301
SourMint Malicious SDK
The Snyk security research team has made two significant disclosures surrounding the Mintegral SDK. Learn about these SourMint vulnerabilities.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 319 posts.
302
Huawei HKSP Introduces Trivially Exploitable Vulnerability in the Linux Kernel
Huawei has seemingly stepped its foot into the kernel self-protection game with the release of HKSP. Absent any threat model and riddled with weaknesses, it also introduces a trivially exploitable local root vulnerability due to a complete lack of defensive programming.
303
Temporarily rolling back SameSite Cookie Changes
UPDATE 5/28: We are going to resume the rollout with the stable release of Chrome M84. More details . With the stable release of Chrome 8...
304
305
What Is the PCI of Bank Payments?
Credit card users today can transact online with peace of mind because card-accepting merchants are subject to Payment Card Industry Data Security Standard (PCI DSS).
306
307
Spanish police plans to extend use of its lie-detector while efficacy is unclear
Veripol is a software that assesses the veracity of complaints filed with the Spanish national police. It was introduced in 2018, but it's unclear if it works as intended.
308
Data-Transfer-Project
Since 2010, we have offered Download Your Information to allow people who use our services to access a secure copy of the data they have shared with Facebook. In 2018, we announced our participatio…
309
310
Peppering (Password Storage)
Website with the collection of all the cheat sheets of the project.
311
Google Shares, Monetizes, and Exploits Your Data Without 'Selling' It
"Google will never sell any personal information to third parties; and you get to decide how your information is used." - Sundar Pichai Sound familiar? Although big tech companies like Google keep the lights on by harvesting and monetizing your personal data, they can be quick to mince words and deny the strawman…
312
Matrix' answer to Moxie: On privacy versus freedom
Matrix, the open protocol for secure decentralised communications
313
Tracking Prevention in WebKit
WebKit has implemented tracking prevention technologies, spanning from 2003 with Safari 1.0 until today.
314
Mitigating Spectre and Other Security Threats: The Cloudflare Workers Security Model
Cloudflare is a security company, and the heart of Workers is, in my view, a security project. Running code written by third parties is always a scary proposition, and the primary concern of the Workers team is to make that safe.
315
Good-bye ESNI, hello ECH!
A deep dive into the Encrypted Client Hello, a standard that encrypts privacy-sensitive parameters sent by the client, as part of the TLS handshake.
316
Demolishing Wallhacks with VALORANT's Fog of War
From the very beginning of VALORANT development, we made it a priority to build out cheating resistance to ensure competitive integrity. In this article, I’ll walk you through one of these anti-cheat systems - Fog of War. This…
317
Multi-Perspective Validation Improves Domain Validation Security
At Let’s Encrypt we’re always looking for ways to improve the security and integrity of the Web PKI. We’re proud to launch multi-perspective domain validation today because we believe it’s an important step forward for the domain validation process. To our knowledge we are the first CA to deploy multi-perspective…
318
How Do Lava Lamps Help with Internet Encryption?
The Cloudflare lava lamps are used for Internet encryption. Learn about entropy in cryptography and why randomness is essential for SSL encryption.
319