61
TeamViewer stores user passwords in registry, encrypted with hard-coded key
Oh man where to even begin with this one. This was a crazy ride and I learned a ton along the way.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 319 posts.
62
Moving from reCAPTCHA to hCaptcha
We recently migrated the CAPTCHA provider we use from Google's reCAPTCHA to a service provided by the independent hCaptcha. Here's a walk through of the rationale in more detail.
63
SCOTUS rules you may sue government agents for damages when they violate rights
Arlington, Va.—In a unanimous opinion issued today by the U.S. Supreme Court, and authored by Associate Justice Clarence Thomas, the Court ruled in Tanzin v. […]
64
1.1.1.1 for Families
Introducing 1.1.1.1 for Families — the easiest way to add a layer of protection to your home network and protect it from malware and adult content.
65
1Password for Linux beta
Buckle up Linux Desktop users! We just opened an awesome ride that we'd love for you to join us on. 🎢 🙌🏼
66
Dockerfile Security Best Practices
Quickly improve the security of your docker containers by following security best practices in the Dockerfile
67
250M Microsoft customer service and support records exposed on the web
250 million leaked conversations between Microsoft customer support agents and customers were left exposed on the web, putting users at risk of phishing.
68
Using Zoom? Here are the privacy issues you need to be aware of
If you’re using Zoom while working from home, you should be aware of Zoom's privacy policies, including its “attention tracking” tool.
69
SSH Agent Explained
The SSH agent acts behind the scenes to keep you safe. Here's how it works.
70
New Mac ransomware spreading through piracy
We analyze a new Mac ransomware that appears to encrypt user files with a bit of a time delay. The ransomware encrypts files with little strategy.
71
Over 400 vulnerabilities on Qualcomm’s Snapdragon chip
Over 400 vulnerabilities on Qualcomm’s Snapdragon chip threaten mobile phones’ usability worldwide With over 3 billion users globally, smartphones are an %
72
We abused Slack's TURN servers to gain access to internal services
Slack's TURN server allowed relaying of TCP connections and UDP packets to internal Slack network and meta-data services on AWS.
73
How to Corrupt a SQLite Database File
An SQLite database is highly resistant to corruption. If an application crash, or an operating-system crash, or even a power failure occurs in the middle of a transaction, the partially written transaction should be automatically rolled back the next time the database file is accessed. The recovery process is fully…
74
Playing around with the Fuchsia operating system
A look at the new Fuchsia Operating System.
75
Linode launches free DDoS protection
/PRNewswire-PRWeb/ -- Linode, the world's largest independent cloud provider, today announced advanced protection across its global network of 11 data centers...
76
Zero-days in Cisco Discovery Protocol
Identify which devices of your company are impacted by five vulnerabilities that Armis found out in the Cisco Discovery Protocol (CPD).
77
HTML attributes to improve your users' two factor authentication experience
Learn how to use the HTML autocomplete, inputmode and pattern attributes to improve the user experience of logging in.
78
79
How to unc0ver a 0-day in 4 hours or less
By Brandon Azad, Project ZeroAt 3 PM PDT on May 23, 2020, the unc0ver jailbreak was released for ...
80
Twitter, Reddit support challenge of visa applicant social media requirement
WASHINGTON – Twitter, Reddit, and Internet Association filed an amicus brief late yesterday in support of a lawsuit filed last year by the Knight First Amendment Institute at Columbia University, the Brennan Center for Justice, and Simpson Thacher & Bartlett LLP on behalf of plaintiffs Doc Society and International…
81
Little Snitch and the deprecation of kernel extensions
You probably came here because your Mac showed a message telling you that software from “Objective Development Software GmbH” (Little Snitch) loaded a system extension that will no longer be compatible with a future version of macOS and that you…
82
Basic Intro to Elliptic Curve Cryptography (2019)
Learn cryptography in Go by building ciphers, hashes, password security, and encryption tools. Understand security beneath the library call.
83
Invasive, secretive “bossware” tracking workers
COVID-19 has pushed millions of people to work from home, and a flock of companies offering software for tracking workers has swooped in to pitch their products to employers across the country.The services often sound relatively innocuous. Some vendors bill their tools as “automatic time tracking”...
84
Google Play rejected Tor Browser update with security fixes
Tor Browser 10.0.7 is now available from the Tor Browser download page and also from our distribution directory.
85
Adding Encrypted Group Calls to Signal
2020 has seen its fair number of challenges and changes. We’ve all adapted to new ways of staying in touch, getting work done, celebrating birthdays and weddings, and even exercising. As more and more of our critical and personal moments move online, we want to continue to provide you with new wa...
86
Does GPT-2 Know Your Phone Number?
The BAIR Blog
87
88
Microsoft Defender SmartScreen is hurting independent developers
Download Image wallpapers and background images for FREE! 200 Image wallpapers in 1080P, 2K, 4K, 5K HD that fit all your devices!
89
The ProtonMail Android app is now open source
Our Proton Mail Android app is open source. We are committed to transparency and contributing to the open source and privacy tech community.
90
Linux under WSL2 can be leaking
We have found that you could be leaking your Internet traffic when running Linux under WSL2 (Windows Subsystem for Linux 2).