871
Open source security at Astral
Insights and guidance from our engineering team on how Astral secures its tools.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,439 posts.
872
The novel HTTP/2 'Rapid Reset' DDoS attack
Learn how the new DDoS attack technique Rapid Reset works, and how to mitigate it
873
Speedrunners are vulnerability researchers, they just don't know it yet
Video game enthusiasts are developing experience in the cybersecurity industry by accident. Discover how gaming skills can translate into intriguing careers.
874
Vulnerability Management for Go
Announcing vulnerability management for Go, to help developers learn about known vulnerabilities in their dependencies.
875
EARN IT Act undermines the privacy, security, and safety of law-abiding users
Yesterday, TechFreedom sent a letter to the Senate Judiciary Committee raising concerns about the Eliminating Abusive and Rampant Neglect of Interactive Technologies Act of 2023 (EARN IT Act). As it did when introduced in each of the past two sessions of Congress, the EARN IT Act undermines the privacy, security, and…
876
877
Zero-days in Cisco Discovery Protocol
Identify which devices of your company are impacted by five vulnerabilities that Armis found out in the Cisco Discovery Protocol (CPD).
878
We are retiring our bug bounty program
For almost a year now, Turso has had a program that pays $1,000 for any bug that can be demonstrated to lead to data corruption. Today, we are retiring this program.
879
Privacy: Is That iPhone?
A new Mozilla-Ipsos poll reveals that a majority of iPhone users treasure privacy — but aren’t aware of the device's ad tracking
880
An Update on Firefox Containers
Containers is now available as a Firefox Extension, accessible to all Firefox users. Download Firefox Multi-Account Containers here. Back in June 2016, we started experimenting with “Containers” as a way to explore Contextual Identities on the web. Firefox Containers are a way for users to isolate their online…
881
SSH Tunneling Explained
SSH tunneling transports data streams within an existing SSH session. This post explains different tunneling techniques and features as supported by OpenSSH.
882
883
884
Group sex app leaks locations, pics and personal details
We’ve seen some pretty poor security in dating apps over recent years; breaches of personal data, leaking users locations and more. But this one really takes the biscuit: probably the worst security for any dating app we’ve ever seen And it’s used for arranging threesomes. It’s 3fun. It exposes the near real time…
885
Americans' Access to Strong Encryption Is at Risk, an Open Letter to Congress
When sophisticated adversaries want to hack a network, they ultimately win. A government mandated encryption backdoor would make Americans less safe.
886
How to Find Hidden Cameras in Your Airbnb
How to Find Hidden Cameras in your AirBNB, Author: Johannes Ullrich
887
EFF Makes Formal Objection to DRM in HTML5
San Francisco - Today the Electronic Frontier Foundation (EFF) filed a formal objection to the inclusion of digital rights management (DRM) in HTML5, arguing that a draft proposal from the World Wide Web Consortium (W3C) could stymie Web innovation and block access to content for people across the...
888
889
890
891
Best of show – abuse of libc
printf machine. 2020 IOCCC entry carlini - Best of Show - abuse of libc
892
We have successfully completed our migration to RAM-only VPN infrastructure
Today we announce that we have completely removed all traces of disks being used by our VPN infrastructure!
893
It is not possible to detect and block Chrome headless
An updated example of techniques to avoid detection.
894
A Safer Container Ecosystem with Docker: Free Docker Hardened Images
Security for everyone. Docker Hardened Images are now free to use, share, and build on with no licensing surprises.
895
Announcing Project Zero
Posted by Chris Evans, Researcher Herder Security is a top priority for Google. We've invested a lot in making our products secure, incl...
896
German Chaos Computer Club analyzes and releases government malware
The largest European hacker club, "Chaos Computer Club" (CCC), has reverse engineered and analyzed a "lawful interception" malware program used by German police forces. It has been found in the...
897
Element is one of fourteen messaging apps blocked by Central Indian Government
Element is one of 14 messaging apps blocked by the Central Indian Government which - we believe from media reports - relates to Section 69A of the Information Technology Act, 2000.
898
899
900
Notepad++: Help us to take down the parasite website
I’ve received numerous complaints via email, social media, and forums regarding a website that poses a significant threat to our community. The copycat site in question is https://notepad.plus/ which appears prominently when users google for “download Notepad++”.