91
Formal GDPR complaint against Google’s internal data free-for-all
Brave filed a GDPR complaint v Google for infringing the GDPR “purpose limitation” principle. Enforcement would be tantamount to a functional separation of Google’s business.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 319 posts.
92
Let's Reverse Engineer Discord
How we reverse engineered Discord’s call protocol and found it being MITM-ed by Discord.
93
94
I asked an online tracking company for all of my data (2018)
It’s 15:10 pm on April 18, 2018. I’m in the Privacy International office, reading a news story on the use of facial recognition in Thailand. On April 20, at 21:10, I clicked on a CNN Money Exclusive on my phone.
95
The Linux Backdoor Attempt of 2003 (2013)
Josh wrote recently about a serious security bug that appeared in Debian Linux back in 2006, and whether it was really a backdoor inserted by the NSA. (He concluded that it probably was not.) Today I want to write about another incident, in 2003, in which someone tried to backdoor the Linux kernel. This one […]
96
Code scanning for security vulnerabilities now available
Now available, code scanning is a developer-first, GitHub-native approach to easily find security vulnerabilities before they reach production.
97
TSA tries out another biometric system
Today the Transportation Security Administration (TSA) announced that it has launched a “pilot” at Washington National Airport (DCA) of yet another scheme for biometric identification and tracking of domestic air travelers.
98
Dark Web Price Index 2020
To see just how prevalent items of personal data are being listed on the dark web, and at what price, we sent our researchers on a data-gathering mission.
99
Building a more private web: A path towards making third party cookies obsolete
In August, we announced a new initiative (known as Privacy Sandbox) to develop a set of open standards to fundamentally enhance privacy on...
100
Twitter Direct Message Caching and Firefox
Distinguished engineer Martin Thomson explains how this problem occurred, the implications for people who might be affected, and how problems of this nature might be avoided in future. To get ...
101
102
Remote iPhone exploitation part 2: a remote ASLR bypass
Posted by Samuel Groß, Project ZeroThis post is the second in a series about a remote, interactio...
103
Python malware on the rise
The vast majority of serious malware over the past 30 years has been written in Assembly or compiled languages such as C, C++, and Delphi. However,…
104
Big no on Big Sur: Mullvad disallows Apple apps to bypass firewall
Despite Apple’s changes to macOS with the release of Big Sur, we can confirm that the Mullvad app still performs as intended by not allowing Apple’s own apps to bypass our VPN firewall.
105
Better protecting kids’ privacy on YouTube
See how we're working to protect kids' privacy on YouTube. Discover our latest updates and initiatives for a safer platform.
106
A Full Break of the Bitstream Encryption of Xilinx 7-Series FPGAs
Maik Ender and Amir Moradi, Horst Goertz Institute for IT Security, Ruhr University Bochum, Germany; Christof Paar, Max Planck Institute for Cyber Security and Privacy and Horst Goertz Institute for IT Security, Ruhr University Bochum, Germany
107
230, or not 230? That is the EARN IT question
Over the past several weeks, Signal traffic has gone through the roof. New users are signing up at unprecedented rates, and we’ve expanded our server capacity faster than we ever anticipated. It means a lot to us that so many people are relying on Signal during this difficult time. When users che...
108
Tor Browser 9.5
Tor Browser 9.5 is now available from the Tor Browser download page and also from our distribution directory.
109
110
You’ve Got 0-Click Mail: Unassisted iOS Attacks RCE via Mobilemail/Maild
October is Cybersecurity Awareness Month! How is your cybersecurity practice going?
111
Attack Matrix for Kubernetes
While Kubernetes has many advantages, it also brings new security challenges.
112
113
114
Full third-party cookie blocking and more
This blog post covers several enhancements to Intelligent Tracking Prevention (ITP) in iOS and iPadOS 13.4 and Safari 13.1 on macOS to address our latest discoveries in the industry around tracking.
115
Bitwarden second security audit report
Bitwarden will continue to uphold high cybersecurity standards through annual third-party security audits of the Bitwarden product and service.
116
Two vulnerabilities in Zoom could lead to code execution
A member of Cisco Talos discovered this vulnerability. Cisco Talos recently discovered two vulnerabilities in the popular Zoom video chatting application that could allow a malicious user to execute arbitrary code on victims’ machines. Video conferencing software has skyrocketed in popularity during the COVID-19…
117
118
119
‘Re-education’, forced labour and surveillance beyond Xinjiang
‘Re-education’, forced labour and surveillance beyond Xinjiang. What’s the problem? The Chinese government has facilitated the mass transfer of Uyghur and other ethnic minority1 citizens from the far west region of Xinjiang to factories across the country. Under conditions that strongly suggest forced labour, Uyghurs…
120
The FBI Is Breaking into Encrypted Devices – We’re Suing
We can't let the FBI keep the public in the dark about its ability to gain access to information stored on our personal mobile devices.