601
What Data Does Facebook Collect When I’m Not Using Facebook, and Why?
Explaining more about the information we get from other websites and apps; how we use the data they send to us; and the controls you have.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,439 posts.
602
Firefox Containers Preview
Today, we’re excited to announce the Preview of Containers in Firefox version 153, which lets you keep separate parts of your online life (work, shopping
603
USPS text scammers duped his wife, so he hacked their operation
How someone I don't know hacked the scammers back
604
Chrome's Plan to Distrust Symantec Certificates
Posted by Devon O’Brien, Ryan Sleevi, Andrew Whalley, Chrome Security This post is a broader announcement of plans already finalized on t...
605
If you’re not using SSH certificates you’re doing SSH wrong (2019)
SSH has some pretty gnarly issues when it comes to usability, operability, and security. The good news is this is all easy to fix. SSH is ubiquitous. It’s the de-facto solution for remote administration of *nix systems. SSH certificate authentication makes SSH easier to use, easier to operate, and more secure.
606
A picture got my PostgreSQL database to start mining Monero
A Deep Dive into Database Attacks [Part III]: Why Scarlett Johansson’s Picture Got My Postgres Database to Start Mining Monero
607
Privacy doesn't mean anything anymore, anonymity does
Privacy is when they promise to protect your data. Anonymity is when they never had your data to begin with.
608
609
Palo Alto Networks sends cease-and-desist letter to take down review videos
In response to our Cloud Security Punch-Out! videos, Palo Alto Networks sent this cease and desist letter, demanding the comparison be removed. Here is my response.
610
PHP2Shell: AI uncovers critical RCE in PHP
Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.
611
Introducing Anonymous Login and an Updated Facebook Login
Improved privacy options put better controls in your hands.
612
Cursor 0day: When Full Disclosure Becomes the Only Protection Left
A seven-month-old arbitrary code execution vulnerability remains present in Cursor, leaving 1 million daily users to rely on public disclosure after months of unsuccessful attempts to obtain remediation updates.
613
New study: The advertising industry is systematically breaking EU law
The online advertising industry is behind comprehensive illegal collection and indiscriminate use of personal data, research from the Norwegian Consumer Council shows.
614
When it comes to privacy, default settings matter
What if I told you that on nearly every single website you visit, data about you was transmitted to dozens or even hundreds of companies, all so that the w
615
Over the edge: The use of design tactics to undermine browser choice
In order to be able to choose their own browser, people must be free to download it, easily set it to default and to continue using it - all without ...
616
617
618
In the Wake of Aaron Swartz's Death, Let's Fix Draconian Computer Crime Law
Outpourings of grief and calls for change continue to flood the Internet after the suicide of Aaron Swartz, only 26 years old. Aaron was one of our community's best and brightest, and he acheived great things in his short life. He was a coder, a political activist, an entrepreneur, a contributor to...
619
620
GitHub RCE Vulnerability: CVE-2026-3854 Breakdown
A CVSS 8.7 vulnerability in GitHub Enterprise Server allows remote code execution. Read the threat brief and find vulnerable GHES instances from Wiz.
621
Belgium legalises ethical hacking
On 15 February 2023, Belgium saw the entering into force of a new ‘whistleblower’ law, which legalised ‘ethical hacking’ even for cases where the hacked entity did not consent to it. In order to benefit from such decriminalisation, the law poses a number of conditions for ethical hacking, that have to be fulfilled in…
622
Google Chrome Hacked?
VUPEN Security provides vulnerability management and intelligence solutions (advisories, analysis, exploits).
623
Gmail Will Warn If Message Is Not Authenticated/Encrypted
Making email safer for you with two new security features in Gmail on the web.
624
More Than 1M Google Accounts Breached by Gooligan
As a result of a lot of hard work done by our security research teams, we revealed today a new and alarming malware campaign. The attack campaign, named %
625
Norwegian ban on Meta behavioral advertising extended to entire EU
Det europeiske personvernrådet har nå bestemt at det norske forbudet mot adferdsbasert markedsføring på Facebook og Instagram skal bli permanent og utvides til å gjelde hele EU/EØS.
626
A 0-click exploit chain for the Pixel 10
We recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible t...
627
Let's Encrypt's New Root and Intermediate Certificates
On Thursday, September 3rd, 2020, Let’s Encrypt issued six new certificates: one root, four intermediates, and one cross-sign. These new certificates are part of our larger plan to improve privacy on the web, by making ECDSA end-entity certificates widely available, and by making certificates smaller. Given that we…
628
Open-sourcing gVisor, a sandboxed container runtime
Introducing gVisor, a new kind of sandbox that helps provide secure isolation for containers, while being more lightweight than a virtual machine (VM).
629
630