4111
OAuth Attack Vectors
Intro The OAuth2 authorization protocol has been under fire for the past ten years. You've probably already heard about plenty of "return_uri" tricks, token leakages, CSRF-style attacks on clients, an
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
4112
4113
And the privacy invasion award goes to …
Who’s playing fast and loose with your data? The Big Brother Awards, billed as the “Oscars for data leeches” by the hackers and privacy advocates who hand out the prizes, shine a high-intensity spotlight on companies and individuals with poor privacy track records. Since 1998, Privacy International...
4114
Flock, Private Contact and Calendar Cloud Sync for Android
At Open Whisper Systems, we believe users should have both privacy and powerful services. Today we’re releasing Flock, a private cloud sync service for your personal data. Your contacts and calendars belong to you. So does your privacy. Flock makes it possible to have both.
4115
Don't Feed Them After Midnight: Reverse-Engineering the Furby Connect
A Accenture oferece oportunidades que surgem a partir da disrupção tecnológica em todas as indústrias, em todos os países, todos os dias. Saiba mais!
4116
FlipperZero: Our Response to the Canadian Government
In just a few years, Flipper Zero has become so popular that it’s now surrounded by many myths. It’s no wonder that people in power are trying to make Flipper Zero illegal. As you might have seen in the news, the Canadian government plans to ban Flipper Zero
4117
Texas Is Enforcing Its State Data Privacy Law. So Should Other States
States need to have and use data privacy laws to bring privacy violations to light and hold companies accountable for them. So, we were glad to see that the Texas Attorney General’s Office has filed its first lawsuit under Texas Data Privacy and Security Act (TDPSA) to take the Allstate Corporation...
4118
Tor Browser 7.0a4 is released
Tor Browser 7.0a4 is now available from the Tor Browser Project page and also from our...
4119
Internet Archive Sues to Stop New Washington State Law
The Internet Archive has filed a federal challenge to a new Washington State law that intends to make online service providers criminally liable for providing access to third parties' offensive materials. There is a press release and an article about it.
4120
R5N - Obfuscated mesh routing on hostile networks.
This document contains the R 5 N DHT technical specification. R 5 N is a secure distributed hash table (DHT) routing algorithm and data structure for decentralized applications. It features an open peer-to-peer overlay routing mechanism which supports ad-hoc permissionless participation and support for topologies in…
4121
Run your own CTF: Stripe publishes VM images
Online payment processing for internet businesses. Stripe is a suite of payment APIs that powers commerce for businesses of all sizes.
4122
Intelligent Tracking Prevention 2.1
Note: Read about past updates to this technology in other blog posts about Intelligent Tracking Prevention, and the Storage Access API.
4123
4124
Defeating KASLR by doing nothing at all
IntroductionI’ve recently been researching Pixel kernel exploitation and as part of this research...
4125
Cannoli: The Fast QEMU Tracer
Cannoli Cannoli is a high-performance tracing engine for qemu-user. It can record a trace of both PCs executed as well as memory operations. It consists of a small patch to QEMU to expose locations to inject some code directly into the JIT, a shared library which is loaded
4126
A future without passwords
On World Password Day, we’re providing a sneak peek at a future in which, one day, you won’t need a password at all.
4127
Can I erase sensitive data on an old hard drive with Neodymium Magnets?
Discover secure hard drive destruction methods using powerful magnets to safeguard sensitive data.
4128
PGPP (Pretty Good Phone Privacy) Beta Launch
We are excited to announce that PGPP (Pretty Good Phone Privacy) is now in Beta.
4129
Cracking LUKS/dm-crypt passphrases
Linux uses dm-crypt in order to provide transparent disk or partition encryption. What are the options in case you need to recover passphrase from such encryption? There are already ready-made tools, but we have also produced and published our own in order to support newer LUKS format/ciphers/hashing.
4130
What is end-to-end encryption and how does it work?
End-to-end encryption is the foundation of the Proton ecosystem. Here’s what E2EE means, and how it protects you.
4131
4132
iOS Single App Mode Escape
This blogpost, written by WithSecure’s STINGR Group, presents the analysis of a security incident that happened in February 2026 and was investigated by the WithSecure Incident Response team.
4133
Database containing personal info of 106M visitors to Thailand exposed online
Just how safe is your personal information? With more than thousand reported data breaches since 2004, the odds are not in your favor.
4134
Telegram secret chat geolocation leak
UPD: I've just received confirmation from Telegram, that a patched version was released a few hours ago. Here is the patch on github....
4135
4136
Root Cause of Reboot Issue Identified; Updated Guidance
Intel Newsroom delivers the latest news, announcements, and updates. Stay informed on Intel innovations.
4137
When Myanmar needs ProtonVPN the most, Apple stands in the way of human rights
Myanmar citizens have used Proton tools to communicate securely and access the truth. But Apple has blocked us from sending out important app updates.
4138
4139
Non-official MtGox investigation update and preliminary release
The official blog of WizSec, a group of bitcoin security specialists, and their investigation into MtGox.
4140
An Armful of CHERIs
Today, Arm announced that the first silicon supporting the Morello prototype architecture, a research project led by Arm, Microsoft, University of Cambridge and others, is now available on a limited run of demonstration boards, which are being shipped from today to industry partners for testing. Morello is the first…