2581
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,770 posts.
2582
Violating Terms of Use Isn’t a Crime, EFF Tells Court
Have you ever violated a website’s terms of use, such as by using something other than your real name on a website that requires one, or by sharing your account password with a family member when doing so is prohibited? Probably. Have you ever clicked “I agree” without actually reading the terms in...
2583
2584
A non-mathematical explanation of one way functions
Alice and Bob are crossword enthusiasts. Every morning they rush to complete the Daily Telegraph cryptic crossword . One morning Alice fini...
2585
2586
Public secrets exposure leads to supply chain attack on GitHub CodeQL
An exposed GitHub token could have been used to launch a supply chain attack on GitHub CodeQL, resulting in source code exposure and repository tampering of CodeQL users.
2587
Congress Must Act After US Government Admits To Warrantless Wiretapping
As Congress and the President rush to re-authorize the dangerous FISA Amendments Act (FAA)—the law shamefully passed after pressure to legalize certain portions of the NSA’s warrantless wiretapping program—EFF has been sounding the alarm that Americans’ communications are still being...
2588
2589
TSA tries out another biometric system
Today the Transportation Security Administration (TSA) announced that it has launched a “pilot” at Washington National Airport (DCA) of yet another scheme for biometric identification and tracking of domestic air travelers.
2590
Dark Web Price Index 2020
To see just how prevalent items of personal data are being listed on the dark web, and at what price, we sent our researchers on a data-gathering mission.
2591
Decertifying the worst voting machine in the US
On Apr 14 2015, the Virginia State Board of Elections immediately decertified use of the AVS WinVote touchscreen Direct Recording Electronic (DRE) voting machine. This seems pretty minor, but it received a tremendous amount of pushback from some local election officials. In this post, I’ll explain how we got to that…
2592
Oura says it gets government demands for user data
Oura users' data is not end-to-end encrypted and can be handed to the government. Will the wearable tech maker say how often it turns over data?
2593
Heartbleed
Heartbleed is a catastrophic bug in OpenSSL: “The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of…
2594
2595
I hacked SONOS and YouTube the same day
Or how to play YouTube videos on you SONOS, easy and for free.
2596
2597
"Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
Wiz Research recently discovered a series of alarming vulnerabilities that highlight the supply chain risk of open source code, particularly for customers of cloud computing services.
2598
Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found
Nyxgeek here. It's 2026 and I've got two more Azure Entra ID sign-in log bypasses to share with you. Don't get too excited…these bypasses were recently fixed, but I think it's important that people know.
2599
Gmail accepts forged YouTube emails
This morning I woke up to an official-looking email from YouTube in my inbox, addressed to an address that isn't mine.
2600
Google Safe Browsing missed 84% of confirmed phishing sites
Google Safe Browsing missed 84% of confirmed phishing sites in our dataset. Here's what we found and what it means.
2601
Hijacking the PS5's RTMP stream
The long way around to screen sharing.
2602
ShadowBrokers: The NSA Compromised the SWIFT Network
This is by far, the most interesting release from Shadow Brokers as it does not only contain tools — but also materials describing the most…
2603
Announcing Free and Automated SSL Certs
We are excited to announce that Automated Certificate Management is generally available, at no additional charge, for all applications running on Hobby...
2604
2605
John Nash's Letter to the NSA
The National Security Agency (NSA) has recently declassified an amazing letter that John Nash sent to it in 1955. It seems that around the year 1950 Nash tried to interest some US security organs …
2606
2607
Dropbox Lack of Security
Miguel de Icaza's Blog
2608
Android security in 2016 is a mess
Summary Your phone probably contains banking, payment and personal information that can be remotely stolen via numerous known and unknown bugs in the Android software. This is attractive to criminals. Vendors (LG, Samsung, Xiaomi, etc.), after selling you their phone, have no incentive to keep your phone’s software up…
2609
2610
Researchers find trapdoor in SwissVote election system
A team of researchers have examined the source code published as part of the SwissPost e-voting system, provided by Scytl, and discovered a cryptographic trapdoor.