Topics /
The most popular blog posts about security & privacy on Hacker News. 319 posts.
Circles is a surveillance firm that reportedly exploits weaknesses in the global mobile phone system to snoop on calls, texts, and the location of phones around the globe, and is affiliated with NSO Group, which develops the oft-abused Pegasus spyware. Using Internet scanning, we found a unique signature associated…
Users can have more trust in ProtonVPN because all our apps are open source and independently audited for security. Learn about Proton VPN’s open source apps.
Its that time of year again, time for another Kali Linux release! Quarter #3 - Kali Linux 2020.3. This release has various impressive updates, all of which are ready for immediate download or updating. A quick overview of what’s new since the last release in May 2020: New Shell - Starting the process to switch from…
Netflix has a program in our Information Security department for quantifying the risk of deliberate (attacker-driven) and accidental…
We asked ourselves if it was time to switch to a less invasive analytics app than Google Analytics; one...
We ran experimental TLS blocking measurements in India
OAuth provides third party applications limited access to user resources without compromising the user's data. Find out exactly how in this blog.
If you follow security on the Internet, you may have seen articles warning you to “beware of public Wi-Fi networks" in cafes, airports, hotels, and other public places. But now, due to the widespread deployment of HTTPS encryption on most popular websites, advice to avoid public Wi-Fi is mostly out...
Posted by Brandon Azad, Project ZeroOne Byte to rule them all, One Byte to type them,One Byte to ...
Teleport’s Enhanced Session Recording feature can add vital extra visibility into commands being run on your systems.
At least 11 local police forces in Europe use computer vision to automatically analyze images from surveillance cameras. The risks of discrimination run high but authorities ignore them.
Learn to code from scratch with hands-on lessons, a structured curriculum, and real projects. Stop watching tutorials, start writing code for free now.
Our goal is to ensure users understand who is advertising to them and why they are seeing specific ads.
Learn about SAML authentication and the mechanics behind some of the most common SAML use cases, all through the fictional BaaS (Beer-as-a-Service).
We have compiled a list of some of the best practices to prevent API key leakage and keep secrets and credentials safe. Secrets management doesn’t have a one-size-fits-all approach, so this list considers multiple perspectives so you can be informed in deciding to or not to implement strategies.
Posted by Platform Hardening Team In Android 11 we continue to increase the security of the Android platform. We have moved to safer def...
Multiple vulnerabilities could allow running arbitrary code on an intranet server and gain root access on all the customers' routers
In mid-2017, The Shadow Brokers exposed NSA files in a leak known as "Lost In Translation".Recently, researcher uncovered "Nazar", a previously-unknown APT that was mentioned in the leak.We decided to dive into each and every one of the components and share our technical analysis. What we found out, is far from being…
In the past two years, Keen Security Lab did in-depth research on the security of Tesla Cars and presented our research results on Black Hat 2017 and Black Hat 2018. Our research involves many in-veh
Secret Manager is a new GCP product that securely and conveniently stores API keys, passwords, certificates, and other sensitive data.
Students find website data leaks pose greater risks than most people realize
This series of articles will explore some of my favorite Red Hat Enterprise Linux (RHEL) 8 capabilities that are enabled by systemd. Thus, this series assume...
Update 10/1/2020: The EARN IT bill has been amended since this blog post was published. We still oppose the bill.Imagine an Internet where the law required every message sent to be read by government-approved scanning software. Companies that handle such messages wouldn’t be allowed to securely...
