Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 260 posts.
Popular Chinese iOS apps compromised in malware attack
自2011年以来用技术对抗审查。我们使用AI监控审查并在全球范围内扩大言论自由。
The Day Google Decided HttpWatch Was ‘Unwanted Software’
This blog post isn’t about HTTP performance or HttpWatch itself but you may find it useful if you advertise a software product with Google Adwords. Hopefully, you’ll also find our conversation with Google amusing! What Happened ? We received an email like this: Subject: Your AdWords account: Ads...
Are Your Devices Hardwired for Betrayal?
It's an interesting time to be a computer security researcher. Last week, Kaspersky Lab released a report about a new family of malware from an entity they called "The Equation Group". The report demonstrated for the first time that firmware-based attacks, previously only demonstrated in lab...
Many Bitcoin wallets vulnerable to double-spending of confirmed transactions
This document is being updated as new information arrives. Last update: 2015-07-15 13:00. All times are UTC.
No Safe Harbor: How NSA Spying Undermined U.S. Tech and Europeans' Privacy
The spread of knowledge about the NSA's surveillance programs has shaken the trust of customers in U.S. Internet companies like Facebook, Google, and Apple: especially non-U.S. customers who have discovered how weak the legal protections over their data is under U.S. law. It should come as no...
Keybase's New Key Model
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
The Whitehouse’s New Executive Order on Cyber Crime Is (Unfortunately) No Joke
On the morning of April 1st, the White House issued a new executive order (EO) that asserts that malicious “cyber-enabled activities” are a national threat, declares a national emergency, and establishes sanctions and other consequences for individuals and entities. While computer and information...
Tor Browser 4.5 is released
The Tor Browser Team is proud to announce the first stable release in the 4.5 series. This...
Tor Messenger Beta: Chat Over Tor, Easily
WARNING STARTS As of March 2018, Tor Messenger is no longer maintained and you should NOT use...
Public Beta: December 3, 2015
Let’s Encrypt will enter Public Beta on December 3, 2015. Once we’ve entered Public Beta our systems will be open to anyone who would like to request a certificate. There will no longer be a requirement to sign up and wait for an invitation. Our Limited Beta started on September 12, 2015. We’ve issued over 11,000…
Why it’s harder to forge a SHA-1 certificate than to find a SHA-1 collision
It’s well known that SHA-1 is no longer considered a secure cryptographic hash function. Researchers now believe that finding a hash collision (two values that result in the same value when SHA-1 is applied) is inevitable and likely to happen.
Google listening in to your room shows importance of privacy defense in depth
Does it always feel like Google’s listening in? Learn how to manage voice recordings, adjust privacy settings, and stop voice activation on Android and iPhone.
Hundreds of Thousands of Google Apps Domains’ Private WHOIS Leaked
This post was authored by Nick Biasini, Alex Chiu, Jaeson Schultz, and Craig Williams. Special thanks to William McVey for his contributions to this post.
Popular Google Chrome extensions are constantly tracking you by default
Popular Google Chrome extensions are constantly tracking you per default, making it very difficult or impossible for you to opt-out.
The Missing Mt. Gox Bitcoins
The official blog of WizSec, a group of bitcoin security specialists, and their investigation into MtGox.
Flash-Free Clipboard for the Web
As part of our effort to grow the Web platform and make it accessible to new devices, we are trying to reduce the Web's dependence on Flash. As part of ...
Amtrak police use of passenger data
[Passenger Name Record (PNR) view from Amtrak “Police GUI”. Click image for larger version.]
Fuzzing a DNS parser written in Go
Here at CloudFlare we are heavy users of the github.com/miekg/dns Go DNS library and we make sure to contribute to its development as much as possible. Therefore when Dmitry Vyukov published go-fuzz and started to uncover tens of bugs in the Go standard library, our task was clear.