91
Trevor Perrin requests removal of NSA from IETF Crypto Review
Search IETF mail list archives
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,439 posts.
92
WhatsApp's Signal Protocol integration is now complete
At Open Whisper Systems, our goal is to make private communication simple. A year ago, we announced a partnership with WhatsApp and committed to integrating the Signal Protocol into their product, moving towards full end-to-end encryption for all of their users by default. Over the past year, we...
93
NSO Group's iPhone Zero-Days used against a UAE Human Rights Defender
Ahmed Mansoor was targeted by NSO Group, an Israel-based “cyber war” company that sells Pegasus, a government-exclusive “lawful intercept” spyware product.
94
Federal judge: Border searches of cell phones require a warrant
With United States v. Smith (S.D.N.Y. May 11, 2023), a district court judge in New York made history by being the first court to rule that a warrant is required for a cell phone search at the border, “absent exigent circumstances” (although other district courts have wanted to do so).EFF is...
95
96
97
98
France rejects backdoor mandate
In a moment of clarity after initially moving forward a deeply flawed piece of legislation, the French National Assembly has done the right thing: it rejected a dangerous proposal that would have gutted end-to-end encryption in the name of fighting drug trafficking.
99
Shai-Hulud Returns: Over 300 NPM Packages Infected
Over 1,000 NPM packages were infected using the same method as the previous attack, infecting with a fake Bun runtime. The attacker leveraged the `preinstall` script to download and execute a malicious payload, stealing sensitive information from the compromised machines.
100
“PayPal has demanded that we monitor data traffic as well as customers’ files”
Seafile is an open source, self-hosted file sync and share solution with high performance and reliability. Sync, access, and collaborate on files on your own server or private cloud.
101
The Horror of a 'Secure Golden Key'
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
102
Bug in macOS 14 Sonoma prevents our app from working
The macOS 14 Sonoma betas and release candidate contain a bug that causes the firewall to not filter traffic correctly. As a result, our app does not work.
103
There is no WhatsApp 'backdoor'
Today, The Guardian published a story falsely claiming that WhatsApp’s end-to-end encryption contains a “backdoor.”
104
Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
Phorion has detected a backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor across macOS, Linux, and Windows. This write-up …
105
LastPass autofill exploit
Mathias Karlsson decided to check out the security of the LastPass browser extensions. Here's what he found.
106
A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution
Posted by Ian Beer & Samuel Groß of Google Project Zero We want to thank Citizen Lab ...
107
How is NSA breaking so much crypto?
There have been rumors for years that the NSA can decrypt a significant fraction of encrypted Internet traffic. In 2012, James Bamford published an article quoting anonymous former NSA officials stating that the agency had achieved a “computing breakthrough” that gave them “the ability to crack current public…
108
1Password Travel Mode: Protect your data when crossing borders
Travel Mode protects your 1Password data from unwarranted searches when you travel. Find out how – and why — to use it.
109
Blocking Kiwifarms
We have blocked Kiwifarms. Visitors to any of the Kiwifarms sites that use any of Cloudflare's services will see a Cloudflare block page and a link to this post.
110
Signal Secure Backups
In the past, if you broke or lost your phone, your Signal message history was gone. This has been a challenge for people whose most important conversations happen on Signal. Think family photos, sweet messages, important documents, or anything else you don’t want to lose forever. This explains wh...
111
112
Chaos Computer Club breaks Apple TouchID
The biometrics hacking team of the Chaos Computer Club (CCC) has successfully bypassed the biometric security of Apple's TouchID using easy everyday means. A fingerprint of the phone user,...
113
I found a backdoor into my bed
Eight Sleep smart bed found to contain an exposed AWS key and a likely backdoor that allowed engineers to remotely access users' beds
114
Firefox 87 trims HTTP Referrers by default to protect user privacy
We are pleased to announce that Firefox 87 will introduce a stricter, more privacy-preserving default Referrer Policy. From now on, by default, Firefox will trim path and query string ...
115
Do you need a VPN?
Early this year, the U.S. Congress rolled back Internet privacy rules, giving service providers free reign to track, store and sell browsing data. In July,
116
Bitwarden raises $100M
A message from the Bitwarden CEO on accelerating value for Bitwarden users and customers.
117
Choose the browser that best suits your privacy needs
When it comes to most secure browsers, Firefox and its LibreWolf fork are the best alternatives to Chrome on our list - and, no, incognito mode doesn't cut it.
118
Chat Control Must Be Stopped – Now
With its legislative proposal known as “Chat Control,” the EU Commission is trying to establish an unprecedented mass-surveillance apparatus of Orwellian proportions in the European Union. If EU citizens don’t stand up for privacy now, it may be too late.
119
Virginia bans sale of precise geolocation data
On April 13, 2026, Virginia Governor Abigail Spanberger signed into law S.B. 338 , which amends the Virginia Consumer Data Protection Act (“VCDPA”) to prohibit the sale of geolocation data. Notably, the VCDPA defines “sale” more narrowly than other state comprehensive privacy laws, as “the exchange of personal data…
120
New study: Google manipulates users into constant tracking
Today, the Norwegian Consumer Council has filed a complaint against Google. Based on new research Google is accused of using deceptive design and misleading information, which results in users accepting to be constantly tracked