991
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,440 posts.
992
Little Snitch and the deprecation of kernel extensions
You probably came here because your Mac showed a message telling you that software from “Objective Development Software GmbH” (Little Snitch) loaded a system extension that will no longer be compatible with a future version of macOS and that you…
993
Police search homes of Zwiebelfreunde board members and OpenLab in Augsburg
On June 20th, board members of the „Zwiebelfreunde“ association in multiple German cities had their homes searched under the dubious pretence that they were „witnesses“ while their computers and...
994
Critical Security Issue Identified in iTerm2
A security audit funded by Mozilla has discovered a critical security vulnerability in the widely used macOS terminal emulator iTerm2.
995
Project Zero: Exploiting the DRAM rowhammer bug to gain kernel privileges
Posted by Mark Seaborn, sandbox builder and breaker, with contributions by Thomas Dullien, revers...
996
Basic Intro to Elliptic Curve Cryptography (2019)
Learn cryptography in Go by building ciphers, hashes, password security, and encryption tools. Understand security beneath the library call.
997
998
Today Is One of the Biggest Surveillance Votes. Will the FBI Stop Spying?
FISA Reform §702 Is a Threat to Democracy At Home and Abroad.
999
Audio Fingerprinting using the AudioContext API
Audio fingerprinting takes advantage of device performance specs to build up an identifying fingerprint of a user. It uses the AudioContext API for this
1000
1001
NSA Spying Documents to be Released As Result of EFF Lawsuit
In a major victory in one of EFF's Freedom of Information Act (FOIA) lawsuits, the Justice Department conceded yesterday that it will release hundreds of pages of documents, including FISA court opinions, related to the government’s secret interpretation of Section 215 of the Patriot Act, the law...
1002
Purple Llama: Towards open trust and safety in generative AI
Meta AI announces Purple Llama, a project for open trust and safety in generative AI, with tools for cybersecurity and input/output filtering.
1003
1004
1005
1006
Invasive, secretive “bossware” tracking workers
COVID-19 has pushed millions of people to work from home, and a flock of companies offering software for tracking workers has swooped in to pitch their products to employers across the country.The services often sound relatively innocuous. Some vendors bill their tools as “automatic time tracking”...
1007
Turkish Magician Built a $600M Nasdaq-Listed Scam Based on Lies
Initial Disclosure: After extensive research, we have taken a short position in shares of Enochian Biosciences, Inc. (NASDAQ:ENOB). This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.
1008
Signal 2.0 released with private messaging support
Today we’re releasing Signal 2.0, with support for TextSecure private messaging. It is now possible to send end-to-end encrypted group, text, picture, and video messages between Signal on iPhone and TextSecure on Android, all without SMS and MMS fees. Signal 2.0 blends private phone calls and pri...
1009
Stranger Strings: An exploitable flaw in SQLite
Trail of Bits is publicly disclosing CVE-2022-35737, which affects applications that use the SQLite library API. CVE-2022-35737 was introduced in SQLite version 1.0.12 (released on October 17, 2000) and fixed in release 3.39.2 (released on July 21, 2022). CVE-2022-35737 is exploitable on 64-bit systems, and…
1010
Kobold letters: HTML emails are a risk
Anyone who has had to deal with HTML emails on a technical level has probably reached the point where they wanted to quit their job or just set fire to all the mail clients due to their inconsistent implementations. But HTML emails are not just a source of frustration, they can also be a serious security risk.
1011
Concerning behavior from a popular open-weight AI model
Discover how untrusted open-weight AI models can potentially leak data, even when self-hosted. Learn the security risks and how to protect your enterprise.
1012
Things You Should Know About Tor
Updated: July 1st at 6:30PM to add information about traffic correlation attacks. We posted last week about the Tor Challenge and why everyone should use Tor. Since we started our Tor Challenge two weeks ago we have signed up over 1000 new Tor relays. But it appears that there are still some...
1013
1014
1015
Say Cheese: a snapshot of the massive DDoS attacks coming from IoT cameras
Over the last few weeks we've seen DDoS attacks hitting our systems that show that attackers have switched to new, large methods of bringing down web applications.
1016
ProtonMail Now Supports Bitcoin Payments
Proton Mail is joining the cryptocurrency revolution. Bitcoin is one of our officially accepted payment methods. And no worries we will HODL for you!
1017
Understanding L1 Terminal Fault aka Foreshadow: What You Need to Know
L1 Terminal Fault/Foreshadow explained in ~three minutesFor a more detailed technical view of L1 Terminal Fault, please see this deeper dive with Jon Masters.How we got here: a brief history of modern microprocessor cachesModern computer microprocessors are complex machines, filled with many optimizations designed to…
1018
The Hugging Face incident and the road ahead
OpenAI shares findings from the Hugging Face security incident and the steps we’re taking to strengthen AI model security, monitoring, and alignment.
1019
Top downloaded skill in ClawHub contains malware
The same capabilities that make OpenClaw a groundbreaking tool also make it an urgent security risk. This blog contains confirmed examples of agent skills being used as malware vectors, and advice on how to protect yourself if you're experimenting with them.
1020
Google Play rejected Tor Browser update with security fixes
Tor Browser 10.0.7 is now available from the Tor Browser download page and also from our distribution directory.