2641
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,770 posts.
2642
Technology preview: Sealed sender for Signal
In addition to the end-to-end encryption that protects every Signal message, the Signal service is designed to minimize the data that is retained about Signal users. By design, it does not store a record of your contacts, social graph, conversation list, location, user avatar, user profile name, ...
2643
Quantum Resistance and the Signal Protocol
The Signal Protocol is a set of cryptographic specifications that provides end-to-end encryption for private communications exchanged daily by billions of people around the world. After its publication in 2013, the Signal Protocol was adopted not only by Signal but well beyond. Technical informat...
2644
2645
EFF Asks Judge to Rule NSA Internet Backbone Spying Techniques Unconstitutional
San Francisco - The Electronic Frontier Foundation (EFF) today presented a federal court with a detailed explanation of how the NSA taps into the Internet backbone and requested the judge rule that the agency is violating the Fourth Amendment by copying and searching the collected data. EFF argues...
2646
Making Visible Watermarks More Effective
Posted by Tali Dekel and Michael Rubinstein, Research ScientistsWhether you are a photographer, a marketing manager, or a regular Internet user, ch...
2647
Secure Randomness in Go 1.22
ChaCha8Rand is a new cryptographically secure pseudorandom number generator used in Go 1.22.
2648
Open-Sourcing ClusterFuzz
The latest news from Google on open source releases, major projects, events, and outreach programs for early career developers.
2649
How I Stole a User's Siacoin
A lesson in Sia wallet seed safety
2650
Pwning the Nix ecosystem
ptrpaws's blog on reverse engineering, programming, vr finds and miscellaneous stuff.
2651
ECDSA smartphone key extraction using $2 magnetic probe
We show that modern cryptographic software on mobile phones, implementing the ECDSA digital signature algorithm, may inadvertently expose its secret keys through physical side channels: electromagnetic radiation and power consumption which fluctuate in a way that depends on secret information during the cryptographic…
2652
Threat actors expand abuse of Microsoft Visual Studio Code
Jamf Threat Labs uncovers North Korean hackers exploiting VS Code to deploy backdoor malware via malicious Git repositories in the Contagious Interview campaign
2653
Verified by Twilio
Twilio posts cloud communications trends, customer stories, and tips for building scalable voice and SMS applications with Twilio's APIs.
2654
Review of /e/ – Android-based alternative for mobile phones
A review of the /e/ OS Android-alternative operating system for mobile devices, as used on the Teracube 2e smartphone.
2655
Become Ungoogleable
I've removed my website from indexing by Google . The proximate cause is Google's new effort to DRM the web ( archive ) but there is of course so much more.
2656
1Password Leaks Your Data
Seriously.
2657
Sonos is spying on me (and you)
I recently decided to get a wireless speaker for our Kitchen. Sonos seems like an obvious choice these days. The sound quality and aesthetics were very appealing. So I ordered a Sonos One SL speaker. In terms of sound quality and looks, I was very pleased. I’m not an audiophile but the sound quality seemed…
2658
2659
Landlock-Ing Linux
Landlock is a Linux API that lets applications explicitly declare which resources they are allowed to access. Its philosophy is similar to OpenBSD’s unveil() and (less so) pledge() : programs can make a contract with the kernel stating, “I only need these files or resources — deny me everything else if I’m…
2660
Software to capture votes in upcoming German national election is insecure
The Chaos Computer Club is publishing an analysis of software used for tabulating the German parliamentary elections (Bundestagswahl). The analysis shows a host of problems and security holes, to...
2661
Writing a firmware-only keylogger
In the previous blog post, I looked at the EC firmware in my laptop. This time I will look into the WiFi firmware of the same laptop.
2662
Schneier's response to Eric Schmidt
Schmidt said: I think judgment matters. If you have something that you don’t want anyone to know, maybe you shouldn’t be doing it in the first place. If you really need that kind of privacy, the reality is that search engines—including Google—do retain this information for some time and it’s important, for example…
2663
I recorded user behaviour on my competitor’s websites (2018)
A test that hijacked the Chrome back button to send visitors to a fake Google results page, then to mirrored competitor pages where heatmaps, sessions and typing were recorded. Google de-indexed the whole domain.
2664
2665
FCC Proposes to Fine Wireless Carriers $200M for Selling Customer Location Data
The U.S. Federal Communications Commission (FCC) today proposed fines of more than $200 million against the nation’s four largest wireless carriers for selling access to their customers’ location information without taking adequate precautions to prevent unauthorized access to that data. While the fines would be among…
2666
2667
Brave blocks Microsoft Recall by default
Starting in version 1.81 for Windows users, Brave browser will block Microsoft Recall from automatically taking screenshots of your browsing activity.
2668
2669
Mimicking a device is becoming almost impossible
From User-Agent tricks to canvas hashes, see how modern device detection—Picasso, fonts, emojis, touch—makes spoofing fail. Learn how to blend in safely.
2670
A few simple steps to vastly increase your privacy online
Switch up your browser and search engine, add some plugins to block surveillance, and get a little technical with DNS servers.