Topics /
The most popular blog posts about security & privacy on Hacker News. 316 posts.
For development teams, process can often be antithetical to speed. Ease of deployment and security tend to have an inverse relationship, with some resentment for the security team occasionally mixed in. You may have seen the following tweet: https://twitter.com/petecheslock/status/595617204273618944?lang=en We believe…
US Customs and Border Protection, a component of the Department of Homeland Security, today posted a revised policy on Border Searches of Electronic Devices and a Privacy Impact Assessment of some of the changes made by the new policy.
An updated example of techniques to avoid detection.
April 25, 2023: We’ve updated this blog post to include more security learning resources. Update on October 8, 2018: After we launched support for security devices manufactured by Yubico on September 25, 2018, we received feedback from customers to support other U2F security key providers, as well. Starting October 8…
We are excited to finally have all our development, test, staging, and production environments managed with Terraform.
Research By: Yoav Alon, Netanel Ben-Simon Introduction The year 2017 was an inflection point in the vulnerability landscape. The number of new vulnerabilities reported that year was around 14,000, which is over twice the number from the year before (see table below). The probable reason for this is the increased…
Anonymity technologies are becoming a legal requirement for public agency and corporate anti-corruption compliance.
On June 20th, board members of the „Zwiebelfreunde“ association in multiple German cities had their homes searched under the dubious pretence that they were „witnesses“ while their computers and...
L1 Terminal Fault/Foreshadow explained in ~three minutesFor a more detailed technical view of L1 Terminal Fault, please see this deeper dive with Jon Masters.How we got here: a brief history of modern microprocessor cachesModern computer microprocessors are complex machines, filled with many optimizations designed to…
Protecting people’s information is at the heart of everything we do.
Search DuckDuckGo for “polygraph” and you’ll find AntiPolygraph.org, which hosts more documentation on polygraphs than any other site on the Internet, in the top 10 results. The same is true for searches on “polygraph” with Microsoft’s Bing search engine (in the United States), with Russia’s Yandex search engine, and…
A pluggable and configurable linter tool for identifying and reporting on patterns in JavaScript. Maintain your code quality with ease.
Want to know more about a DuckDuckGo product or feature? Find answers to frequently asked questions and more at DuckDuckGo Help.
Turkey has a track record of blocking certain websites. Here's how you can bypass Turkey's online censorship and access any site (such as Proton Mail).
Posted by Matt Linton, Senior Security Engineer and Pat Parseghian, Technical Program Manager Yesterday, Google’s Project Zero team posted...
In order to protect civil liberties without hampering innovation, lawmakers should require public input before surveillance tools are deployed and ensure that facial recognition databases are purged of data related to law-abiding people.
TL;DR: Firefox Nightly now supports encrypting the TLS Server Name Indication (SNI) extension, which helps prevent attackers on your network from learning your browsing history. You can enable encrypted SNI ...
npm Blog (Archive); updates from the npm team are now published on the GitHub Blog and the GitHub Changelog
Google Cloud offers our best practices to ensure you have a safe, scalable, usable account authentication system.
Using the web today, you are a target. And because of the rampant tracking across websites, each time you use the internet, you become an easier target. Tor Browser can help.
An ethical crisis in the digital forensics industry came to a head last week with the release of new details on Microsoft’s undocumented “Activities” API. A previously unknown trove of access and activity logs held by Microsoft allows investigators to track Office 365 mailbox activity in minute detail. Following a…
Posted by Jann Horn, Google Project ZeroThis blogpost describes a way to exploit a Linux kernel b...
