1381
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,440 posts.
1382
EFF to Congress: Stop the Cybersurveillance Bills
EFF joined over 50 privacy and civil society organizations that sent two letters to Congress demanding it vote against the Senate Intelligence Committee's cybersecurity "information sharing" bill, the Cybersecurity Information Sharing Act of 2015 (CISA, S. 754) and the House Intelligence Committee’...
1383
OS X sudoers exploit found in the wild
Last month's discovery of a zero-day vulnerability in OS X led to today's revelation of the first known exploit.
1384
1385
Dumping and extracting the SpaceX Starlink user terminal firmware
COSIC - Dumping and extracting the SpaceX Starlink User Terminal firmware ( )
1386
Entrust Certificate Distrust
Posted by Chrome Root Program, Chrome Security Team Update (09/10/2024): In support of more closely aligning Chrome’s planned compliance ...
1387
Meet Jack. Or, What The Government Could Do With All That Location Data
We now know that the NSA is collecting location information en masse. As we’ve long said, location data is an extremely powerful set of information about people.
1388
Zero-Touch OAuth for MCP
The Enterprise-Managed Authorization extension to the Model Context Protocol is now stable, enabling organizations to centrally provision MCP server access through their identity provider so users get connected servers on first login without per-app OAuth.
1389
System76's coreboot open firmware manages to disable Intel ME for Raptor Lake
Read about the latest performance boosts, disabling Intel ME, Windows 11 support, and more!
1390
Tor Browser 11.0
Tor Browser 11.0 is now available from the Tor Browser download page and our distribution directory. This is the first stable release based on Firefox ESR 91, and includes an important update to Tor 0.4.6.8.
1391
Enforcing TLS protocol invariants by rolling versions every six weeks
Search IETF mail list archives
1392
HTTP Security headers you should be using
Van Pathé tot KLM en de Rijksoverheid: ontdek hoe Dawn Technology met maatwerk software alledaagse ervaringen slimmer, sneller en beter maakt.
1393
1394
Better protecting kids’ privacy on YouTube
See how we're working to protect kids' privacy on YouTube. Discover our latest updates and initiatives for a safer platform.
1395
YubiKey 5 Series with New NFC and FIDO2 Passwordless Features
Learn more about what's happening within the tech and cybersecurity industry and the developments in our business and security keys within our Yubico Blog.
1396
1397
A Full Break of the Bitstream Encryption of Xilinx 7-Series FPGAs
Maik Ender and Amir Moradi, Horst Goertz Institute for IT Security, Ruhr University Bochum, Germany; Christof Paar, Max Planck Institute for Cyber Security and Privacy and Horst Goertz Institute for IT Security, Ruhr University Bochum, Germany
1398
1399
SSH Agent Restriction (new in OpenSSH 8.9)
OpenSSH agent restriction
1400
The cryptography behind passkeys
This post will examine the cryptography behind passkeys, the guarantees they do or do not give, and interesting cryptographic things you can do with them, such as generating cryptographic keys and storing certificates.
1401
Google’s new Chat service shows contempt for Android users’ privacy
Google launches Chat - new messaging service for Android phones
1402
Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH
OPKSSH (OpenPubkey SSH) is now open-sourced as part of the OpenPubkey project. This enables users and organizations to configure SSH to work with single sign-on technologies like OpenID Connect, removing the need to manually manage & configure SSH keys without adding a trusted party other than your IdP.
1403
First fully sandboxed Linux desktop app
Its not a secret that I've been working on sandboxed desktop applications recently. In fact, I recently gave a talk at devconf.cz about it. However, up until now I've mainly been focusing on the bundling and deployment aspects of the problem. I've been running applications in their own environment, but having pretty…
1404
Dutch National Cyber Security Center is Offline because it uses PHP
Overzicht van de laatste alerts, nieuwsberichten, publicaties, expertblogs en de meest recente verhalen van ondernemers.
1405
Wi-Fi Alliance Introduces Wi-Fi Certified WPA3 Security
Next generation Wi-Fi® security for personal and enterprise networks
1406
We hacked Google A.I.
Bard IDOR, a GraphQL directive-overloading DoS that hung Google's backend for 109 seconds, and Workspace data exfiltration via markdown images.
1407
An Open Letter From Internet Engineers to the U.S. Congress
Today, a group of 83 prominent Internet inventors and engineers sent an open letter to members of the United States Congress, stating their opposition to the SOPA and PIPA Internet blacklist bills that are under consideration in the House and Senate respectively. We, the undersigned, have played...
1408
1409
230, or not 230? That is the EARN IT question
Over the past several weeks, Signal traffic has gone through the roof. New users are signing up at unprecedented rates, and we’ve expanded our server capacity faster than we ever anticipated. It means a lot to us that so many people are relying on Signal during this difficult time. When users che...
1410
Docker 0-Day Stopped Cold by SELinux
The latest on the world’s leading enterprise Linux® platform