Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,440 posts.
The StingRay Is Why the 4th Amendment Was Written (2017)
The drafters of the Constitution recognized that restricting the government from violating privacy is essential for a free society. That's why the Fourth Amendment exists. The StingRay clearly violates these standards.
Snowflake AI Escapes Sandbox and Executes Malware
A vulnerability in the Snowflake Cortex Code CLI allowed malware to be installed and executed via indirect prompt injection, bypassing human-in-the-loop command approval and escaping the sandbox.
NSA's Backdoor of the PX1000-Cr
In 1983, the PX-1000 pocket telex used DES encryption. But with help of Philips, the NSA managed to replace DES with an alternative (weaker) algorithm that they could break. That NSA algorithm is now broken.
Restore the Fourth Organizes Protests Against Unconstitutional Surveillance
The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and...
Looking Forward to 2018
Let’s Encrypt had a great year in 2017. We more than doubled the number of active (unexpired) certificates we service to 46 million, we just about tripled the number of unique domains we service to 61 million, and we did it all while maintaining a stellar security and compliance track record. Most importantly though…
(n+1)sec – a protocol for distributed multiparty chat encryption
Today we present (n+1)sec, a free (libre), end-to-end secure, synchronous protocol for group chat developed by eQualit.ie with support from the Open Technology Fund. After 2 years of design, development and testing, we are releasing the (n+1)sec protocol and library for securing group conversations on various…
Supreme Court asked to strike down immunity for police who brutally beat student
ARLINGTON, Va.—A new cert petition before the United States Supreme Court asks the Justices to strike down an immunity recognized by a lower court for […]
You are dangerously bad at cryptography
Selamat datang di situs RAJABANDOT, link resmi situs slot gacor hari ini dengan berbagai pengalaman bermain games bandar slot88 online seru dan gampang menang hari ini.
How we found and fixed an eBPF Linux kernel vulnerability
This blog post takes a look at the years where eBPF was one of the kernel subsystems that grabbed the attention of a lot of security researchers. We will tell the story of how we discovered CVE-2023-2163, what our root-cause analysis process looked like, and what we did to ultimately fix the issue.
Emulating an iPhone in QEMU
From black screens and boot issues to rendering quirks and PAC puzzles, here’s what we learned getting iOS to finally say hello.
Facebook Is Not Blocking Tor Deliberately
A number of users have noticed that Facebook is blocking connections from the Tor network....
Early rogue AI agent activity and attempts to hack found on urlquery.net
We found evidence on urlquery that AI agents were active earlier than previously reported and attempted hacks against public data providers.
How Dropbox securely stores your passwords
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
Did 5G kill the IMSI catcher?
Understand the mechanics, risks, and the future of IMSI catching (a.k.a. stealing your cellular ID) in 2025. Read our primer on this niche form of hacking.
Lawsuit against TSA and DEA over airport seizures achieves first victory
PITTSBURGH—When travelers go online to find out whether it is legal to fly with cash, the government tells them that there are no restrictions on […]
Dutch secret service tries to recruit Tor-admin
Recently a Dutch man with an MSc (Master of Science) at the Delft University of Technology and admin of Tor-exit nodes was approached by two agents of the Dutch intelligence service, the AIVD. They wanted to recruit the man as an informant or undercover agent, who would also infiltrate foreign hacker communities. The…
Private Internet Access Goes Open Source
Private Internet Access is the world's best open-source VPN, with open-source VPN protocols, tons of advanced features, and apps for all devices.
Privacy Sandbox – Open standards to enhance privacy on the web
Chrome is announcing a new initiative to explore how to evolve the web in a way that advances privacy, while supporting publishers, and free and open content.
Patch the Planet: global response coordination as agents uncover vulnerabilities
Patch the Planet connects security researchers, maintainers, and incident responders to help address critical vulnerabilities across open source.