Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
Zerocoin implementation bug
Firo is a digital currency with a focus on setting privacy standards.
The Bare Minimum You Should Do to Protect Your Family's Data
For a lot of families, technology is the glue that holds everything together. There’s your kid’s Instagram feed you follow to see what theyR
LulzSec's 'Topiary' arrested
The Sophos Blog
Drone ‘Nightmare Scenario’ Now Has A Name: ARGUS
The PBS series NOVA , “ Rise of the Drones ,” recently aired a segment detailing the capabilities of a powerful aerial surveillance system known as ARGUS-IS, which is basically a super-high, 1.8 gigapixel resolution camera that can be mounted on a drone. As demonstrated in this clip , the system is capable of…
Credit card thieves using free-to-play apps to launder their ill-gotten gains
This MacKeeper report will tell you about 6 major data breaches that happened in 2018.
CloudFlare, PRISM, and Securing SSL Ciphers
Over the last week we've closely watched the disclosures about the alleged NSA PRISM program. At CloudFlare, we have never been approached to participate in PRISM or any other similar program.
From MCP to shell: MCP auth flaws enable RCE in Claude Code, Gemini CLI and more
How MCP authentication flaws enable RCE in Claude Code, Gemini CLI, and more.
Trust Me, I'm Local: Chrome Extensions, MCP, and the Sandbox Escape
Secure the modern software stack with Koi. Gain visibility, context, and real-time protection over extensions, MCPs, and autonomous AI agent endpoints.
Roblox Open Sources Real-Time Voice Safety Model
The Research Team at Roblox is discovering new possibilities for the next generation of technology.
Researchers Connect Flame to Stuxnet
The Securelist blog houses Kaspersky’s threat intelligence reports, malware research, APT analysis and statistics
(L)Awful Interception
One of democracy's foundations is the fact that all human beings have certain inalienable rights and freedoms. Suspended by trust and shared values. Today, trust and shared values are being replaced by “control and surveillance”.
The Senators that introduced a bill to let telecoms sell your internet history
Protection of your Internet history is up in the air thanks to new, pending legislation. A new bill coming before Senate aims to completely dismantle the
Canada's Quiet Weakening of Communications Encryption
This article outlines some of the federal government of Canada’s successful and unsuccessful attempts to weaken encryption standards.
Pump the Brakes on Your Police Department's Use of Flock Safety
Even if you can’t stop Flock’s use entirely, you can still help protect civil liberties in your community.
SFPD obtained live access to business camera network in anticipation of protest
New documents EFF received through public records requests have revealed that the San Francisco Police Department (SFPD) received live access to the hundreds of surveillance cameras that comprise the Union Square Business Improvement District’s (USBID) camera network in anticipation of potential...
Linux Kernel Ksmbd Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability, but only systems with ksmbd enabled are vulnerable.
Simply Secure PHP Cryptography
A reflection on the first six months of the year, ext/sodium landing in PHP 7.2, and where to go from here.
Re: Proposed Statement on "HTTPS everywhere for the IETF"
Search IETF mail list archives
Cloudflare mitigated yet another Okta compromise
On Wednesday, October 18, 2023, we discovered attacks on our system that we were able to trace back to Okta. We have verified that no Cloudflare customer information or systems were impacted by this event because of our rapid response.
CPanel's Black Week: 3 New Vulnerabilities Patched After Attack on 44k Servers
If you run a server with cPanel or WHM, you need to read this carefully. On May 8, 2026 — just ten days after the cPanel CVE-2026-41940 authentication bypass was used to compromise 44,000 web hosting servers and deploy ransomware — cPanel quietly released a second emergency security patch. This one covers three new…
What does a PGP signature on a Git commit prove?
With git, a cryptographic signature on a commit provides strong integrity guarantees of the entire history of that branch going backwards...
Malicious remote code execution backdoor discovered bootstrap-sass Ruby gem
On March 26, 2019, a malicious version of the popular bootstrap-sass package, that has been downloaded a total of 28 million times to date, was published to the official RubyGems repository.