31
BundesMessenger, a secure messenger for Germany’s public administration
BundesMessenger is a modified version of Element which we’re working with BWI to develop and maintain.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 350 posts.
32
Gnome patent troll stripped of patent rights
A recent decision at the US patent office may well give patent trolls cause to steer clear of open source projects – even more than the fierce resistance the community impressively funded and mount…
33
Removing SMS support from Signal Android (soon)
For many years, the Signal app on Android has supported sending and receiving plaintext SMS and MMS messages in addition to Signal messages. SMS and MMS are standardized communication protocols that allow mobile devices to send and transmit messages, and most people picking up their phone to text...
34
Toyota suffered a data breach by accidentally exposing a secret key on GitHub
On October 7th, Toyota revealed a partial copy of their T-Connect source code had been accidentally exposed for 5 years, including access to data for over 290,000 customers.
35
OpenSSL 3.0.7 fixes X.509 email address buffer overflows
Today we published an advisory about CVE-2022-3786 (“X.509 Email Address Variable Length Buffer Overflow”) and CVE-2022-3602 (“X.509 Email Address 4-byte Buffer Overflow”).
36
37
Web hacking techniques of 2021
Welcome to the Top 10 (new) Web Hacking Techniques of 2021, the latest iteration of our annual community-powered effort to identify the most significant web security research released in the last year
38
Internet spring cleaning: How to delete Instagram, Facebook and other accounts
So you’ve washed your sheets and vacuumed under the couch in the name of spring cleaning. But what about your online clutter? Apps that delight, inform a
39
Git security vulnerability announced
Upgrade your local installation of Git, especially if you are using Git for Windows, or you use Git on a multi-user machine.
40
SOC2: The screenshots will continue until security improves
We got SOC2 certified so now you have to pay us more.
41
Bunny fonts – privacy respecting drop-in replacement for Google Fonts
Strengthen your privacy, improve your performance and give your website a personality by using Bunny Fonts. The only fully GDPR fonts powered by a CDN!
42
We purchased a machine from China and it came with malware preinstalled
Zhengbang ZB3245 review. We bought a Zhengbang Pick & Place machine and this page tells you all about our experience of setting up and using.
43
Brave browser now blocks cookie banners
New versions of Brave will hide—and, where possible, completely block—cookie consent notifications. Brave's approach is distinct and more privacy-preserving than similar systems used in other browsers.
44
LastPass user vaults stolen in recent hack
Please refer to the latest article for updated information.nbs[..]
45
GoodWill ransomware forces victims to donate to the poor
Goodwill ransomware group propagates very unusual demands in exchange for the decryption key. The Robin Hood-like group is forcing its Victims to donate to the poor and provides financial assistance to the patients in need.
46
Data shows that the EU's CSAM scanning will not have the intended effect
We have analyzed telecommunication surveillance orders. Data shows that the EU's CSAM scanning is completely disproportionate and must be stopped.
47
GDPR enforcer rules that IAB Europe’s consent popups are unlawful
EU data protection authorities find that the consent popups that plagued Europeans for years are illegal. All data collected through them must be deleted. This decision impacts Google’s, Amazon’s and Microsoft’s online advertising businesses.
48
Don't use text pixelation to redact sensitive information
See why you should never use pixelation for redacting text and why it is a surefire way to get your data leaked. Learn from security researcher Dan Petro.
49
Today Google is turning on tracking for many users that previously turned it off
Workspace admins can no longer deactivate Google activity tracking for their users, Google says this is helping people.
50
You’re muted – or are you? Videoconferencing apps may listen when mic is off
Not only did researchers find that the apps gather audio data while "mute" is activated; they could identify activities picked up when microphones weren't believed to be on, such as eating, playing music, typing and cleaning.
51
Mullvad is now available on Amazon
For the first time in our history you can buy Mullvad VPN physical activation codes on Amazon!
52
TikTok updated privacy policy to collect faceprints and voiceprints (2021)
TikTok has violated privacy regulations before, and they are in position to share millions of American users' data with the Chinese government.
53
Is Grammarly a keylogger? What can you do about it?
Is Grammarly a keylogger? Here's what to consider so employees can reap the benefit of this valuable tool without compromising data security.
54
CCC captures U.S. military biometrics database
The U.S. military used biometric devices en masse to capture people in Afghanistan. Some devices were left behind during the hasty withdrawal of NATO troops. CCC researchers found large amounts of...
55
Lastpass Security Incident
Please refer to the latest article for updated information.nbs[..]
56
If you’re not using SSH certificates you’re doing SSH wrong (2019)
SSH has some pretty gnarly issues when it comes to usability, operability, and security. The good news is this is all easy to fix. SSH is ubiquitous. It’s the de-facto solution for remote administration of *nix systems. SSH certificate authentication makes SSH easier to use, easier to operate, and more secure.
57
Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard
Faster, easier and more secure sign-ins will be available to consumers across leading devices and platforms
58
Mullvad: Diskless infrastructure using stboot in beta
Diskless infrastructure using stboot (in beta) is now available on a pair of WireGuard servers in Sweden.
59
Class action against Oracle’s worldwide surveillance machine
Oracle claims to have amassed dossiers on 5 billion people, and generates $42.4 billion in annual revenue. ICCL's Dr Johnny Ryan is a lead plaintiff in a new U.S. class action to stop its global surveillance machine.
60
Google removed our website from search because it uses YouTube-dl
Update: Google accepted our DMCA counter notice and reinstated all 317 Kapwing webpages that they took down. In the week that the takedown was in effect, our website traffic was down 30%. A week ago, we received an email that every website owner dreads - a notification of a DMCA