Topics /
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
Update, April 9, 2021 : We've launched Am I FLoCed, a new site that will tell you whether your Chrome browser has been turned into a guinea pig for Federated Learning of Cohorts or FLoC, Google’s latest targeted advertising experiment. Today, Google launched an “origin trial” of Federated Learning...
Co-Authored with Peter Bibring, Senior Staff Attorney at the ACLU of Southern California Law enforcement agencies are increasingly using sophisticated cameras, called “automated license plate readers” or ALPR, to scan and record the license plates of millions of cars across the country. These...
The CVE-2017-13156 bug in Android allows attackers to modify the code in applications without affecting their signatures. Learn more about Janus Vulnerability.
Italian DPA argues the SARI Real Time facial recognition system lacks a legal basis and, as designed, it would implement a form of mass surveillance. On 14 April, a member of the Italian Parliament, Filippo Sensi, proposed a moratorium on the use of video surveillance tools that use Facial Recognition.
The IETF has approved publication of Messaging Layer Security (MLS), a new standard for end-to-end security that will make it easy for apps to provide the highest level of security to their users. End-to-end encryption is an increasingly important security feature in Internet applications. It keeps users’ information…
jQuery: The Write Less, Do More, JavaScript Library
First things first: If you are reading this post on a recent Lenovo laptop, please click the lock icon in the URL bar, then click “More Information…”. If you see ...
SAFA details the full exploitation of CVE-2025-13032, turning a double-fetch vulnerability in Avast's kernel driver into a local privilege escalation to SYSTEM on Windows 11.
Research by: Eyal Itkin Overview One of our goals for every research project we work on in Check Point Research is to get an intimate understanding of how software work: What components do they contain? Are they vulnerable? How can attackers exploit these vulnerabilities? And more importantly, how can we protect…
The latest Signal for Android release includes support for adding doodles, stickers, and text to images. This release also includes support for censorship circumvention in Egypt and the United Arab Emirates.
An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.
Discover how an open directory exposed a threat actor impersonating EFF to target gamers and how we mapped their infrastructure to Stealc & Pyramid C2.
Posted by Jonathan Metzman, Google Open Source Security Team OSS-Fuzz , Google’s open source fuzzing service, now supports fuzzing applicat...
Last Friday, Tavis Ormandy from Google’s Project Zero contacted Cloudflare to report a security problem with our edge servers. He was seeing corrupted web pages being returned by some HTTP requests run through Cloudflare.
ANDREA MITCHELL: “Why do you need every telephone number? Why is it such a broad vacuum cleaner approach?” JAMES CLAPPER: “Well, you have to start someplace.”—NBC Meet the Press, this past Sunday Concerned about the surveillance of millions of ordinary Americans, last year Senator Ron Wyden asked...
There has been a rolling scandal about the Carrier IQ software installed by cell phone companies on 150 million phones, mostly within the United States. Subjects of outright disagreement have included the nature of the program, what information it actually collects, and under what circumstances....
Learn how to secure your API. Best practices for OAuth, REST, DDoS, Attack Mitigation and Design.
This report documents the blocking of Women on Web (WoW) and Women Help Women (WHW) domains in Italy based on OONI data.
Learn more about how to use each Zoom product to connect with coworkers, customers, businesses, and more with insights and best practices.
Nym CEO Harry Halpin responds to Palantir manifesto with one that defends human freedom and privacy against techno-fascism.
