121
Update to Security Incident
Update (May 23, 2019) : The affected 184 public network users have been notified via email.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 316 posts.
122
Splitting atoms in XNU
Posted by Ian Beer, Google Project ZeroTL;DRA locking bug in the XNU virtual memory subsystem all...
123
Facebook: We don’t need your consent
The world's largest social network believes it has found a way to bypass Europe’s strict privacy laws.
124
ProtonMail iOS app goes open source
We have released the Proton Mail iOS app as open source software as part of our commitment to transparency and supporting the developer community.
125
126
Security assessment techniques for Go projects
The Trail of Bits Assurance practice has received an influx of Go projects, following the success of our Kubernetes assessment this summer. As a result, we’ve been adapting for Go projects some of the security assessment techniques and tactics we’ve used with other compiled languages. We started by understanding the…
127
128
129
ETS Isn't TLS and You Shouldn't Use It
The good news: TLS 1.3 is available, and the protocol, which powers HTTPS and many other encrypted communications, is better and more secure than its predecessors (including SSL). The bad news: Thanks to a financial industry group called BITS, there’s a look-alike protocol brewing called ETS (or...
130
Handshake: Decentralizing DNS to Improve the Security of the Internet
News and announcements from Namebase.
131
How to Spoof PDF Signatures
One year ago, we received a contract as a PDF file. It was digitally signed. We looked at the document - ignoring the "certificate is not tr...
132
Microsoft Azure data deleted because of DNS outage
The Sophos Blog
133
Harvesting LinkedIn data for fun and profit
A few years ago, before the GDPR era, I was involved in a stealth marketing startup. We went out of
134
How SAML 2.0 Authentication Works
At its core, Security Assertion Markup Language (SAML) 2.0 is a means to exchange authorization and authentication information between services. Learn how saml works.
135
Cryptographic coin flipping, now in Keybase
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
136
New Tools for Detecting HTTPS Interception
The practice of HTTPS interception continues to be commonplace on the Internet. This blog post discusses types of monster-in-the-middle devices and software, and how to detect them.
137
Preventing Tracking Prevention Tracking
This blog post covers enhancements to Intelligent Tracking Prevention (ITP) included in Safari on iOS and iPadOS 13.3, Safari 13.0.4 on macOS Catalina, Mojave, and High Sierra.
138
Clarifying ProtonMail and Huawei
Proton Mail official clarification about Huawei partnership.
139
AMD Responds to WSJ ‘Keys to the Kingdom’ Story
A AMD oferece soluções de computação adaptativa e de alto desempenho de liderança para promover IA de data center, PCs com IA, dispositivos de borda inteligentes, jogos e muito mais.
140
GitHub Supports Web Authentication (WebAuthn) for Security Keys
The WebAuthn standard for security keys is making authentication as easy as possible. Now you can use security keys for second-factor authentication on GitHub with many more browsers and devices.
141
142
Centralised DoH is bad for privacy
Recently, Mozilla announced it would be moving Firefox DNS lookups to Cloudflare by default, for its American audience.
143
DHS Asserting Unconstitutional Authority to Search Travelers’ Phones and Laptops
BOSTON — The Electronic Frontier Foundation (EFF) and the ACLU today asked a federal court to rule without trial that the Department of Homeland Security violates the First and Fourth Amendments by searching travelers’ smartphones and laptops at airports and other U.S. ports of entry without a...
144
ISPs in AU and NZ start censoring the internet without legal precedent
Several websites including Voat, ZeroHedge, Archive.is, LiveLeak, and others have been blocked in Australia and New Zealand in direct contravention to
145
ProtonMail now offers elliptic curve cryptography
Proton Mail has become the first and only encrypted email provider to support elliptic curve cryptography (ECC), providing more security and performance.
146
Privacy-Preserving Ad Click Attribution for the Web
A typical website is made of numerous components coming from a wide variety of sources.
147
CCPA Will Hit Dev Teams Harder Than GDPR
CCPA impacts dev teams more than GDPR. Learn who must comply, what data is covered, and how to protect test data safely.
148
Your Android Phone Is a Security Key
Now, your phone running Android 7+ can be your security key, protecting you against phishing. Use it to protect your personal and work Google Accounts.
149
Understanding Docker Container Escapes
Trail of Bits recently completed a security assessment of Kubernetes, including its interaction with Docker. Felix Wilhelm’s recent tweet of a Proof of Concept (PoC) “container escape” sparked our interest, since we performed similar research and were curious how this PoC could impact Kubernetes. Quick and dirty way…
150
It is unlikely that built-in email encryption will ever be available in Gmail
Gmail's end-to-end encryption project seemed dead in 2017. Now it's back, but only for key account customers.