3121
US Cloud soon illegal in EU? US punches first hole in EU-US Data Deal
Trump paralysed the "Privacy and Civil Liberties Oversight Board" (PCLOB), a key element of the EU-US data transfer deal that allows EU-US data flows.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
3122
YouTube starts to require a credit card or ID to verify the age in EU (2020)
We’ve taken important steps to make YouTube a safer place for families. We’re announcing a continuation of these efforts.
3123
Universal DNSSEC: Secure DNS for Every Domain
CloudFlare launched just five years ago with the goal of building a better Internet. That’s why we are excited to announce that beginning today, anyone on CloudFlare can secure their traffic with DNSSEC in just one simple step.
3124
Why Not WireGuard
The latest thing that is getting a lot of attention is WireGuard - the new shooting star in terms of VPN. But is it as great as it sounds? I would like to discuss some thoughts, have a look at the implementation and tell you why WireGuard is not a solution that will replace IPsec or OpenVPN.
3125
EU GDPR – Another reason for SaaS to reconsider on-premise
We review GDPR's impact on SaaS vendors and data collection practices and how it may reduce the cost disparity between hosted SaaS and on-premises Private SaaS.
3126
Wildlife monitoring technologies used to intimidate and spy on women
Camera traps and drones deployed by government authorities to monitor a forest in India are infringing on the privacy and rights of local women.
3127
Introducing Telegram Passport
Meet Telegram Passport – a unified authorization method for services that require personal identification.
3128
3129
AWS Control Tower
Earlier this month I met with an enterprise-scale AWS customer. They told me that they are planning to go all-in on AWS, and want to benefit from all that we have learned about setting up and running AWS at scale. In addition to setting up a Cloud Center of Excellence, they want to set up […]
3130
Digital Privacy at the U.S Border: A New How-To Guide from EFF
San Francisco - Increasingly frequent and invasive searches at the U.S. border have raised questions for those of us who want to protect the private data on our computers, phones, and other digital devices. A new guide released today by the Electronic Frontier Foundation (EFF) gives travelers the...
3131
EU legislation allows emails, messages and other communications to be scanned
On 6 July, the European Parliament adopted in a final vote the derogation to the main piece of EU legislation protecting privacy, the ePrivacy Directive, to allow Big Tech to scan your emails, messages and other online communications.
3132
3133
3134
NSA's Surveillance Powers Extend Far Beyond Counterterrorism
Time and again we’ve seen the National Security Agency (NSA) defend its vast surveillance apparatus by invoking the spectre of terrorism, discussing its spying powers as a method to keep America safe. Yet, the truth is that counterterrorism is only a fraction of their far broader authority to seek...
3135
NT OS Kernel Information Disclosure Vulnerability
Bidding farewell to one of the last kernel address leaks, CVE-2025-53136. Even patches can open new doors for exploitation.
3136
3137
3138
NextDNS Joins Firefox’s Trusted Recursive Resolver
NextDNS Joins Firefox’s Trusted Recursive Resolver Program Committing to Data Retention and Transparency Requirements that Respect User Privacy Firefox a
3139
3140
Norway takes a stance against Google Analytics
Norway is the latest country to declare Google Analytics in violation with the GDPR
3141
PayPal does not know how to detect fraud
Contact with an owner of tooltrainer.com domain name.
3142
Mailinator.com: Anatomy of a Spammy Campaign
Mailinator is a popular disposable email service. It's also become a great tool for QA Teams to test email receipt, acknowledgment, authen...
3143
Swiss police automated crime predictions but has little to show for it
A review of 3 automated systems in use by the Swiss police and judiciary reveals serious issues. Real-world effects are impossible to assess due to a lack of transparency.
3144
Phishing Campaigns Targeting USPS See as Much Web Traffic as the USPS Itself
A USPS smishing attempt prompts the Akamai SIG to unearth shocking statistics: Illegitimate USPS domains see as much traffic as the legitimate USPS domain.
3145
3146
You can't contain me: elevation-of-privilege vulnerability in Docker for Windows
I have been continuing my journey of searching for windows breakout vulnerabilities in popular applications and one that I discovered in March I found intere...
3147
Google open sourced PSP (hardware cryptographic offload)
We’re making the PSP Security Protocol for offloading encryption to network interface cards open source today. Here’s why.
3148
US Senator: What Do Our Cars Know? and Who Do They Share That Information With?
U.S. Senator Ed Markey of Massachusetts has sent a much-needed letter to car manufacturers asking them to clarify a surprisingly hard question to answer: what data cars collect? Who has the ability to access that data? Private companies can often be a black box of secrecy that obscure basic facts...
3149
Arguments Supporting Warrantless Surveillance Wither When Exposed to Sunlight
The government recently declassified a secret letter, written in 2002 laying out the executive branch’s initial legal justifications for the vast expansion of electronic surveillance after September 11, 2001. Like many others, it was written by former DOJ Office of Legal Counsel attorney John Yoo,...
3150
Making Containers More Isolated: An Overview of Sandboxed Container Technologies
Currently available container-based infrastructure has limitations because containers are not truly sandboxed and share the host OS kernel. The root of the problem is the weak separation between containers when the host OS creates a virtualized userland for each container. This blog covers four unique projects from…