31
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 316 posts.
32
Private by Design: How We Built Firefox Sync
Firefox Sync by default protects all your synced data so Mozilla can’t read it. We built Sync this way because we put user privacy first. How it works is...
33
Sen. Wyden Confirms Cell-Site Simulators Disrupt Emergency Calls
Sen. Ron Wyden has sent a letter to the U.S. Department of Justice concerning disruptions to 911 emergency services caused by law enforcement’s use of cell-site simulators (CSS, also known as IMSI catchers or Stingrays). In the letter, Sen. Wyden states that:Senior officials from the Harris...
34
Introducing Firefox Monitor, Helping People Take Control After a Data Breach
Data breaches, when information like your username and password are stolen from a website you use, are an unfortunate part of life on the internet today. I
35
Intel Issues Updates to Protect Systems from Security Exploits
Intel Newsroom delivers the latest news, announcements, and updates. Stay informed on Intel innovations.
36
Mitigations landing for new class of timing attack
Several recently-published research articles have demonstrated a new class of timing attacks (Meltdown and Spectre) that work on modern CPUs. Our internal experiments confirm that it is possible to use ...
37
EFF's Fight to End Warrantless Device Searches at the Border
EFF has been working on multiple fronts to end a widespread violation of digital liberty—warrantless searches of travelers’ electronic devices at the border. Government policies allow border agents to search and confiscate our cell phones, tablets, and laptops at airports and border crossings for...
38
Australia’s vague anti-encryption law sets a dangerous new precedent
The Assistance and Access (A&A) law requires tech companies to help law enforcement agencies break into individuals’ encrypted data.
39
Protecting Google Cloud customers without impacting performance
If you’ve been keeping up on the latest tech news, you’ve undoubtedly heard about the CPU security flaw that Google’s Project Zero disclosed last Wednesday. On Friday, w…
40
What Data Does Facebook Collect When I’m Not Using Facebook, and Why?
Explaining more about the information we get from other websites and apps; how we use the data they send to us; and the controls you have.
41
A picture got my PostgreSQL database to start mining Monero
A Deep Dive into Database Attacks [Part III]: Why Scarlett Johansson’s Picture Got My Postgres Database to Start Mining Monero
42
Open-sourcing gVisor, a sandboxed container runtime
Introducing gVisor, a new kind of sandbox that helps provide secure isolation for containers, while being more lightweight than a virtual machine (VM).
43
44
TLS 1.3 approved
Search IETF mail list archives
45
Today, Europe Lost The Internet. Now, We Fight Back
Today, in a vote that split almost every major EU party, Members of the European Parliament adopted every terrible proposal in the new Copyright Directive and rejected every good one, setting the stage for mass, automated surveillance and arbitrary censorship of the internet: text messages like...
46
Telling the Truth About Defects in Technology Should Never Be Illegal
Congress has never made a law saying, "Corporations should get to decide who gets to publish truthful information about defects in their products,"— and the First Amendment wouldn't allow such a law — but that hasn't stopped corporations from conjuring one out of thin air, and then defending it as...
47
Things to know about the GDPR, Mozilla and Firefox
Has your email inbox been filling up with privacy policy updates? It seems like every service, app or subscription I’ve signed up for (including more tha
48
Chrome will stop displaying ads that are repeatedly flagged as disruptive
Starting on February 15, Chrome will stop showing all ads on sites that repeatedly display disruptive ads after they’ve been flagged.
49
Keybase Exploding Messages
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
50
51
Hashicorp Vault v1.0
Vault 1.0 is focused on renovating Vault's infrastructure to support high performance, scalable workloads.
52
Famous cryptographers’ tombstone cryptogram decrypted
The Sophos Blog
53
Let's Encrypt: Looking Forward to 2019
Let’s Encrypt had a great year in 2018. We’re now serving more than 150 million websites while maintaining a stellar security and compliance track record. Most importantly though, the Web went from 67% encrypted page loads to 77% in 2018, according to statistics from Mozilla. This is an incredible rate of change! We’d…
54
A security vulnerability in Git that can lead to arbitrary code execution
The Git community has disclosed an industry-wide security vulnerability in Git that can lead to arbitrary code execution when a user operates in a
55
What Spectre and Meltdown Mean for WebKit
Security researchers have recently uncovered security issues known as Meltdown and Spectre.
56
57
Protecting Security Researchers
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
58
Everything you should know about certificates and PKI but are too afraid to ask
Certificates and public key infrastructure (PKI) are hard. No shit, right? I know a lot of smart people who''ve avoided this particular rabbit hole. Eventually, I was forced to learn this stuff because of what it enables: PKI lets you define a system cryptographically. It''s universal and vendor-neutral yet poorly…
59
LoJax: First UEFI rootkit found in the wild, courtesy of the Sednit group
ESET researchers have discovered the first in-the-wild UEFI rootkit. Dubbed LoJax, the research team has shown that the Sednit operators used different components of the LoJax malware to target a few government organizations in the Balkans as well as in Central and Eastern Europe.
60
AWS Secrets Manager – Store, Distribute, and Rotate Credentials Securely
Today we’re launching AWS Secrets Manager which makes it easy to store and retrieve your secrets via API or the AWS Command Line Interface (AWS CLI) and rotate your credentials with built-in or custom AWS Lambda functions. Managing application secrets like database credentials, passwords, or API Keys is easy when…