3691
Introducing passkeys in Chrome
We announced in October that passkey support was available in Chrome Canary. Today, we are pleased to announce that passkey support is now ...
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
3692
Rayfish, Peer-to-peer mesh VPN with no server to trust
Rayfish is a peer-to-peer mesh VPN. Connect your devices by cryptographic identity. No port forwarding, no hosted server to trust. Share a code, and you're on the same encrypted LAN.
3693
GDPR guide for developers
Is this guide only for developers? This guide is mainly aimed at developers working alone or in teams, team leaders, service providers but also at anyone interested in web or application development. It provides advice and best practices, and thus gives useful keys to understand the GDPR for every stakeholder…
3694
Clover Health: How Chamath Lured Retail Investors into a Broken Business
Initial Disclosure: This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report. We have no position (short or long) in Clover Health because we think in this moment for public markets, it is more important for people to…
3695
What I Wish I Knew About U2F and Other Hardware MFA Protocols
We revamped the second-factor authentication in Teleport 6.0. This post provides a birds-eye view of U2F and other cryptographic hardware standards.
3696
Let Google do the patching with new managed base images
Exploring container security: Let Google do the patching with new managed base images
3697
A survey of recent iOS kernel exploits
Posted by Brandon Azad, Project ZeroI recently found myself wishing for a single online reference...
3698
Microsoft patent trolls Salesforce
Microsoft has filed suit against Salesforce for infringing the following patent: Method and system for mapping between logical data and physical data System and method for providing and displaying a web page having an embedded menu Method and system for stacking toolbars in a computer display Aut…
3699
MongoDB Releases Queryable Encryption Preview
Today we are announcing the preview release of Queryable Encryption which allows customers to encrypt sensitive data from the client side, store it as fully randomized encrypted data on the database server side, and run expressive queries on the encrypted data. Learn more.
3700
We Can Choose an Internet Without Surveillance
The internet is not just a network of computers—it’s a network of people. We hold great power in deciding its future.
3701
3702
3703
GitLab acquires Peach Tech and Fuzzit
Acquisitions will make GitLab the first security solution to offer both coverage-guided and behavioral fuzz testing
3704
3705
3706
3707
Mullvad VPN present And Then? (Chat Control is back on the menu)
Chat Control is back on the menu. To highlight the corruption behind the proposal, Mullvad VPN now presents "And Then?"
3708
3709
A Sampling of Anti-Decompilation Techniques
Traditional (assembly level) reverse engineering of software is a tedious process that has been made far more accessible by modern day decompilers. Operating...
3710
3711
3712
Behind the One-Way Mirror: A Dive into the Technology of Corporate Surveillance
It's time to shed light on the technical methods and business practices behind third-party tracking. For journalists, policy makers, and concerned consumers, this paper will demystify the fundamentals of third-party tracking, explain the scope of the problem, and suggest ways for users and legislation to fight back…
3713
A blueprint for formal verification of Apple corecrypto
With the latest release of corecrypto, we’re publishing our implementations of quantum-secure ML-KEM and ML-DSA algorithms, along with the mathematical proofs we built to assure they are faithful to the FIPS 203 and FIPS 204 specifications. To advance the state of the art for assuring critical software, we're also…
3714
EFF Joins Coalition Opposing Dangerous CFAA Bill
EFF and over a dozen other organizations are urging U.S. lawmakers to oppose a dangerous bill proposed by Sens. Sheldon Whitehouse and Lindsey Graham that would make the already-flawed Computer Fraud and Abuse Act (CFAA) worse. The joint letter sent Wednesday explains that the legislation fails to...
3715
EU member states still cannot agree about end-to-end encryption
Recently, Wired reported on documents leaked in May from the Council of the European Union’s ongoing deliberations over the draft Child Sex Abuse Regulation. The proposal is controversial because, as presently written, it would require online service providers to proactively scan their services – including users’…
3716
3717
Mirai Botnet Linked to Dyn DNS DDoS Attacks
Distributed Denial of Service (DDoS) attempts to make a machine or network unavailable by flooding it with overwhelming amounts of traffic.
3718
Can you reverse engineer an ASIC?
Earlier this year we published a puzzle that handed you a complete neural network and asked you to figure out what it did. The response was great, so we’ve made another one! This time, we’re going much deeper down the tech stack.
3719
European Court Strikes Down Law Allowing Users to Rip Their Own CDs
Today the High Court of the United Kingdom handed down an excellent decision—excellent because the result is so unreasonable, so out of touch with reality, and so divorced from the needs and expectations of ordinary users, that it provides a textbook illustration of the need for urgent reform of...
3720
TRRespass: Rowhammer against DDR4
Project Description Rowhammer haunted us for the better part of the past decade. Most DDR3 modules were found to be susceptible to this vulnerability which can compromise data directly inside the memory cells. What made it so scary was the fact that it could be exploited from software on PCs, clouds, smartphones, over…