1861
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,440 posts.
1862
NodeJS security cheat sheet
Website with the collection of all the cheat sheets of the project.
1863
Server-side sandboxing: Containers and seccomp
An overview of containers and seccomp as sandboxing primitives
1864
BinDiff now available for free
Posted by Christian Blichmann, Software Engineer BinDiff is a comparison tool for binary files that helps to quickly find differences and ...
1865
Wycheproof – Tests that check cryptographic software for known weaknesses
Posted by Daniel Bleichenbacher, Security Engineer and Thai Duong, Security Engineer We’re excited to announce the release of Project Wyche...
1866
FBI: If We Told You . . . (Part II)
Yesterday, we posted a troubling explanation from the FBI of why it doesn’t want you to know whether your phone and internet providers are cooperating in the most expansive surveillance program that Congress has ever enacted: You might sue.
1867
FIDO Alliance publishes new spec to let users move passkeys across providers
The FIDO Alliance has published a working draft of a new set of specifications for secure credential exchange that, when standardized and implemented by
1868
1869
1870
Signal and Giphy
The latest Signal release for Android includes support for GIF search and browsing. Signal has long supported sending and receiving GIFs, but this is an experiment that allows users to browse, search, and select popular GIFs from within Signal.
1871
1872
1873
Find You: Building a stealth AirTag clone
We built an AirTag clone capable of silently and continuously tracking someone. The device accomplishes this by sending just one beacon per generated public key, thereby staying invisible to tracking notifications for iOS users and Apple’s Tracker Detect Android app.
1874
Do you need ID to read the REAL-ID rules?
[“The welcoming, friendly and visually pleasing appearance” of the TSA’s headquarters at 6595 Springfield Center Drive, Springfield, VA.]
1875
1876
1877
Anguish: Invisible Programming Language and Invisible Data Theft
DISCLAIMER: data theft is a serious crime in many jurisdictions. The author does not condone or encourage anyone to break laws. The information provided here is for educational purposes only.
1878
EFF: Stop Congress from Reauthorizing the Warrantless Spying Bill
We could be celebrating the New Year by ripping out the fiber optic cables that are sending copies of all our emails to the National Security Agency. But instead, Congress is planning on ringing in 2013 by re-authorizing parts of the FISA Amendments Act, the controversial 2008 bill that allows...
1879
Protected Content, Delete by Date, Device Management and more
Today's update brings tools to prevent others from saving content from groups and channels, the ability to delete messages for specific periods of time, new ways to manage your connected devices, post anonymously in public groups on behalf of your channel and more.
1880
Memory-safe sudo to become the default in Ubuntu
May 6, 2025 – Ubuntu 25.10 is set to adopt sudo-rs by default. Sudo-rs is a memory-safe reimplementation of the widely-used sudo utility, written in the Rust programming language.
1881
CNIL makes Google Analytics almost illegal in France
In reaction to the invalidation of the Privacy Shield in July 2020 by the Court of Justice of the European Union (CJEU), US President Joe Biden adopted on 7 October 2022 a new legal framework (Executive Order) to strengthen safeguards on the collection and use of personal data by US intelligence agencies.
1882
Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025
The Great Firewall of China (GFW) conducted a large-scale, unconditional block targeting TCP port 443 on August 20, 2025. This report documents the measurements and analysis we conducted of that event.
1883
Free VPN integrated in Opera for better online privacy
Now, you don't have to download VPN extensions or pay for VPN subscriptions to access blocked websites and to shield your browsing when on public Wi-Fi.
1884
US authorities can see more than ever, with Big Tech as their eyes
Big Tech companies - Apple, Google, and Meta - have built a mass surveillance machine that the government can easily tap into.
1885
There's No DRM in JPEG – Let's Keep It That Way
If you have ever tried scanning or photocopying a banknote, you may have found that your software—such as Adobe Photoshop, or the embedded software in the photocopier—refused to let you do so. That's because your software is secretly looking for security features such as EURion dots in the...
1886
Simple Linux kernel memory corruption bug can lead to complete system compromise
An analysis of current and potential kernel security mitigations Posted by Jann Horn, Project ...
1887
ETS Isn't TLS and You Shouldn't Use It
The good news: TLS 1.3 is available, and the protocol, which powers HTTPS and many other encrypted communications, is better and more secure than its predecessors (including SSL). The bad news: Thanks to a financial industry group called BITS, there’s a look-alike protocol brewing called ETS (or...
1888
A memory leak in Apple's Network Extension framework
Is it normal for the Little Snitch Network Extension to consume Gigabytes of memory? No it isn’t. Unfortunately that’s another new bug in the Network Extension framework of macOS. It’s a memory leak in Apple’s framework, which developers…
1889
Syscall Auditing at Scale
If you are are an engineer whose organization uses Linux in production, I have two quick questions for you: 1) How many unique outbound TCP connections have your servers made in the past hour? 2) Which processes and users initiated each of those connections? If you can answer both of these questions, fantastic! You…
1890
