1321
Why (blank) gets you root
tracking down the cause of a serious authentication flaw
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,440 posts.
1322
Amnesty International: Encryption Is a Human Rights Issue
New Report Analyzes How Crypto Backdoors, Interference with Crypto, and Compelled Disclosure of Encryption Keys All Impact Free Expression and Privacy Defending encryption is a human rights issue, according to a new Amnesty International report. The report calls on nation-states to promote the use...
1323
Tor exit node operator prosecuted in Austria
June 30th, 2014 marks a turning point for Austria. Not only was the Vorratsdatenspeicherung (data retention) terminated preliminarily for good (no, really), the operation of TOR exit nodes supposedly was also declared a criminal offense by a regional criminal court. The accused was operating a TOR exit node which was…
1324
The Government is Silencing Twitter and Yahoo, and It Won't Tell Us Why
The government is using shaky legal arguments to silence major Internet companies without giving them – or the public – the opportunity to respond. In three separate recent cases, the government has sent a grand jury subpoena to Yahoo or Twitter and requested a gag order from a magistrate judge, attempting to bar…
1325
Video calls for Signal now in public beta
Today’s Signal release for Android and iOS includes beta support for video calls. This represents an entirely new calling infrastructure for Signal, and should increase voice call quality as well. We think it’s a big improvement, but we’re rolling it out in stages to collect feedback from people ...
1326
First in-the-wild UEFI bootkit bypassing UEFI Secure Boot
ESET researchers are the first to publish an analysis of BlackLotus, the first in-the-wild UEFI bootkit capable of bypassing UEFI Secure Boot.
1327
“No Cost” License Plate Readers Are Turning Texas Police into Debt Collectors
Vigilant Solutions, one of the country’s largest brokers of vehicle surveillance technology, is offering a hell of a deal to law enforcement agencies in Texas: a whole suite of automated license plate reader (ALPR) equipment and access to the company’s massive databases and analytical tools—and it...
1328
In Wake of Charlie Hebdo Attack, Let’s Not Sacrifice Even More Rights
EFF is stunned and deeply saddened by the attack on Charlie Hebdo, a French satirical newspaper. As free speech advocates, we mourn the use of violence against individuals who used creativity and free expression to engage in cultural and political criticism. Murder is the ultimate form of...
1329
Free Wordpress themes coming with a price
There are so many free WordPress themes out there it can put your head in a spin. This post is the one-stop resource for info about free WordPress Themes
1330
Vulnerabilities in the Feeld dating app
Discover critical Feeld app vulnerabilities from our pentest. See how flaws in security controls expose personal data and learn key fixes.
1331
1332
Remote iPhone exploitation part 2: a remote ASLR bypass
Posted by Samuel Groß, Project ZeroThis post is the second in a series about a remote, interactio...
1333
How we’re responding to The NYT’s data demands in order to protect user privacy
OpenAI is fighting a court order at the demands of The New York Times and plaintiffs, which involves retention of consumer ChatGPT and API user data indefinitely. Learn how we’re working to uphold user privacy, address legal requirements, and stay true to our data protection commitments.
1334
Over 100k Infected Repos Found on GitHub
Secure everything coding agents build, use, and ship - prevent risk before code exists, AutoFix the backlog, and protect the coding agents and supply chain.
1335
Flash and Chrome
Chrome will de-emphasize Flash in favor of HTML5, giving you improved security, reduced power consumption and faster page load times.
1336
Mullvad Leta: A search engine used in the Mullvad Browser
Online privacy isn't just about a VPN. That’s why we have developed the Mullvad Browser.
1337
How to Protect Yourself from NSA Attacks on 1024-bit DH
In a post on Wednesday, researchers Alex Halderman and Nadia Heninger presented compelling research suggesting that the NSA has developed the capability to decrypt a large number of HTTPS, SSH, and VPN connections using an attack on common implementations of the Diffie-Hellman key exchange...
1338
Fifth Amendment Prohibits Compelled Decryption, New EFF Brief Argues
Encryption is one of the most important ways to safeguard data from prying eyes. But what happens when those prying belong to the government? Can they force you to break your own encryption and provide them with the information they want? In a new amicus brief, we explain that the Fifth Amendment...
1339
XBOW, an autonomous penetration tester, has reached the top spot on HackerOne
Learn how XBOW achieved #1 performance in autonomous penetration testing by validating real exploits and outperforming human pentesters in speed and accuracy.
1340
Modernizing C arrays for greater memory safety: a case study in the Linux kernel
How to modernize C arrays for greater memory safety: a case-study in refactoring the Linux kernel and a look to the future Kees Cook C i...
1341
1342
An Update on the Lock Icon
Editor’s note: based on industry research (from Chrome and others), and the ubiquity of HTTPS, we will be replacing the lock icon in Chrome’...
1343
Firefox’s Test Pilot Program Returns
Like a cat, the Test Pilot program has had many lives. It originally started as an Add-on before we relaunched it three years ago. Then in January, we anno
1344
AMP for email is bad
The US antitrust complaint against Google shows that the claim 'to improve speed with AMP' was false from the start. It is simply a measure to increase ad revenue.
1345
Tor Browser: a legacy of advancing private browsing innovation
In this post, we want to share a little bit of Tor Browser history with you, the origins of our features and designs, and how many of our innovative privacy and security features have been adopted by other browsers.
1346
1347
The MongoDB hack and the importance of secure defaults
There’s a widespread attack on insecure MongoDB installs that has resulted in over 28,000 databases being held ransom. This post explains the hack, how to protect yourself and what can we learn from it.
1348
Mysterious Planes Over Baltimore Spark Surveillance Suspicions
It all started with a simple Twitter query from a Baltimore man: “Anyone know who has been flying the light plane in circles above the city for the last few nights?” This was several days after the death of Freddie Gray in police custody, and the subsequent riots and protests. Pete Cimbolic, an aviation buff and…
1349
1350
Announcing the Windows Bounty Program
Windows 10 represents the best and newest in our strong commitment to security with world-class mitigations. One of Microsoft’s longstanding strategies toward improving software security involves investing in defensive technologies that make it difficult and costly for attackers to find, exploit and leverage…