.0 is now available. This new release updates Tor Browser to Firefox Extended Support Release 102.
1724
Zero-day CSS: CVE-2026-2441 exists in the wild
The Stable channel has been updated to 145.0.7632.75/76 for Windows/Mac and 145.0.7632.75 for Linux, which will roll out over the coming d...
1725
GDPR – A Practical Guide for Developers (2017)
You’ve probably heard about GDPR. The new European data protection regulation that applies practically to everyone. Especially if you are working in a big company, it’s most likely that there’sContinue reading
1726
WireGuard multihop available in the Mullvad app
To further increase your privacy and make your traffic harder to analyze, you can now route all your traffic through two servers instead of just one, directly in our desktop app, version 2022.1 and newer.
1727
An analysis of the Nomx secure communications device
With slick marketing, catchy taglines and some pretty bold claims about their security, nomx claim to have cracked email security. Let's see if they have.
1728
Why I Quit Using Google
So I was recently asked why I prefer to use free and open source software over more conventional and popular proprietary software and services. A few years ago I was an avid Google user. I was deep…
1729
Why Is Location Data No Longer Private?
The past month has seen one blockbuster revelation after another about how our mobile phone and broadband providers have been leaking highly sensitive customer information, including real-time location data and customer account details. In the wake of these consumer privacy debacles, many are left wondering who’s…
1730
Feeling safer online with Firefox
The latest privacy and security improvements in Firefox [This post originally appeared on Medium ] Firefox is the only browse...
1731
Flatpak: A security nightmare – two years later
Flatpak - a security nightmare
1732
Lessons from last week’s cyberattack
Early Friday morning the world experienced the year’s latest cyberattack. Starting first in the United Kingdom and Spain, the malicious “WannaCrypt” software quickly spread globally, blocking customers from their data unless they paid a ransom using Bitcoin. The WannaCrypt exploits used in the attack were drawn from…
1733
Can you trust that permission pop-up on macOS?
A security research blog.
1734
An experimental Android WebView Media Integrity API early next year
We’re piloting an experimental Android WebView Media Integrity API with select embedded media providers early next year.
1735
Homomorphic encryption in iOS 18
A mathematical miracle enables Apple's servers to process your photos while never knowing anything about them
1736
Okta Bcrypt incident lessons for designing better APIs
Hello there! If you follow tech news, you might have heard about the Okta security incident that was reported on 1st of November. The TLDR of the incident was …
1737
Edward Snowden: Saving Us from the United Stasi of America
In my estimation, there has not been in American history a more important leak than Edward Snowden’s release of NSA material – and that definitely includes the Pentagon Papers 40 years ago. Snowden’s whistleblowing gives us the possibility to roll back a key part of what has amounted to an “executive coup” against the…
1738
Disrupting the first reported AI-orchestrated cyber espionage campaign
A report describing a highly sophisticated AI-led cyberattack and how we disrupted it.
1739
NCSC, GCHQ, UK Gov't expunge advice to “use Apple encryption”
This is some really embarrassing timing on the Home Office’s (HO’s) part: a few weeks ago when news first broke of the HO’s demand for a backdoor in Apple ADP, I pointed out to MP…
1740
Mitigating Memory Safety Issues in Open Source Software
Posted by Dan Lorenc, Infrastructure Security Team Memory-safety vulnerabilities have dominated the security field for years and often lead ...