3511
Steganography Based Ad Payload That Drops Shlayer Trojan on Mac Users
Recent months have seen an uptick in reports of JavaScript malware that hides in image files.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
3512
New TSA Policy May Lead to Increased Scrutiny of Reading Material
The TSA is testing new requirements that passengers remove books and other paper goods from their carry-on baggage when going through airline security. Given the sensitivity of our reading choices, this raises privacy concerns .
3513
Cookies Lack Integrity: Real-World Implications
Xiaofeng Zheng, Tsinghua University and Tsinghua National Laboratory for Information Science and Technology; Jian Jiang, University of California, Berkeley; Jinjin Liang, Tsinghua University and Tsinghua National Laboratory for Information Science and Technology; Haixin Duan, Tsinghua University, Tsinghua National…
3514
3515
Security releases issued
Posted by James Bennett on Feb. 19, 2013
3516
Mongo BSON Injection: Ruby Regexps Strike Again
We do penetration testing, source code auditing and vulnerability assessments
3517
3518
EFF to Court: Lifetime GPS Tracking Violates the Fourth Amendment
All too often, new police surveillance tools are initially applied to only the “worst of the worst” and then slowly—but surely—expanded to include an ever-growing number of less culpable individuals. We’ve seen it with DNA collection. And now we’re starting to see it with GPS tracking. That’s why...
3519
Black Lotus Labs uncovers Linux executables deployed as stealth Windows loaders
The Lumen blog and newsroom is your source for business technology news and insights, customer stories, press and media, and trending articles.
3520
Users Betrayed as Australia Adopts a Copyright Censorship Regime
Since our report last week on Australia's Internet censorship bill, the bill did indeed pass the Senate yesterday, and will become the Copyright Amendment (Online Infringement) Act 2015. The new law provides an accelerated process for rightsholders to obtain court orders for ISPs to block sites...
3521
Rootless Containers
Rootless containers is a new concept that don’t require root privileges in order to formulate, but have some unique challenges.
3522
3523
Windows 0-day exploit used in Operation WizardOpium
During our investigation, we discovered that yet another 0-day exploit (CVE-2019-1458) was used in Operation WizardOpium attacks.
3524
3525
3526
Adtech is built on a privacy fault line
The IAPP's Cobun Zweifel-Keegan rounds up the latest privacy developments from Washington, D.C., and elsewhere in the U.S. for the week of 24 July 2023.
3527
3528
Web Fonts Collateral Damage of Ad Blockers
Years of abusive implementation of webfonts has landed the feature under the umbrella of content blocking APIs, affecting those few who’ve cared all along.
3529
U.S. border surveillance towers have always been broken
A new bombshell scoop from NBC News revealed an internal U.S. Border Patrol memo claiming that 30 percent of camera towers that compose the agency's "Remote Video Surveillance System" (RVSS) program are broken. Except, this isn't a bombshell. What should actually be shocking is that Congressional leaders are acting…
3530
It’s time to extend the US Privacy Act to EU citizens
Last summer’s Snowden revelations not only highlighted the urgent need for surveillance reform but also severely damaged relations between t...
3531
3532
Very Good Security
“Never answer an anonymous letter” —Yogi Berra Did you ever wonder why doctor offices ask for your social security number? They don’t want to keep your SSN, but it’s the primary “key” that identifies you to an insurance company. In computer science/math terms, they need to call a function. Let’s call it: int…
3533
3534
Multiple vulnerabilities in WP Fastest Cache plugin
We uncovered multiple vulnerabilities in WP Fastest Cache plugin that could grant attackers access to your privileged information. We strongly recommend that you update to the latest version of the plugin and have an established security solution on your site, such as Jetpack Security.
3535
Why SSD Drives Destroy Court Evidence, and What Can Be Done About It (2012)
Why SSD Drives Destroy Court Evidence, and What Can Be Done About It: Explore the challenges posed by SSD drives in preserving court evidence and discover strategies to mitigate data loss risks.
3536
3537
VPN services blocked in Sri Lanka as information controls tighten
Internet providers in Sri Lanka are in the vanguard of blocking access to digital security tools that allow users to work around censorship, according to new NetBlocks network measurement data. ...
3538
How CDNs Generate Certificates
Say Hi to Thomas. Thomas's first weeks at Fly have been hectic, but he's been taking notes, copious notes that can teach you all about the wild world of certificate infrastructure. Read on to discover more...
3539
Remote Code Execution as a Service
Learn how Earthly Compute, a remote code execution as a service, was built to handle bursty workloads and provide secure and fast remote execution ...
3540
“No-fly” trial: Closing arguments
Judge William Alsup convened day five of the trial in Ibrahim v. DHS — the first lawsuit challenging a U.S. government “no-fly” order to make it to trial — on Friday morning with the announcement that, “I received this additional material about the [plaintiff’s] daughter and her attempts to come here.”