3751
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
3752
CWI cryptanalist discovers new cryptographic attack in Flame spy malware
Cryptanalyst Marc Stevens from the Centrum Wiskunde & Informatica (CWI) in Amsterdam, known for breaking the https security in 2008 using a cryptanalytic attack on MD5, analyzed the recent Flame virus this week.
3753
MySQL.com currently Hacked (and serving javascript malware)
It looks like the MySQL.com website is currently hacked and compromised with a JavaScript malware (and serving malware to anyone visiting it). Our scanner identified…
3754
Multiple banking IP addresses hijacked
BGP multiple banking addresses hijacked, Author: Adrien de Beaupre
3755
3756
How to write a rootkit without really trying
We open-sourced a fault injection tool, KRF, that uses kernel-space syscall interception. You can use it today to find faulty assumptions (and resultant bugs) in your programs. Check it out! This post covers intercepting system calls from within the Linux kernel, via a plain old kernel module. We’ll go through a quick…
3757
Peter Eckersley, co-creator of Let’s Encrypt, dies at just 43
The Sophos Blog
3758
The Resolv hack: How one compromised key printed $23M
Web3 security lessons from the Resolv hack: how a compromised key enabled a $23M exploit, what went wrong, and how DeFi protocols can prevent similar attacks.
3759
Never talk to the police
Always talk to a criminal defense attorney before you tell the police anything or consent to a search without a warrant. When I was a prosecutor, the first think I would ask when given a case was, "did he say anything?"
3760
3761
Every Model Cheats
This post presents a controlled prompt-ablation study: 23 tasks, three prompt conditions, 1,518 individually audited traces, and a simple question: can you prompt away cheating?
3762
3763
Google Docs Users Targeted by Phishing Scam
Broadcom Community - VMTN, Mainframe, Symantec, Carbon Black
3764
3765
Google Calendar Event Injection with MailSniper (2017)
Beau Bullock & Michael Felch // Source: https://chrome.google.com/webstore/detail/google-calendar-by-google/gmbgaklkmjakoegficnlkhebmhkjfich Overview Google Calendar is one of the many features provided to those who sign up for a Google account along with other popular […]
3766
Oracle deprecating Java applets in Java 9
The Java programming language is one of the most popular languages today. Stay up to date with news, certifications, free learning resources, Java Magazine, events and much more
3767
The Federal HTTPS-Only Standard: Necessary and Overdue
The White House Office of Management and Budget has published a new standard recommending full HTTPS on all federal web sites and web services. They are accepting public comments until April 14; if you care about privacy and security, you should weigh in.This post is our public comment: we whole-...
3768
Containers and Docker: how secure are they?
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
3769
Anti-Interdiction on the Librem 5 USA
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
3770
Poor man's VPN via ssh socks proxy
Redpill Linpro Tech Blog
3771
3772
Exploiting the Windows Cryptoapi Vulnerability
On Tuesday, the NSA announced they had found a critical vulnerability in the certificate validation functionality on Windows 10 and Windows Server 2016/2019. This bug allows attackers to break the validation of trust in a wide variety of contexts, such as HTTPS and code signing. Concerned? Get the important details…
3773
Exploit Information Leaks in Random Numbers from Python, Ruby and PHP
Space Cybersecurity has become a prominent topic in the news, particularly when it comes to protecting space-related assets and technologies.
3774
Government Rails Site Hit Hours After CVE Patch
Rietta patched a government client's Ruby on Rails site within hours of a 9.5 CVSS ActiveStorage CVE. Exploit attempts began before business hours resumed.
3775
US government-funded phones come pre-installed with unremovable malware
A US-funded government assistance program is selling budget-friendly mobile phones that come pre-installed with unremovable malicious apps.
3776
Indian Electronic Voting Researcher Arrested
Updates:8/28Alex Halderman: Indian E-Voting Researcher Freed After Seven Days in Police Custody 8/26Alex Halderman: Indian E-Voting Researcher Remains in Police Custody 8/24Ed Felten: It’s Time for India to Face its E-Voting Problem 8/22Rop Gonggrijp: Hari is in jail :-( About four months ago, Ed Felten blogged about…
3777
Our brief in support of Twitter's First Amendment suit against the US government
Yesterday, NYU Technology Law & Policy Clinic filed a legal brief on behalf of Freedom of the Press Foundation in Twitter's important lawsuit against the government for violating their First Amendment rights.Buoyed by the Snowden disclosures that began eighteen months ago, tech companies like Twitter have been…
3778
A Spectre proof-of-concept for a Spectre-proof web
Posted by Stephen Röttger and Artur Janc, Information Security Engineers Three years ago, Spectre changed the way we think about security b...
3779
3780
Setback in the outback
Like many others, we have been following the latest developments in Australia related to the “Assistance and Access” bill with a growing sense of frustration. The widespread adoption of strong cryptography and end-to-end encryption has given people around the world the ability to protect their pe...