4081
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
4082
WordPress 5.2: Mitigating Supply-Chain Attacks
We wrote a cryptography library entirely in PHP to make your WordPress site secure against supply-chain attacks.
4083
EFF's “Yellow Dots of Mystery” (2008)
Since late 2004, EFF has been warning the public about "printer dots" -- tiny yellow dots that appear on documents produced by many color laser printers and copiers. These yellow dots form a coded pattern on every page the printer produces and can be used to identify specific details about a...
4084
ProtonMail now the maintainer of OpenPGPjs email encryption library
OpenPGPjs is the world's most popular JavaScript PGP email encryption library and is used by millions of end users and hundreds of developers.
4085
Sandstorm gets a security review
Take control of your web by running your own personal cloud server with Sandstorm.
4086
4087
Going Beyond Vulnerability Rewards
Posted by Michal Zalewski, Google Security Team We all benefit from the amazing volunteer work done by the open source community. That’s w...
4088
4089
SIDH in Go for quantum-resistant TLS 1.3
Most of today's cryptography is designed to be secure against an adversary with enormous amounts of computational power. This means estimating how much work certain computations require, and choosing cryptographic parameters based on our best estimates.
4090
Signal: Safety number updates
The latest Signal release includes some changes to the way safety numbers work. Safety numbers allow Signal users to verify the privacy of their communication with a contact, either by comparing a number or by scanning a single QR code. We recently introduced this new design as an update to Sign...
4091
4092
A tale of a DNS exploit: CVE-2015-7547
A buffer overflow error in GNU libc DNS stub resolver code was announced last week as CVE-2015-7547. While it doesn't have any nickname yet (last year's Ghost was more catchy), it is potentially disastrous.
4093
Stealing Downloads from Slack Users
Stealing Downloads from Slack Users I’m going to go over an interesting feature abuse that could have been used to steal and even manipulate downloads from Slack users using the Slack desktop app …
4094
4095
EU Digital Identity framework (eIDAS) another kind of chat control?
The proposed EU Digital Identity framework (eIDAS) aims to meddle with the process around internet certificates and will undermine the independence and security assurances of the basis for website security:
4096
When does an old iPhone become unsafe to use?
When Apple stops issuing security updates for older iPhones, they become unsafe to use. But exactly how long can you safely keep using an old iPhone, and when should you upgrade?
4097
Hex-rays is moving to a subscription model
Hex-Rays is moving to a subscription model In 2022, we will update the catalogue of products available under our subscription model. Our new bundles are
4098
4099
Secure Boot in the Era of the T2
Explore the Duo Blog for expert tips, security insights, and resources to stay updated on the latest in security and access management trends.
4100
Is SHA-3 slow?
In a recent post , Adam Langley complains that “SHA-3 is slow”. Similar comments appear from time to time on the web (see also David Wong's post ). But what does it mean precisely? Let us dig into it.
4101
Information about a recent security incident at Mailchimp
Maintaining our security commitment to our customers
4102
4103
Defensive Programming
A community and blog for embedded software makers
4104
4105
Introducing Transport Layer Security in pure OCaml
This domain name has been registered with Gandi.net. It is currently parked by the owner.
4106
4107
4108
The investigation into ToTok
triaging a massively popular iOS application, with a dark side
4109
4110
The Million-Key Question: Investigating the Origins of RSA Public Keys
Petr Švenda, Matúš Nemec, Peter Sekan, Rudolf Kvašňovský, David Formánek, David Komárek, and Vashek Matyáš, Masaryk University