2311
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,769 posts.
2312
A Visual Guide to SSH Tunnels: Local and Remote Port Forwarding
SSH port forwarding explained in a clean and visual way. How to use local and remote port forwarding. What sshd settings may need to be adjusted. How to memorize the right flags.
2313
2314
Reverse engineering my ADHD test
I decided to get evaluated for ADHD. Curiousity struck, and I had the bright idea to capture the page source and any outbound requests.
2315
Microsoft Defender SmartScreen is hurting independent developers
Download Image wallpapers and background images for FREE! 200 Image wallpapers in 1080P, 2K, 4K, 5K HD that fit all your devices!
2316
How Monero’s proof of work works
Monero does not use a simple fixed hash like Bitcoin. Its proof of work, RandomX, turns mining into running random CPU-friendly programs over a large memory dataset, which is why it behaves so differently from ASIC-first systems.
2317
2318
The Next Front in the New Crypto Wars: WhatsApp
In Saturday’s edition of the New York Times, Matt Apuzzo reports that the Department of Justice is locked in a “prolonged standoff” with WhatsApp. The government is frustrated by its lack of real-time access to messages protected by the company’s end-to-end encryption. The story may represent a...
2319
"cat readme.txt" is not safe if you use iTerm2
Turning "cat readme.txt" into arbitrary code execution in iTerm2.
2320
300M Freely Downloadable Pwned Passwords
Edit 1: The following day, I loaded another set of passwords which has brought this up to 320M. More on why later on. Edit 2: The API model described below has subsequently been discontinued [https://www.troyhunt.com/enhancing-pwned-passwords-privacy-by-exclusively-supporting-anonymity/] in favour of the
2321
Don’t Let Facebook, or Any Tracker, Follow You on the Web
Using the web today, you are a target. And because of the rampant tracking across websites, each time you use the internet, you become an easier target. Tor Browser can help.
2322
Report on Microsoft Office and Windows software: still privacy risks remaining
On behalf of the Dutch Ministry of Justice and Security, Privacy Company has investigated the privacy risks related to the use of Microsoft Windows 10 Enterprise, Office 365 ProPlus and Office Online, as well as the mobile Office apps. With the Ministry’s permission, we are publishing two blog posts about our…
2323
2324
Hacking a Smart Home Device (2024)
How I reverse engineered an ESP32-based smart home device to gain remote control access and integrate it with Home Assistant.
2325
2326
Everyone knows your location, Part 2: try it yourself and share the results
Learn how to record and analyse your mobile device traffic, take an app from the list of "shady" apps and share the results.
2327
2328
Problems with the TSA
Coverage: Hacker News , Slashdot , BoingBoing , RT America News , Tumblr , RightThisMinute , RTM update , PapersPlease 2014 & 2015
2329
Can you reverse engineer our neural network?
A lot of “capture-the-flag” style ML puzzles give you a black box neural net, and your job is to figure out what it does. When we were thinking of creating o...
2330
"Adobe has released Adobe Photoshop CS6, which addresses these vulnerabilities"
Adobe applies hundreds of security processes and controls to help us comply with industry-accepted standards.
2331
2332
Malicious VSCode extensions with more than 45k installs
Highlights: CloudGuard Spectral detected malicious extensions on the VSCode marketplace Users installing these extensions were enabling attackers to steal %
2333
2334
Hackers stole access tokens from Okta's support unit
Okta , a company that provides identity tools like multi-factor authentication and single sign-on to thousands of businesses, has suffered a security breach involving a compromise of its customer support unit, KrebsOnSecurity has learned. Okta says the incident affected a “very small number” of customers, however it…
2335
GrapheneOS migrates server infrastructure from France
The GrapheneOS project has announced on X that they are ceasing all operations in France, asserting that the country is no longer safe for "open source projects"
2336
2337
GitHub’s database of security advisories is now open source
Anyone can now provide additional information and context to further the community’s understanding and awareness of security advisories.
2338
Exposing the secret Office 365 detailed activity logs and forensics tool
An ethical crisis in the digital forensics industry came to a head last week with the release of new details on Microsoft’s undocumented “Activities” API. A previously unknown trove of access and activity logs held by Microsoft allows investigators to track Office 365 mailbox activity in minute detail. Following a…
2339
IPv6 is not insecure because it lacks a NAT
This post is intended to dispell the mistaken belief that IPv4 is more secure than IPv6 because it includes a NAT which must be configured to allow inbound traffic.
2340
EU: Users who refuse scanning to be prevented from sharing photos and links
The highly controversial indiscriminate child sexual abuse regulation (so-called chat control) could still be endorsed by EU governments after all, as France could give up its previous veto. This is reported by Euractiv and confirmed by internal documents. France considers the new "upload moderation