2911
How I Found a 20-Year-Old Linux Kernel Bug
Robert O'Callahan. Christian. Kiwi. Software guy. All content human-authored unless otherwise noted.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,770 posts.
2912
How the NSA Threatens National Security
Secret NSA eavesdropping is still in the news. Details about once secret programs continue to leak. The Director of National Intelligence has recently declassified additional information, and the President’s Review Group has just released its report and recommendations. With all this going on, it’s easy to become…
2913
Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos
tj-actions/changed-files
2914
2915
On the 10th anniversary of the Snowden revelations
A weblog about Signals Intelligence, Communications Security and top level telecommunications equipment
2916
The Deathray: A simple way for an untrusted site to freeze a Mac
A WebGPU shader on an untrusted site can hang a Mac's graphics, making the desktop UI unusable until a restart is forced. All the victim needs to do is click a link. This issue reproduces cross-browser on MacOS, but not other OSes.
2917
EasyDNS threatened with criminal complaint if client data not disclosed
UPDATE (as of Sept 2021): This post seems to be the de facto clearing house for people receiving these threats from Fechner and crew all over the world. Here is everything you need to know: You can ignore it Nobody has actually been sued We recently received a copyright notice…
2918
Facebook activated my dormant account and won’t let me deactivate it
Zet Casino 2026: tysiące gier, bonus powitalny, wpłaty BLIK i krypto, wypłaty w minutach oraz polskie wsparcie 24/7. Sprawdź naszą ofertę.
2919
You’ve Got 0-Click Mail: Unassisted iOS Attacks RCE via Mobilemail/Maild
October is Cybersecurity Awareness Month! How is your cybersecurity practice going?
2920
Hacking India's largest automaker: Tata Motors
Tata Motors gave away the keys to their infrastructure and customer data on their public websites.
2921
Someone Created a Tor Hidden Service to Phish My Tor Hidden Service
SMS Privacy is available as a Tor hidden service, and it turns out ~10% of users actually use it that way. This post details what I found when somebody created a phishing site of my Tor hidden service.
2922
Hacking YouTube with a MP4
Keyboard Warrior, Breaking software is just finding unintended features, right?
2923
2924
2925
Government Secrets and the Need for Whistle-blowers
Yesterday, we learned that the NSA received all calling records from Verizon customers for a three-month period starting in April. That’s everything except the voice content: who called who, where they were, how long the call lasted—for millions of people, both Americans and foreigners. This “metadata” allows the…
2926
Reverse-Engineering the Intel Management Engine
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
2927
Suicide Linux
You know how sometimes if you mistype a filename in Bash, it corrects your spelling and runs the command anyway?* Such as when changing directory, or opening a file. I have an idea: Suicide Linux. Any time - any time - you type any remotely incorrect command, the interpreter cr...
2928
Why even let users set their own passwords?
Today we seem to be living through a war on passwords. This is manifested in various ways; in its most passive form, it takes the form of people blogging about how passwords are bad. The more material changes are the general trend towards no longer treating passwords as a sufficient condition for access in favour of…
2929
Meta's legal team abandoned its ethical duties
From Big Tobacco to Menlo Park — and the collapse of legal ethics
2930
2931
2932
Why you don't steal from a hacker.
So during the London riots I return home the next morning to find my flat ransacked and my Macbook Pro laptop stolen! Police showed ...
2933
Make your electronics tamper-evident
If the police ever have physical access to an electronic device like a laptop, even for five minutes , they can install hardware keyloggers, create images of the storage media, or otherwise trivially compromise it at the hardware, firmware, or software level. One way to minimize this risk is to make devices…
2934
NPM security update: Attack campaign using stolen OAuth tokens
npm's impact analysis of the attack campaign using stolen OAuth tokens and additional findings.
2935
Chinese CA WoSign faces revocation after possibly issuing fake certificates
This website is for sale! percya.com is your first and best source for information about percya. Here you will also find topics relating to issues of general interest. We hope you find what you are looking for!
2936
2937
Apple Silicon Hardware: SPRR and Guarded Exception Levels (GXF)
Over a year ago siguza published a write-up about Apple’s APRR - a custom ARM extension that redefines pagetable permissions and protects certain parts of the kernel from itself. Since then Apple has released their M1 chip which not only features an updated version of APRR but also easily allows to run bare-metal code…
2938
2939
57% Fear Government Will Use NSA Data to Harass Political Opponents
There is little public support for the sweeping and unaccountable nature of the National Security Agency surveillance program along with concerns about how the data will be used.Fifty-seven percent (57%) of voters nationwide believe it is likely the NSA data will be used by other government agencies to harass…
2940
RCE over ham radio – Reverse shell via WinAPRS memory corruption bug
This installment will review and demonstrate functional exploits for WinAPRS on both Windows XP SP3 and Windows 10.