91
GrayKey iPhone unlocker poses serious security concerns
Ever since the case of the San Bernadino shooter pitted Apple against the FBI over the unlocking of an iPhone, opinions...
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 316 posts.
92
93
Distrust of Symantec TLS Certificates
A Certification Authority (CA) is an organization that browser vendors (like Mozilla) trust to issue certificates to websites. Last year, Mozilla published and discussed a set of issues with one ...
94
Against privacy defeatism: why browsers can still stop fingerprinting
In this post I’ll discuss how a landmark piece of privacy research was widely misinterpreted, how this misinterpretation deterred the development of privacy technologies rather than spurring it, how a recent paper set the record straight, and what we can learn from all this. The research in question is about browser…
95
96
Technology preview: Sealed sender for Signal
In addition to the end-to-end encryption that protects every Signal message, the Signal service is designed to minimize the data that is retained about Signal users. By design, it does not store a record of your contacts, social graph, conversation list, location, user avatar, user profile name, ...
97
A new set of vulnerabilities affecting users of PGP and S/MIME
UPDATE: Enigmail and GPG Tools have been patched for EFAIL. For more up-to-date information, please see EFF's Surveillance Self-Defense guides.UPDATE (5/14/18): More information has been released. See EFF's more detailed explanation and analysis here.A group of European security researchers have...
98
99
Yubico and Microsoft Introduce Passwordless Login
The Security Key by Yubico with FIDO2 enables passwordless login for Windows 10 devices and Microsoft Azure Active Directory.
100
Enforcing TLS protocol invariants by rolling versions every six weeks
Search IETF mail list archives
101
YubiKey 5 Series with New NFC and FIDO2 Passwordless Features
Learn more about what's happening within the tech and cybersecurity industry and the developments in our business and security keys within our Yubico Blog.
102
Google’s new Chat service shows contempt for Android users’ privacy
Google launches Chat - new messaging service for Android phones
103
Wi-Fi Alliance Introduces Wi-Fi Certified WPA3 Security
Next generation Wi-Fi® security for personal and enterprise networks
104
105
MacOS monitoring the open source way
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
106
A Developer’s Guide to Responding to National Security Letters
When the FBI Shows Up at Your Office with an NSL When you receive thousands of requests from law enforcement each year, it’s actually not a surprise wh
107
Private Internet Access Goes Open Source
Private Internet Access is the world's best open-source VPN, with open-source VPN protocols, tons of advanced features, and apps for all devices.
108
TSA’s Roadmap for Airport Surveillance Moves in a Dangerous Direction
The Transportation Security Administration has set out an alarming vision of pervasive biometric surveillance at airports, which cuts against the right to privacy, the “right to travel,” and the right to anonymous association with others.The FAA Reauthorization Act of 2018, which included language...
109
Intelligent Tracking Prevention 2.0
Note: Read about improvements to this technology in recent blog posts about Intelligent Tracking Prevention, and the Storage Access API.
110
MikroTik routers are forwarding owners’ traffic to unknown attackers
[Update] 2018-09-05 11:00 GMT+8, with the generous help from the AS64073, 103.193.137.211 has been promptly suspended and is no longer a threat. Overview MikroTik is a Latvian company founded in 1996 to develop routers and wireless ISP systems. MikroTik now provides hardware and software for
111
112
Blackbird's Patent Troll Suit Against Cloudflare Gets Patent Invalidated
As we have talked about repeatedly in this blog, we at Cloudflare are not fans of the behavior of patent trolls. They prey upon innovative companies using overly-broad patents in an attempt to bleed settlements out of their targets.
113
Does Australia's access and assistance law impact 1Password?
Australia recently passed a law that correctly has people asking about the security and privacy of tools like 1Password.
114
Intel Security Issue Update: Addressing Reboot Issues
Intel Newsroom delivers the latest news, announcements, and updates. Stay informed on Intel innovations.
115
Responsibility Deflected, the CLOUD Act Passes
UPDATE, March 23, 2018: President Donald Trump signed the $1.3 trillion government spending bill—which includes the CLOUD Act—into law Friday morning. “People deserve the right to a better process.”Those are the words of Jim McGovern, representative for Massachusetts and member of the House of...
116
The FBI could have broken into San Bernadino shooter's phone without Apple
The Department of Justice’s Office of the Inspector General (OIG) last week released a new report that supports what EFF has long suspected: that the FBI’s legal fight with Apple in 2016 to create backdoor access to a San Bernardino shooter’s iPhone was more focused on creating legal precedent than...
117
Introducing DNS Resolver for Tor
As was mentioned in the original 1.1.1.1 blog post, our policy is to never write client IP addresses to disk and wipe all logs within 24 hours. Still some folks might not want to reveal their IP address to the resolver at all. This is why we are launching a Tor hidden service for our resolver.
118
Evaluation of five password managers
With an interactive grid to help you pick one!
119
Firefox’s Trusted Recursive Resolver DNS feature is dangerous
Affordable VM hosting in Glarus, Switzerland, operated by 100% hydropower. Devuan, debian, freebsd, ubuntu, centos. Our tech stack is fully open source.
120
OpenPGPjs has passed an independent security audit
We maintain the OpenPGPjs encryption library. After some recent code enhancements, OpenPGPjs underwent an independent security audit, the results of which are discussed in this article.