Topics /
The most popular blog posts about security & privacy on Hacker News. 4,440 posts.
Since March, Trail of Bits has been working with the Python Software Foundation to add two-factor authentication (2FA) to Warehouse, the codebase that powers PyPI. As of today, PyPI members can enable time-based OTP (TOTP) and WebAuthn (currently in beta). If you have an account on PyPI, go enable your preferred 2FA…
Australia recently passed a law that correctly has people asking about the security and privacy of tools like 1Password.
This blog post covers several enhancements to Intelligent Tracking Prevention (ITP) in iOS and iPadOS 13.4 and Safari 13.1 on macOS to address our latest discoveries in the industry around tracking.
GitLab release announcements and feature highlights.
An article by Anonymous : Target's patented EasySweep device protects guests' data from skimmers.
Posted by Jacob Kaplan-Moss on Aug. 6, 2013
AI-powered browser extensions come with alarming security risks, but most companies still don't have policies for how their employees can use them.
On November 2, 2021, Ministry of Commerce of China (“MOFCOM”) officially released the revised Catalogue of Technologies Subject to Import Prohibition and Restriction (“Technology Catalogue”), effective immediately, which identifies, among others, foreign “data encryption technology employing a key length greater than…
Bitwarden will continue to uphold high cybersecurity standards through annual third-party security audits of the Bitwarden product and service.
We are pleased to announce that Firefox 90 will support Fetch Metadata Request Headers which allows web applications to protect themselves and their users against various cross-origin threats like ...
Posted by Ryan Sleevi, Software Engineer This post updates our previous notification of a misissued certificate for google.com Followin...
Learn the best hands-on techniques to bypass Cloudflare Bot Management. Understand how it works, its sensor data, and evade detection.
Posted by Ian Beer & Samuel Groß of Google Project Zero We want to thank Citizen...
Dear member of the World Wide Web Consortium's Advisory Committee, You may have heard that over the past year we've been trying to insert legal safeguards into the Encrypted Media Extensions project at the W3C, which standardizes streaming video DRM. We've previously been opposed to the W3C...
A member of Cisco Talos discovered this vulnerability. Cisco Talos recently discovered two vulnerabilities in the popular Zoom video chatting application that could allow a malicious user to execute arbitrary code on victims’ machines. Video conferencing software has skyrocketed in popularity during the COVID-19…
We gave Codex a foothold. It popped a root shell.
Intel Newsroom delivers the latest news, announcements, and updates. Stay informed on Intel innovations.
a post going over 4 exploits for CVE-2024-20017, a remotely exploitable buffer overflow in a component of the MediaTek MT7622 SDK.
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
In this post, we show you how easy it is to introduce back doors that are easily missed by project owners… leaving your code insecure.
UPDATE, March 23, 2018: President Donald Trump signed the $1.3 trillion government spending bill—which includes the CLOUD Act—into law Friday morning. “People deserve the right to a better process.”Those are the words of Jim McGovern, representative for Massachusetts and member of the House of...
AWS S3 (Simple Storage Service) buckets are a popular storage service used by software companies and organizations to store public as well as sensitive data. However, the implementation of this servic...
Decision Dismisses ACLU Lawsuit Challenging DHS Search Policy as Unconstitutional...
We’re delighted to announce the release of mitmproxy 7, a free and open source interactive HTTPS proxy. This release is all about our new proxy core, which bring substantial improvements across the board and represents a massive milestone for the project.
Imagine this: an OpenSSH backdoor is discovered, maintainers rush to push out a fixed release package, security researchers trade technical details on mailing lists to analyze the backdoor code. Speculation abounds on the attribution and motives of the attacker, and the tech media pounces on the story. A near miss
