1981
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,440 posts.
1982
EFF: forced disclosure of encryption password violates 5th Amendment
San Francisco - The Electronic Frontier Foundation (EFF) urged a federal court in Colorado today to block the government's attempt to force a woman to enter a password into an encrypted laptop, arguing in an amicus brief that it would violate her Fifth Amendment privilege against self-incrimination...
1983
What’s Hiding in Your PDF?
PDFs hold information you may not know about. Discover different forms of metadata and where to look for them.
1984
Harvesting LinkedIn data for fun and profit
A few years ago, before the GDPR era, I was involved in a stealth marketing startup. We went out of
1985
EU Court of Justice: Censorship in Name of Copyright Violates Fundamental Rights
Paris, November 24th, 2011 — The European Court of Justice just rendered a historic decision in the Scarlet Extended case, which is crucial for the future of rights and freedoms on the Internet. The Court ruled that forcing Internet service providers to monitor and censor their users' communications
1986
All ProtonVPN apps are now open source and audited
Users can have more trust in ProtonVPN because all our apps are open source and independently audited for security. Learn about Proton VPN’s open source apps.
1987
Critical cross-account vulnerability in Microsoft Azure automation service
AutoWarp is a critical vulnerability in Microsoft Azure Automation Service that allows unauthorized access to other customer accounts using the service.
1988
Let's Encrypt Root and Intermediate Certificates
The keys and certificates that will underlie Let’s Encrypt have been generated. This was done during a key ceremony at a secure facility today. The following objects were created: Key pair and self-signed cert for the ISRG root Key pair and certificate for the ISRG root’s OCSP Key pairs and certificates for two Let’s…
1989
1990
Security keys are now supported for SSH Git operations
You can now use FIDO2 security keys to authenticate over SSH for remote Git operations, providing a higher level of account security.
1991
AI agents find $4.6M in blockchain smart contract exploits
On a benchmark of real exploited contracts, AI agents found vulnerabilities worth a combined $4.6 million, underscoring the need for AI-powered defense.
1992
1993
Lessons learned from cracking 2 million LinkedIn passwords
A community of security professionals discussing IT security and compliance topics and collaborating with peers.
1994
Preparing to Issue 200M Certificates in 24 Hours
On a normal day Let’s Encrypt issues nearly two million certificates. When we think about what essential infrastructure for the Internet needs to be prepared for though, we’re not thinking about normal days. We want to be prepared to respond as best we can to the most difficult situations that might arise. In some of…
1995
Keeping the Internet fast and secure: introducing Merkle Tree Certificates
Cloudflare is launching an experiment with Chrome to evaluate fast, scalable, and quantum-ready Merkle Tree Certificates, all without degrading performance or changing WebPKI trust relationships.
1996
Troubling Arguments from the Government in Smith v. Obama
We’ve filed our reply brief in the appeal of Smith v. Obama, our case challenging the NSA’s mass telephone records collection on behalf of Idaho nurse Anna Smith. The case will be argued before the Ninth Circuit Court of Appeal on December 8, 2014 in Seattle, and the public is welcome to attend....
1997
Simple Encrypted Arithmetic Library goes open source
Today we are extremely excited to announce that our Microsoft Simple Encrypted Arithmetic Library (Microsoft SEAL), an easy-to-use homomorphic encryption library developed by researchers in the Cryptography Research group at Microsoft, is open source on GitHub under an MIT License for free use. The library has already…
1998
A bug related to handling of authenticated sessions
On the evening of March 8, we invalidated all authenticated sessions on GitHub.com created prior to 12:03 UTC on March 8 out of an abundance of caution.
1999
Elliptic Curve Cryptography: A Basic Introduction
Elliptic Curve Cryptography (ECC) is a modern public-key encryption technique famous for being smaller, faster, and more efficient than incumbents. Bitcoin, for example, uses ECC as its asymmetric cryptosystem because it is so lightweight. The mathematical entity that makes all of this possible is the elliptic curve…
2000
New Pegasus spyware abuses identified in Mexico
Mexican digital rights organization R3D, with technical support from the Citizen Lab, has determined that Mexican journalists and a human rights defender were infected with Pegasus between 2019 and 2021. The infections occurred years after the first revelations of Pegasus abuses in Mexico, and after Mexico’s current…
2001
Ruby on Rails Audit Complete
The Open Source Technology Improvement Fund is proud to share the results of our security audit of Ruby on Rails . Ruby on Rails (or “Rails”) is an open source full stack web-application framework. Thanks to the help of X41 D-Sec , GitLab , and the Sovereign Tech Agency , Rails can provide more secure versions of the…
2002
Apple, Google, and Microsoft commit to expanded support for FIDO standard
Faster, easier, and more secure sign-ins will be available to consumers across leading devices and platforms.
2003
2004
2005
2006
Google Deceptively Tracks Students’ Internet Browsing, EFF Says in FTC Complaint
San Francisco—The Electronic Frontier Foundation (EFF) filed a complaint today with the Federal Trade Commission (FTC) against Google for collecting and data mining school children’s personal information, including their Internet searches—a practice EFF uncovered while researching its “Spying on...
2007
2008
Facebook Android app sends phone number to Facebook servers without consent
Broadcom Community - VMTN, Mainframe, Symantec, Carbon Black
2009
A Survival Guide for the Small Mail Server
Nowadays many companies and organizations (non-profits, units of governmental and educational institutions, etc) believe that running their own mail servers has become an impossible task, due both to the large amount of inbound spam and to the continuous attempts by spammers to send outbound spam through their mail…
2010
