541
Tracking the Fake GitHub Star Black Market
Use Dagster, dbt, and BigQuery to analyze suspicious GitHub star activity and protect open-source credibility.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,439 posts.
542
Malicious PyPI packages stealing credit cards and injecting code
JFrog finds a new supply chain attack targeting python developers using the PyPI repository
543
A thousand fewer paths to root
OpenAI built an autonomous pipeline that found, validated, and generated patches for 948 local privilege-escalation vulnerabilities in the Linux kernel.
544
Can we believe our eyes? Misleading people with Unicode.
Access to this page requires authorization. You can try signing in or changing directories .
545
PRISM – NSA surveillance program did not prevent a single terrorist attack
Mass surveillance costs millions of Dollars. Yet, it does not improve security.
546
547
EFF sues the NSA Over Illegal Surveillance
firstunitarianvnsa-final.pdf
548
Don't use text pixelation to redact sensitive information
See why you should never use pixelation for redacting text and why it is a surefire way to get your data leaked. Learn from security researcher Dan Petro.
549
G-3PO: A protocol droid for Ghidra, or GPT-3 for reverse-engineering
(A Script that Solicits GPT-3 for Comments on Decompiled Code)
550
Shutting down our public encrypted DNS
Mullvad has operated public encrypted DNS (DoH) servers since 2022. They are unnecessary when using Mullvad VPN — traffic is already encrypted and Mullvad VPN's internal DNS handles all queries.
551
552
Mitigations landing for new class of timing attack
Several recently-published research articles have demonstrated a new class of timing attacks (Meltdown and Spectre) that work on modern CPUs. Our internal experiments confirm that it is possible to use ...
553
Mistral's Shieldstral: 3B open-weights model for multimodal moderation
Shieldstral introduces a 3B open-weights multimodal safety classifier that outperforms models up to 7x its size.
554
Did the FBI Pay a University to Attack Tor Users?
The Tor Project has learned more about last year's attack by Carnegie Mellon researchers on the...
555
Today Google is turning on tracking for many users that previously turned it off
Workspace admins can no longer deactivate Google activity tracking for their users, Google says this is helping people.
556
Bitwarden Acquires Passwordless.dev
Bitwarden has acquired European-based startup Passwordless.dev, a significant milestone in rounding out the Bitwarden commitment to offering open source, scalable, and secure passwordless solutions to every business and end user.
557
How to Safely Store Your Users' Passwords in 2016
Salted Password Hashing with Argon2, Scrypt, Bcrypt, and PBKDF2
558
The protester's guide to smartphone security
Your phone is an essential tool, but it also represents a huge risk to your privacy and security. Understanding these best practices when it comes to securing your smartphone will help keep you and your data safe.
559
You’re muted – or are you? Videoconferencing apps may listen when mic is off
Not only did researchers find that the apps gather audio data while "mute" is activated; they could identify activities picked up when microphones weren't believed to be on, such as eating, playing music, typing and cleaning.
560
The New TextSecure: Privacy Beyond SMS
Today’s release of TextSecure is the final step in the transition from a private SMS app to a private asynchronous IM app that does not depend on SMS/MMS. Using the lessons we’ve learned from the SMS environment over the past four years, we’ve developed an open protocol for asynchronous chat that...
561
562
Nikola: How to Parlay an Ocean of Lies into a Partnership with GM
Initial Disclosure: After extensive research, we have taken a short position in shares of Nikola Corp. This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.
563
Mullvad is now available on Amazon
For the first time in our history you can buy Mullvad VPN physical activation codes on Amazon!
564
CSAR: European Parliament rejects mass scanning of private messages
This marks a positive development for human rights in one of the most controversial draft European Union (EU) laws in recent memory.
565
Review of Mullvad VPN
X41 releases the audit report of Mullvad VPN
566
567
568
Nevada court shuts down police use of federal loophole for civil forfeiture
RENO, Nev.—In a major victory for property rights, today a Washoe County judge ruled that Nevada law enforcement cannot use a federal program to bypass […]
569
570
Introducing Collusion: Discover who’s tracking you online
Web Extension version of the Firefox Lightbeam add-on - mozilla/lightbeam-we