Topics /
The most popular blog posts about security & privacy on Hacker News. 350 posts.
Apple’s Security Bounty program has paid nearly $20 million in rewards to security researchers in just two and a half years. Our new site makes it easier than ever for researchers to submit reports on the web, get real-time updates from Apple engineering, and earn recognition for helping to improve security for the…
View the Fleet handbook.
GitLab release announcements and feature highlights.
Learn the best hands-on techniques to bypass Cloudflare Bot Management. Understand how it works, its sensor data, and evade detection.
Posted by Ian Beer & Samuel Groß of Google Project Zero We want to thank Citizen...
Denmark's data protection authority follows Dutch and German authorities by raising concerns about Google's GDPR compliance.
In a groundbreaking decision, the Austrian Data Protection Authority has decided on a model case by noyb that the continuous use of Google Analytics violates the GDPR.
In this report, we present a UEFI firmware rootkit that we called CosmicStrand and attribute to an unknown Chinese-speaking threat actor.
Today we’re introducing Meta accounts: a new way for people to log into their VR headsets that doesn’t require a Facebook account. When we announced that we would start requiring people to log into Meta Quest using a Facebook account, we received a lot of feedback from the Quest community. We took that feedback into…
Fine-grained personal access tokens offer enhanced security to developers and organization owners, to reduce the risk to your data of compromised tokens.
Discover how a software bug in Safari 15's IndexedDB API can track your online activity and reveal your identity.
Arti 1.0.0 is released and ready for download.
We felt more like “Oh fuck, Databreach” Dieser Artikel ist auch auf deutsch erschienen. During the pandemic, grocery delivery services gained popularity. New players on the market offer delivery in under an hour. One of them is Gorillas, which not only delivers apples and granola bars in 10 minutes, but just as…
In VRChat 2022.2.2, we’re introducing two major improvements to the security of VRChat — Easy Anti-Cheat and Secure Instances.
The Internet is easily censored. The neo-liberal's got their arses kicked. The big players like Google/Apple/AWS are partly to blame. China runs the GFI.
We’re outrageously pleased to launch Chatterbox, an end-to-end encrypted embedded chat built on Matrix!
Apple’s Private Relay (Beta) feature calls home to Apple servers without respecting the firewall rules of the system, creating a leak that neither we, nor you, can stop without disabling the entire Private Relay feature.
Logging into your Bitwarden vault just got easier! A new passwordless experience enables you to access your Bitwarden vault with another device.
Proper implementation of email hardening techniques can be beneficial even to (sub)domains that are not intended to be used with email.
On April 13, 2022, the Real World Crypto steering committee presented the Max Levchin Prize for Real-World Cryptography to Let’s Encrypt. The following is the speech delivered by our Executive Director, Josh Aas, upon receiving the award. We’d like to thank our community for supporting us and invite you to join us in…
FinFisher, the Munich-based state Trojan exporter, is bankrupt. For over a decade, a wide variety of international groups, including the CCC, have worked toward its end.
Use this article learn how to decide who to trust when it comes to your tailnet’s coordination server and how nodes are added to your tailnet.
Advertising provides critical support for the Web. We’ve been looking to apply privacy preserving advertising technology to the attribution problem, so t
Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.
developers can enroll in the Google Play Services beta and use Chrome Canary. Both features will be generally available on stable channels
A discussion about IP blocking: why we see it, what it is, what it does, who it affects, and why it’s such a problematic way to address content online.
