Topics /
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
PyPI now checks for expired domains to prevent domain resurrection attacks, a type of supply-chain attack where someone buys an expired domain and uses it to take over PyPI accounts through password resets.
In the past few months, I have been watching a very unsettling trend unfold in very competitive ecommerce search results on Google. It appears that huge amounts of money are put into place to systematically and successfully manipulate highly competitive search terms in order to sell fake…
Updated May 1, 2025: CNCF and Synadia have come to an agreement to ensure that NATS continues to thrive as a healthy open source project within CNCF, with Synadia’s continued support and involvement.
A data exposure of 7 million Adobe Creative Cloud account records could put users at risk of targeted phishing.
We are disclosing LeftoverLocals: a vulnerability that allows recovery of data from GPU local memory created by another process on Apple, Qualcomm, AMD, and Imagination GPUs. LeftoverLocals impacts the security posture of GPU applications as a whole, with particular significance to LLMs and ML models run on impacted…
Fast, Declarative, Reproducible, and Composable Developer Environments using Nix.
Finnish EDRi member Electronic Frontier Finland (Effi) is gravely concerned over a draft law on Internet surveillance. The bill that the country’s current government is in the process of preparing will grant the military and the Finnish Security Intelligence Service (Supo) the authority to conduct electronic mass…
How are low-level vulnerabilities exploited and detected in the modern age? This expert guide walks you through the ins and outs of eBPF and Kernel security.
News outlets and blogs will frequently compare DDoS attacks by the volume of traffic that a victim receives. Surely this makes some sense, right? The greater the volume of traffic a victim receives, the harder to mitigate an attack - right?
Are magic links are still viable as an authentication method or are you better off using newer passwordless alternatives?
Meta charges up to €251.88 to respect the fundamental right to privacy of EU users. This is a violation of the GDPR
Expert articles, security news, product updates, guides, and research from 1Password on password management, privacy, and digital security.
Toyota organizes a car-hacking event that captivates participating students. We uncovered the important purpose behind the event. #TOYOTATIMES
Update (2018-06-04): CVE-2018-8174 has been added to the Magnitude exploit kit (Source: MDNC).Update (2018-05-25): CVE-2018-8174 has been added to the RIG exploit...
Yesterday evening, the U.S. House of Representatives voted overwhelmingly to renew three expiring provisions of the USA PATRIOT Act, after the Senate abandoned the PATRIOT reform effort and approved the extension by a voice vote on Wednesday night. Disappointingly, the government's dangerously...
ESET researchers analyzed previously unknown Linux backdoors that are connected to known Windows malware used by the China-aligned Gelsemium group, as well as to Project Wood.
Bitwarden includes a very handy integration called forwarded email aliases. Learn how to use the feature in this blog!
The Nymwars rage on. Over the past several weeks Google has been engaged in a very public struggle with its users over its “real names” policy on Google+, prompting blog posts and editorials debating the pros and cons of allowing pseudonymous accounts on social networking sites. But there is one...
A comprehensive guide to MikroTik internals, including IPC, hand-rolled cryptography, and a novel post-authentication jailbreak
Since its founding more than thirty years ago, the Chaos Computer Club (CCC) holds strong beliefs in the freedom of information. Consequentially, freedom fighters and whistleblowers deserve our...
Mobile phones have become ubiquitous and basic communications tools—now used not only for phone calls, but also for accessing the Internet, sending text messages, and documenting the world. Unfortunately, mobile phones were not designed for privacy and security. Not only do they do a poor job of protecting your…
Linux distributions have a problem with WebKit security. Major desktop browsers push automatic security updates directly to users on a regular basis, so most users don't have to worry about security updates. But Linux users are dependent on their distributions to release updates. Apple fixed over 100 vulnerabilities…
Zerotier - Multiple vulnerabilities leading to identity hijacking and unauthorised private network access.
A federal court will be scrutinizing one of the National Security Agency’s worst spying programs on Monday. The case has the potential to restore crucial privacy protections for the millions of Americans who use the internet to communicate with family, friends, and others overseas.
Tails (The amnesic incognito live system) is a live OS based on Debian GNU/Linux which aims at preserving the user's privacy and anonymity by using the Internet anonymously and circumventing censorship. Installed on a USB device, it is configured...
