1231
Passkeys are now enabled by default for Google users
Google is making it even easier to get started with passkeys by offering the ability to set them up for all users — by default.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,440 posts.
1232
Grindr to be fined almost €10M over GDPR complaint
The Norwegian Data Protection Authority confirmed that Grindr did not receive valid consent from users and announces a fine of 100 Mio NOK (€ 9.63 Mio) on Grindr.
1233
Detailed Financial Histories Exposed for Thousands
111 GB of internal customer information from National Credit Federation was left exposed in a publicly downloadable data repository. This is its story.
1234
A new bill takes aim at government pressure to silence lawful online speech
The bipartisan legislation creates a federal cause of action against government officials who coerce or attempt to coerce broadcasters, interactive computer services, or AI providers into taking actions against lawful, First-Amendment-protected speech, and establishes a transparency system for government…
1235
Kids Online Safety Act is still a danger to our rights online
Are you a young person fighting back against bad bills like KOSA? Become an EFF member at a new, discounted Neon membership level specifically for you--stickers included! Congress has resurrected the Kids Online Safety Act (KOSA), a bill that would increase surveillance and restrict access to...
1236
Against privacy defeatism: why browsers can still stop fingerprinting
In this post I’ll discuss how a landmark piece of privacy research was widely misinterpreted, how this misinterpretation deterred the development of privacy technologies rather than spurring it, how a recent paper set the record straight, and what we can learn from all this. The research in question is about browser…
1237
Making an SSH client the hard way
Explore Tailscale SSH Console, a web-based SSH client that simplifies connecting to your devices. Learn how Tailscale integrates WebAssembly, WireGuard, and SSH for secure, password-free access right from your browser."
1238
How the TPP Will Affect You and Your Digital Rights (2015)
The Internet is a diverse ecosystem of private and public stakeholders. By excluding a large sector of communities—like security researchers, artists, libraries, and user rights groups—trade negotiators skewed the priorities of the Trans-Pacific Partnership (TPP) towards major tech companies and...
1239
Meta prohibited from using personal data for advertisement
After almost five years, the Irish DPC decided on a noyb complaint and required Facebook, Instagram and WhatsApp to stop using the personal data of users for advertisement in the EU.
1240
The Linux Backdoor Attempt of 2003 (2013)
Josh wrote recently about a serious security bug that appeared in Debian Linux back in 2006, and whether it was really a backdoor inserted by the NSA. (He concluded that it probably was not.) Today I want to write about another incident, in 2003, in which someone tried to backdoor the Linux kernel. This one […]
1241
1242
Code scanning for security vulnerabilities now available
Now available, code scanning is a developer-first, GitHub-native approach to easily find security vulnerabilities before they reach production.
1243
Victory at the High Court against the government’s use of 'general warrants’
Today, the UK High Court has quashed a decision by the Investigatory Powers Tribunal (IPT), and ruled that section 5 of the Intelligence Services Act (ISA) 1994 does not permit the issuing of general warrants to authorise property interference and certain forms of computer hacking.
1244
The government uses targeted advertising to track your location
The online advertising industry has built a massive surveillance machine, and the government can co-opt it to spy on us.
1245
How cops can get your private online data
Can the cops get your online data? In short, yes. There are a variety of US federal and state laws which give law enforcement powers to obtain information that you provided to online services. But, there are steps you as a user and/or as a service provider can take to improve online privacy.Law...
1246
1247
OAuth Has Ruined Everything
Save time building sleek web, mobile and desktop apps with professional .NET UI Components, JavaScript UI Libraries, Reporting and Automated Testing solutions.
1248
Fastmail accounts blocked in Russia, here's what we know
Fastmail is the latest email provider to be blocked by Russia.
1249
SystemD Service Hardening
Discover additional security options for systemd units, to include quadlets. These options are everything from system permissions, time manage, BPF, syscall & seccomp filters, etc., all to make your system more secure.
1250
Violating Terms of Use Isn’t a Crime, EFF Tells Court
Have you ever violated a website’s terms of use, such as by using something other than your real name on a website that requires one, or by sharing your account password with a family member when doing so is prohibited? Probably. Have you ever clicked “I agree” without actually reading the terms in...
1251
1252
1253
Public secrets exposure leads to supply chain attack on GitHub CodeQL
An exposed GitHub token could have been used to launch a supply chain attack on GitHub CodeQL, resulting in source code exposure and repository tampering of CodeQL users.
1254
Congress Must Act After US Government Admits To Warrantless Wiretapping
As Congress and the President rush to re-authorize the dangerous FISA Amendments Act (FAA)—the law shamefully passed after pressure to legalize certain portions of the NSA’s warrantless wiretapping program—EFF has been sounding the alarm that Americans’ communications are still being...
1255
1256
TSA tries out another biometric system
Today the Transportation Security Administration (TSA) announced that it has launched a “pilot” at Washington National Airport (DCA) of yet another scheme for biometric identification and tracking of domestic air travelers.
1257
Dark Web Price Index 2020
To see just how prevalent items of personal data are being listed on the dark web, and at what price, we sent our researchers on a data-gathering mission.
1258
Decertifying the worst voting machine in the US
On Apr 14 2015, the Virginia State Board of Elections immediately decertified use of the AVS WinVote touchscreen Direct Recording Electronic (DRE) voting machine. This seems pretty minor, but it received a tremendous amount of pushback from some local election officials. In this post, I’ll explain how we got to that…
1259
1260
"Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
Wiz Research recently discovered a series of alarming vulnerabilities that highlight the supply chain risk of open source code, particularly for customers of cloud computing services.