1681
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,440 posts.
1682
Google’s Nest fiasco harms user trust and invades their privacy
Last month, Google announced that its Nest Secure would be updated to work with Google Assistant software. The problem? Google never told users its product had a microphone to begin with. Simple oversight or invasion of privacy? We break it down.
1683
US Government Continues Encryption War
Evergreen privacy guides, threat modeling, encryption, practical tutorials.
1684
Swift Crypto
I’m thrilled to announce a new open-source project for the Swift ecosystem, Swift Crypto. Swift Crypto is a new Swift package that brings the fantastic APIs of Apple CryptoKit to the wider Swift community. This will allow Swift developers, regardless of the platform on which they deploy their applications, to access…
1685
How does misalignment scale with model intelligence and task complexity?
Research done as part of the first Anthropic Fellows Program during Summer 2025.
1686
1687
The hidden JTAG in a Qualcomm/Snapdragon device’s USB port
Learn about JTAG and EUD
1688
NilAway: Practical nil panic detection for Go
Uber has widely adopted Golang (Go for short) as a primary programming language for implementing backend services and libraries due to its high performance. The Go monorepo is the largest codebase at Uber, comprising 90 million lines of code (and growing). This makes tooling for writing reliable Go code a critical…
1689
Google Fiber Continues Awful ISP Tradition of Banning “Servers”
Update (10/16/2013): Google Fiber has made a change to their Acceptable Use Policy that clarifies that some non-commercial uses for running servers are permitted. We applaud Google for making this change, but note that there are still provisions to take issue with in the policy, such as the...
1690
What "consent" looks like for the DEA and TSA
The Drug Enforcement Agency (DEA) and the Transportation Security Administration (TSA) have been working together for years to steal travelers’ money.
1691
Introducing 1Password for Teams
The ultimate password keeper for business, 1Password simplifies team security. Secure your company's data with our business password vault.
1692
1693
Oh-Auth – Abusing OAuth to take over millions of accounts
OAuth Account Takeover. Salt Labs shows how hackers could abuse OAuth to take over millions of accounts on Grammarly, Vidio, and Bukalapak.
1694
1695
Researchers exploit HTTP/2, WPA3 protocols to stage ‘timeless timing’ attacks
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
1696
How to turn off Apple Intelligence
Learn how to turn off Apple Intelligence on iPhone, iPad, or Mac. Asurion Experts show you step-by-step how to manage your Apple devices’ smart features.
1697
Google Safe Browsing incident
For approximately six hours on 25.9.2025, the entire statichost.eu domain was flagged as deceptive by Google Safe Search. This meant that anyone using Google Safe Search was shown a very aggressive warning or outright blocked when trying to access any site on the statichost.eu domain. In some cases even custom domains…
1698
Passwordless Authentication – Access Your Bitwarden Web Vault Without a Password
Logging into your Bitwarden vault just got easier! A new passwordless experience enables you to access your Bitwarden vault with another device.
1699
Reasons to Prefer Blake3 over Sha256
This post is a copy of tweets by Zooko Wilcox-O'Hearn . SHA256 was designed by the NSA. BLAKE (the original) and BLAKE3 were designed by Jean-Philippe Aumasson
1700
ZCash (formerly Zerocash/Zerocoin) technology preview
I’m extremely happy to announce the Zcash project. Zcash (formerly “Zerocash”/“Zerocoin”) is a project to create a new currency for the Internet, inspired by Bitcoin. Bitcoin is an amazing and complex…
1701
1702
If you care about user privacy, don’t use Facebook JavaScript SDK
With email aliases , you can be anonymous online and protect your inbox against spams and phishing.
1703
The Need for a Digital Geneva Convention
YouTube Video
1704
I exploited TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain (2018)
The original research reports on security issues found in ACME TLS-SNI-01 which caused Let's Encypt to sunset it.
1705
1706
EFF Has Lavabit’s Back in Contempt of Court Appeal
San Francisco - Federal law enforcement officers compromised the backbone of the Internet and violated the Fourth Amendment when they demanded private encryption keys from the email provider Lavabit, the Electronic Frontier Foundation (EFF) argues in a brief submitted Thursday afternoon to the US...
1707
1708
Malvertising on Google Ads
Criminals are disguising malware as popular software, so users need to think twice before clicking the download button.
1709
Beginners guide to building a hardware hacking lab
VSS Hardware Hacking Wiki and Blog Entries
1710
