3871
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
3872
Cracking the 12+ Character Password Barrier, Literally
Password cracking rigs, red/blue team guides, and operator field notes from netmux.
3873
License update
Signal Protocol is a modern, open source, strong encryption protocol for asynchronous messaging systems. We use Signal Protocol as the foundation for our own private messaging app, Signal, but also make Signal Protocol libraries available for other applications to use. Our Signal Protocol librar...
3874
Sequoia PGP is now LGPL 2.0
Sequoia is a modular OpenPGP implementation in Rust.
3875
XZ Utils Backdoor Still Lurking in Docker Images
In this blog, we share a new finding in the XZ Utils saga: several Docker images built around the time of the compromise contain the backdoor. At first…
3876
Gmail can read your emails and attachments to train its AI, unless you opt out
Did you know that Gmail can use your emails and attachments for its smart features? Here's how to check your settings.
3877
YubiKey comes to the iPhone with Mobile SDK for iOS and LastPass support
YubiKey iOS support is here. For developers, we now offer Yubico Mobile SDK for iOS, and LastPass supports the YubiKey NEO over NFC on iOS.
3878
EFF to court: The Supreme Court must rein in secondary copyright liability
If the Supreme Court doesn’t reverse a lower court’s ruling, internet service providers (ISPs) could be forced to terminate people’s internet access based on nothing more than mere accusations of copyright infringement. This would threaten innocent users who rely on broadband for essential aspects...
3879
The Definitive Guide on Win32 to NT Path Conversion (2016)
Posted by James Forshaw, path’ological reverse engineer.How the Win32 APIs process file pat...
3880
Anatomy of a JWT
Technical article explains JSON Web Tokens (JWT), their component parts, and how they are used for authentication.
3881
Privacy Harm Is Harm
Every day, corporations track our movements through license plate scanners, building detailed profiles of where we go, when we go there, and who we visit. When they do this to us in violation of data privacy laws, we’ve suffered a real harm—period. We shouldn’t need to prove we’ve suffered...
3882
BrowserStack Post Mortem (Shell shocked)
Official transparency report on the November 2014 BrowserStack security breach involving a legacy prototype server (Shellshock). Incident fully resolved. BrowserStack is now SOC 2 Type II, ISO 27001:2022, and GDPR compliant. Trusted by 50,000+ companies.
3883
Hardening Compiler Flags for NixOS
In the past year some Mayflower colleagues have started using and contributing to NixOS, a purely functional GNU/Linux distribution that combines package and configuration management. We decided that we would give it a try in production but stumbled upon some issues that had to be resolved first. We have added new…
3884
Law Enforcement Uses Border Search Exception as Fourth Amendment Loophole
In recent months, U.S. Customs and Border Protection agents have sought access to private data on the cell phones of two journalists. Such incidents are offensive because they threaten the independence of the press and pose specific risks to confidential sources. This government overreach also...
3885
Jitsi Meet Security and Privacy
How secure is Jitsi? Learn more about the Jitsi Meet Security & Privacy information, including how we make sure to protect your privacy here.
3886
3887
TCP backdoor 32764 – how we could patch the Internet (or part of it)
Eloi Vanderbéken recently found a backdoor on some common routers, which is described on his GitHub here. Basically, a process that listens on the 32764 TCP port runs, sometimes accessible from the WAN interface. We scanned the v4 Internet to look for the routers that have this backdoor wild open, and gathered some…
3888
EFF's Updated SSL Configuration
EFF recently updated our SSL certificate and configuration. This gave us an A+ rating on SSL Labs, a great jumping off point for reviewing a site's secure connection. What follows is a quick, technical guide to how we achieved this. Generating a Certificate First we generate an 4096-bit RSA private...
3889
The Mitto AG surveillanve case – or why we must never backdoor encryption
A single employee leaked sensitive data to secret services, potentially also to Russia.
3890
Security Best Practices for Fintech Application Development
Learn how to build and manage your card program using Marqeta's guides and API reference documentation.
3891
We found cryptography bugs in the elliptic library using Wycheproof
Trail of Bits discovered and disclosed two vulnerabilities in the widely used elliptic JavaScript library that could allow signature forgery or prevent valid signature verification, with one vulnerability still unfixed after the 90-day disclosure window.
3892
Cybersecurity Bill Broad Enough to Use Against WikiLeaks and The Pirate Bay
Congress is doing it again: they’re proposing overbroad regulations that could have dire consequences for our Internet ecology. The Cyber Intelligence Sharing and Protection Act of 2011 (H.R. 3523), introduced by Rep. Mike Rogers and Rep. Dutch Ruppersberger, allows companies or the government[fn]...
3893
Thoughts and Concerns about Operation Onymous
What happened Recently it was announced that a coalition of government agencies took control of...
3894
3895
Google tips off cops after spotting child abuse images in email
The Sophos Blog
3896
Sandboxes won't save you from OpenClaw
AI agent misbehavior isn't a sandbox problem—it's a permissions problem.
3897
TRESOR Runs Encryption Securely Outside RAM
TRESOR is a secure implementation of AES which is resistant against cold boot attacks. The basic idea behind this implementation is to store the secret key inside CPU registers rather than in RAM.
3898
Thai activist jailed under lese majeste laws for sharing an article on Facebook
Thai activist Jatuphat “Pai” Boonpattaraksa was sentenced this week to two and a half years in prison—for the crime of sharing a BBC article on Facebook. The Thai-language article profiled Thailand’s new king and, while thousands of users shared it, only Jutaphat was found to violate Thailand’s...
3899
Identity Is Dead
First published April 2018.
3900
Bringing HSTS to www.google.com
Posted by Jay Brown, Sr. Technical Program Manager, Security For many years, we’ve worked to increase the use of encryption between our us...