1711
An EPYC escape: Case-study of a KVM breakout
Posted by Felix Wilhelm, Project ZeroIntroduction KVM (for Kernel-based Virtual Machine) is the ...
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,440 posts.
1712
Hardening unused (sub)domains
Proper implementation of email hardening techniques can be beneficial even to (sub)domains that are not intended to be used with email.
1713
FireEye Shares Details of Recent Cyber Attack
Trellix XDR, get the latest cybersecurity trends, best practices, security vulnerabilities, and more from industry leaders.
1714
Disrupting the largest residential proxy network
IPIDEA’s proxy infrastructure is a component of the digital ecosystem leveraged by a wide array of bad actors.
1715
Facebook Releases Data, Including All National Security Requests
We’re pleased that we can now include in a transparency report all U.S. national security-related requests including FISA as well as National Security Letters.
1716
Rally, a novel privacy-first data sharing platform
Mozilla teams up with Princeton University researchers to enable crowdsourced science for public good; collaborates with research groups at Princeton, Stan
1717
International coalition calls for action against surveillance-based advertising
Groups in Europe and U.S. ask for action to end practices that threaten citizens’ rights.
1718
The bot situation on the internet is worse than you could imagine
As you may know, on Glade Art we tend to take anti-bot measures very seriously; it is one of our topmost priorities to protect our fellow users from having t...
1719
How I Hacked My University's Registration System with Python and Twilio
Learn how to create a Python program that sends you an SMS text message whenever an event happens, such as university class registration opens.
1720
Trapping misbehaving bots in an AI Labyrinth
How Cloudflare uses generative AI to slow down, confuse, and waste the resources of AI Crawlers and other bots that don’t respect “no crawl” directives.
1721
NATO Classified Cloud Platform Compromised
Hackers attempted to use the data in an extortion scheme, joking about altering the source code or sending it to Russian intelligence
1722
1723
Infineon RSA Key Generation Issue
Learn more about what's happening within the tech and cybersecurity industry and the developments in our business and security keys within our Yubico Blog.
1724
Tor Browser 9.0
We want everyone in the world to be able to enjoy the privacy and freedom online Tor provides, and that's why over the past couple years, we've been working hard to boost our UX and localization efforts, with the biggest gains first visible in Tor Browser 8.0. In Tor Browser 9.0, we continue to build upon those…
1725
1726
Let’s Encrypt Receives the Levchin Prize for Real-World Cryptography
On April 13, 2022, the Real World Crypto steering committee presented the Max Levchin Prize for Real-World Cryptography to Let’s Encrypt. The following is the speech delivered by our Executive Director, Josh Aas, upon receiving the award. We’d like to thank our community for supporting us and invite you to join us in…
1727
If you are harassed by lasers
The green and blue "laser" dots at lower left are actually lens flare caused by the bright sun at upper right. The sun is reflecting off elements inside the lens, causing dots or flare. The flare is almost always located diagonally mirrored from a bright light source. Photo of a sunset, with upper and lower "beams"…
1728
Our Approach to Privacy
Apple products, including Apple Intelligence, are designed to protect your privacy, because privacy is a fundamental human right.
1729
Google confirms Java and OpenSSL crypto PRNG on Android are broken
News and insights on the Android platform, developer tools, and events.
1730
“Fractureiser” malware in popular Minecraft mods and modpacks
Malware is being distributed through Minecraft mods and modpacks mainly through CurseForge
1731
CVE-2021-3011: Key recovery on Google Titan Key
Download the Writeup Illustration made by Romain Flamand Abstract The Google Titan Security Key is a FIDO U2F hardware device proposed by Google (available since July 2018) as a two-factor authentication token to sign in to applications (e.g. your Google account). Our work describes a side-channel attack that targets…
1732
1733
1734
IBDNS: Intentionally Broken DNS server
Afnic, the association in charge of the .fr top-level domain and several other French overseas and generic TLDs, announced today the release as free software of its tool named IBDNS, standing for Intentionally Broken DNS.
1735
Support for U2F security keys
You can now use U2F-compatible security keys as a second factor for your 1Password account.
1736
Did this Tor developer become a victim of NSA's laptop interception program?
UPDATE (1/27/14) : Shepard says she reached out to the seller and was told they entered the wrong tracking number. She hasn't received the package yet. She also says the new tracking details show that it has now been sent to Seattle, but to the wrong zip code, and "didn't ship until after [she] got the original…
1737
Defence Against the Docker Arts
Recently, we expanded Heroku’s industry-shaping primitives, adding support for client-side browser apps, composed of HTML, CSS, and JavaScript. This built-in support for static web apps joins the existing Heroku Buildpacks: Ruby, Python, Go, Java, Clojure, Scala, Node.js, PHP, and .NET.
1738
Stage win: FinFisher is bankrupt
FinFisher, the Munich-based state Trojan exporter, is bankrupt. For over a decade, a wide variety of international groups, including the CCC, have worked toward its end.
1739
Google to default to SSL version for logged in users
Insights from Googlers into our products, technology, and the Google culture
1740
EFF to 4th Circuit: Electronic Device Searches at the Border Require a Warrant
EFF, along with the national ACLU, the ACLU affiliates in Maryland, North Carolina, South Carolina, and Virginia, and the National Association of Criminal Defense Lawyers (NACDL) filed an amicus brief in the U.S. Court of Appeals for the Fourth Circuit urging the court to require a warrant for...