3721
A reference counting bug which leads to local privilege escalation in io_uring
Hello, I’m Shiga( @Ga_ryo_ ), a security engineer at Flatt Security Inc.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
3722
Reasonably Secure Computing in the Decentralized World
Joanna Rutkowska recently gave a presentation titled “Reasonably Secure Computing in the Decentralized World (An Operating System Architect’s Perspective)” at a public event hosted by The Golem Project in Berlin, Germany called “Golem and Friends: Data, Security, Scaling and More….” The...
3723
Unsealed Filing Shows DOJ Misled Appeals Court About NSL Gag Orders
A court filing unsealed late Wednesday shows that the U.S. Department of Justice (DOJ) made a highly misleading argument to an appeals court in October during a hearing on the constitutionality of National Security Letters (NSLs). On October 8, the Electronic Frontier Foundation argued before the...
3724
SSH Keygen – RSA, DSA, Ecdsa, EdDSA
Comparing SSH keys: RSA, DSA, ECDSA, and Ed25519 explained, with a straight algorithm recommendation and the move from keys to certificates. Read on.
3725
Take It Down Act: A Flawed Attempt to Protect Victims That'll Lead to Censorship
Congress has begun debating the TAKE IT DOWN Act (S. 146), a bill that seeks to speed up the removal of a troubling type of online content: non-consensual intimate imagery, or NCII. In recent years, concerns have also grown about the use of digital tools to alter or create such images, sometimes...
3726
CertiKOS: A breakthrough toward hacker-resistant operating systems
A team of Yale researchers has unveiled CertiKOS, the world’s first operating system that runs on multi-core processors and shields against cyber attacks.
3727
Application-Layer DDoS Attack Protection with HAProxy
This blog post describes techniques that utilize ACLs, maps, and stick tables.
3728
Our suite of Ethereum security tools
Two years ago, when we began taking on blockchain security engagements, there were no tools engineered for the work. No static analyzers, fuzzers, or reverse engineering tools for Ethereum. So, we invested significant time and expertise to create what we needed, adapt what we already had, and refine the work…
3729
Default HTTPS access for Gmail
Posted by Sam Schillace, Gmail Engineering Director In 2008, we rolled out the option to always use https — encrypting your mail as it trav...
3730
EFF to Supreme Court: Violating Terms of Service Isn’t a Crime Under the CFAA
Washington, D.C.—The Electronic Frontier Foundation (EFF) and leading cybersecurity experts today urged the Supreme Court to rein in the scope of the Computer Fraud and Abuse Act (CFAA)—and protect the security research we all rely on to keep us safe—by holding that accessing computers in ways that...
3731
Robust and efficient quantum-safe HTTPS
Today we're announcing a new program in Chrome to make HTTPS certificates secure against quantum computers. The Internet Engineering Task Force (IETF) recently created a…
3732
HAProxy vulnerability enables HTTP request smuggling attacks
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
3733
Google Zanzibar Through Our Eyes
Understanding Google's Zanzibar paper the way the Authzed team does.
3734
California Legislature Sells Out Our Data to ISPs
In the dead of night, the California Legislature shelved legislation that would have protected every Internet user in the state from having their data collected and sold by ISPs without their permission. By failing to pass A.B. 375, the legislature demonstrated that they put the profits of Verizon...
3735
Obama Administration Supports Privacy-Invasive “Cybersecurity” Bill
Right before Congress left for its annual summer vacation the Obama Administration endorsed the Senate Intelligence Committee's Cybersecurity Information Sharing Act (CISA). EFF opposes the bill because its vague definitions, broad legal immunity, and new spying powers allow for a tremendous amount...
3736
Statement concerning the arrest of Dmitry Bogatov
[09 Dec 2017] Updated Debian 8: 8.10 released [09 Dec 2017] Updated Debian 9: 9.3 released [07 Oct 2017] Updated Debian 9: 9.2 released [12 Aug 2017] DebConf17 closes in Montreal and DebConf18 dates announced [22 Jul 2017] Updated Debian 9: 9.1 released [22 Jul 2017] Updated Debian 8: 8.9 released [18 Jun 2017] Debian…
3737
AI models may be capable of self-replicating without access to a datacenter
Small AI models may be only months away from being able to self-replicate across cheap IoT devices like Android TV boxes, with no datacenter needed.
3738
3739
3740
Demonstrably Secure Software Supply Chains with Nix
Discover how Nix can revolutionize your software supply chain security, enabling verifiable integrity and offline rebuilds from source.
3741
How to stop advertisers from tracking your teen across the internet
When children turn 13, they age out of the data protections provided by the Children’s Online Privacy Protection Act (COPPA). Then, they become targets for data collection from data brokers that collect their information from social media apps, shopping history, location tracking services, and more.
3742
Cloudflare Attack Post Mortem; Apparent Google Apps/Gmail Vulnerability
This morning a hacker was able to access a customer's account on CloudFlare and change that customer's DNS records. The attack was the result of a compromise of Google's account security procedures.
3743
VLC threatens to sue Secunia over full disclosure
Protect your technology from cyber threats and vulnerabilities…
3744
Germany is pressuring Neocities to censor a disclosure of their censorship
The German government is pressuring Neocities to censor a disclosure of their censorship list.
3745
Blocking Top-Level Navigations to Data URLs for Firefox 58
End users rely on the address bar of a web browser to identify what web page they are on. However, most end users are not aware of the concept of ...
3746
3747
3748
Surveillance Evangelist Arrested in California
FBI agents arrested a Mexican tycoon named Jose Susumo Azano Matsura at his Coronado, Calif. home on Wednesday as part of a political bribery investigation based on captured emails, seized banking records, and covertly recorded conversations. The unfolding scandal is soaked in irony: Azano is a...
3749
3750
