4141
LaTeX TikZ for Cryptographers
LaTeX Code for Cryptographic Images.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
4142
Reproducible Signal builds for Android
As of our latest Android release, Signal builds are reproducible. Reproducible builds help to verify that the source code in our GitHub repository is the exact source code used to build the compiled Signal APK being distributed through Google Play.
4143
4144
Detecting Spectre and Meltdown Using Hardware Performance Counters
Security pros have been working on a new hardware attack type that exploits cache side-effects and speculative execution to perform privileged memory disclosure.
4145
Police Must Respect the Right of Citizens to Record Them
“I’m asking all the citizens of North Charleston to continue taping.” That is what Councilwoman Dorothy Williams said in response to the shooting death of Walter Scott. She and others recognize that the story would have been very different without the video showing that a white police officer shot...
4146
4147
Preventing AMI’s BiOS from interfering with coreboot flashing on the Librem 13
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
4148
Is Apple Banning Free Analytics SDKs?
This story has moved a lot since it was published – our update from March 3 tells the latest. Apple...
4149
4150
4151
TPM Sniffing
TL;DR : we reproduced Denis Andzakovic’s proof-of-concept showing that it is possible to read and write data from a BitLocker-protected device (for instance, a stolen laptop) by sniffing the TPM key from the LCP bus.
4152
Anonymous credentials: rate-limit bots and agents without compromising privacy
As AI agents change how the Internet is used, they create a challenge for security. We explore how Anonymous Credentials can rate limit agent traffic and block abuse without tracking users or compromising their privacy.
4153
Vulnerabilities show why STARTTLS should be avoided if possible (2021)
Guest Post: Study finds more than 40 STARTTLS-related security flaws in many different software products, both client-side and server-side.
4154
OEMpocalypse: Unprivileged Android app to root on Samsung, Xiaomi, others
Part 1 of a series that takes an unprivileged Android app to root on Samsung, Xiaomi, and Oppo/OnePlus/Realme devices, with a single strategy.
4155
4156
The Evil Within the Comparison Functions
Perhaps, readers remember my article titled Last line effect. It describes a pattern I′ve once noticed: in most cases programmers make an error in the last line of similar text blocks. Now I want...
4157
4158
Supply Chain Attack Using PyPI Packages “Colorslib”, “Httpslib”, and “Libhttps”
The FortiGuard Labs team discovered an attack embedded in three PyPI packages called ‘colorslib’, ‘httpslib’, and “libhttps”. Read our blog to learn more.…
4159
4160
Chaos Computer Club Website Blocked by UK ISPs
A significant portion of British citizens are currently blocked from accessing the Chaos Computer Club's (CCC) website. On top of that, Vodafone customers are blocked from accessing the ticket sale...
4161
Microsoft Windows Network File System v4 Remote Code Execution
In this excerpt of a Trend Micro Vulnerability Research Service vulnerability report, Guy Lederfein and Quintin Crist of the Trend Micro Research Team detail a recently patched remote code execution vulnerability in the Microsoft Windows operating system, originally discovered and reported by Yuki C
4162
4163
Internet Atlas maps the physical internet to enhance security
A thorough understanding of the internet’s physical makeup has only recently emerged, thanks to painstaking work by UW-Madison researchers and their collaborators.
4164
4165
Malicious app on Google Play drops banking malware on users’ devices
Pradeo’s researchers discovered a malicious mobile application called 2FA Authenticator distributed on Google Play and installed by 10K+ users.
4166
Macie: Automatically Discover, Classify, and Secure Content at Scale
This blog is out of date. Please refer here for the updated info. When Jeff and I heard about this service, we both were curious on the meaning of the name Macie. Of course, Jeff being a great researcher looked up the name Macie and found that the name Macie has two meanings. It has […]
4167
4168
The real reason for large DDoS attacks? It's IP Spoofing, not memcached
A week ago we published a story about new amplification attacks using memcached protocol on UDP port 11211. A few things happened since then: Github announced it was a target of 1.3Tbps memcached attack. OVH and Arbor reported similar large attacks with the peak reported at 1.7Tbps.
4169
Counter Galois Onion: Improved encryption for Tor circuit traffic
Tor is upgrading its relay encryption algorithm for improved security. In upcoming releases, Arti and Tor will both support a new encryption algorithm called Counter Galois Onion (CGO). CGO prevents attackers from tampering with encrypted traffic, adds forward secrecy, and brings Tor's encryption up to modern…
4170
Kaspersky Lab Discovers 'Gauss'
Kaspersky Lab announces the discovery of ‘Gauss’, a new cyber-threat targeting users in the Middle East