151
How the modern containerization trend is exploited by attackers
This MacKeeper report will tell you about 6 major data breaches that happened in 2018.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 316 posts.
152
OpenPGPjs v3.0
We're happy to announce a major new version of OpenPGPjs, the world's most widely used JavaScript PGP encryption library. Version 3.0 brings many enhancements to the hundreds of applications and millions of users who rely on OpenPGPjs.
153
AdGuard DNS: A Privacy-Oriented DNS Server
AdGuard DNS: a privacy-oriented DNS service that blocks trackers and ads anywhere, from your PC and mobile devices to smart TV and IoT.
154
The Justice Dept's secret rules for targeting journalists with FISA court orders
The Justice Dept has kept these FISA court rules for targeting journalists secret for years.
155
156
What We Learned About the Hemisphere Program After Suing the DEA
As the year draws to a close, so has EFF’s long-running Freedom of Information Act lawsuit against the Drug Enforcement Agency about the mass phone surveillance program infamously known as “Hemisphere.” We won our case and freed up tons of records. (So did the Electronic Privacy Information Center...
157
158
Vulnerability of Speculative Processors to Cache Timing Side-Channel Mechanism
Arm is committed to upholding the highest standards of security across its products and the wider Arm ecosystem. To support its partners and the broader community, Arm publishes three types of security-related documentation, Security Bulletins, Security Updates, and Security Articles.
159
160
An Update on AMD Processor Security
The AMD Product Security Incident Response Team (PSIRT) is the focal point for reporting potential product security issues to AMD. AMD PSIRT works with both the AMD internal product security team and the external product security ecosystem, including security researchers, industry peers, government organizations…
161
Protecting Against HSTS Abuse
HTTP Strict Transport Security (HSTS) is a security standard that provides a mechanism for web sites to declare themselves accessible only via secure connections, and to tell web browsers where to go to get that secure version.
162
NetBSD Network Security Audit
Over the last five months, hundreds of patches were committed to the source tree as a result of this work. Dozens of bugs were fixed, among which a good number of actual, remotely-triggerable vulnerabilities.
163
KeePassXC 2.3.0 released
KeePassXC Password Manager
164
Shedding Too Much Light on a Microcontroller's Firmware Protection (2017)
Proceedings of the 11th USENIX Workshop on Offensive Technologies (WOOT '17) - Vancouver, BC, Canada CVE number 2017-18347
165
How a Political Engineering Firm Exposed Their Code Base
Political data firm AggregateIQ exposed IT assets that raise questions for society about how technology is being used in recent US political history.
166
167
Finding Pwned Passwords with 1Password
1Password integrates with Pwned Passwords, a feature of Have I Been Pwned that allows you to check if your passwords have been leaked on the Internet.
168
Qubes Air: Generalizing the Qubes Architecture
The Qubes OS project has been around for nearly 8 years now, since its original announcement back in April 2010 (and the actual origin date can be traced back to November 11th, 2009, when an initial email introducing this project was sent within ITL internally). Over these years Qubes h...
169
170
Apple iMac Pro and Secure Storage
Explore the Duo Blog for expert tips, security insights, and resources to stay updated on the latest in security and access management trends.
171
Qualcomm’s Chain of Trust
Covering Qualcomm bootloader’s up to the point of Android being loaded
172
Removing Bad Actors on Facebook
We removed 32 Pages and accounts from Facebook and Instagram because they were involved in coordinated inauthentic behavior.
173
UK intelligence agency admits unlawfully spying on Privacy International
Thames House, Offices of MI5. Photo Credit: Wikimedia Commons
174
Australia’s Proposed Surveillance Laws Will Break the Trust Tech Depends On
In the last few years, we’ve discovered just how much trust — whether we like it or not — we have all been obliged to place in modern technology. Third-party software, of unknown composition and security, runs on everything around us: from the phones we carry around, to the smart devices with...
175
176
MacOS Caches Data from Encrypted Hard Drives
apple's 'quicklook' cache, may leak encrypted data
177
Address Verification and Full PGP Support
Address Verification allows you to be sure you are securely communicating with the right person, while PGP support adds encrypted email interoperability.
178
179
Potential Impact of Spectre on Processors in the Power family
View, search and download security bulletin information for individual IBM product versions and releases.
180
Tor Browser 8.0 released
We gave the world’s most private browsing experience a UX overhaul.