2131
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
2132
A New Threat Actor Targets UAE Dissidents
This report describes a campaign of targeted spyware attacks carried out by a sophisticated operator, which we call Stealth Falcon. The attacks have been conducted from 2012 until the present, against Emirati journalists, activists, and dissidents.
2133
2134
Domain-validated SSL will soon be free from the large CAs
Upcoming plans revealed from two of the largest commercial CAs
2135
Civil Liberties Groups Speak Out Against CISPA in Lead Up to Hearings
On Monday, EFF and over 30 other Internet rights organizations sent a letter to members of Congress demanding they vote no on the "cybersecurity" bill known as CISPA. The letter starts off a week in which Congress will hold three different hearings about CISPA and computer and network security. In...
2136
I scanned all of GitHub's "oops commits" for leaked secrets
GitHub Archive logs every public commit, even the ones developers try to delete. Force pushes often cover up mistakes like leaked credentials by rewriting Git history. GitHub keeps these dangling commits, from what we can tell, forever. In the archive, they show up as “zero-commit” PushEvents.
2137
At least 11 cities use automated surveillance in the EU
At least 11 local police forces in Europe use computer vision to automatically analyze images from surveillance cameras. The risks of discrimination run high but authorities ignore them.
2138
Recovering redacted information from pixelated videos
We explore the history of image unblurring and present a simple yet effective technique to get a high-resolution image from a pixelated video in order to recover redacted information (with no guessing involved).
2139
TrustTunnel: AdGuard VPN protocol goes open-source
Today is a big day for us, and for everyone who cares about transparency, privacy, and having full control over their own traffic. We’re finally open-sourcing the protocol that powers AdGuard VPN. And it now has a name: TrustTunnel.
2140
Potent malware that hid for six years spread through routers
While analyzing some memory dumps suspicious of being infected with a keylogger, we identified a library containing strings to interact with a virtual file system. This turned out to be a malicious loader internally named “Slingshot”.
2141
DHS Asserting Unconstitutional Authority to Search Travelers’ Phones and Laptops
BOSTON — The Electronic Frontier Foundation (EFF) and the ACLU today asked a federal court to rule without trial that the Department of Homeland Security violates the First and Fourth Amendments by searching travelers’ smartphones and laptops at airports and other U.S. ports of entry without a...
2142
EFF Relaunches Surveillance Self-Defense Guide
We’re thrilled to announce the relaunch of Surveillance Self-Defense (SSD), our guide to defending yourself and your friends from digital surveillance by using encryption tools and developing appropriate privacy and security practices. The site launches today in English, Arabic, and Spanish, with...
2143
No, PGP is not broken, not even with the Efail vulnerabilities
Recently, news broke about potential vulnerabilities in PGP, dubbed Efail. However, despite reports to the contrary, PGP is not actually broken, as we will explain in this post.
2144
How SHA-2 works step-by-step (SHA-256)
Learn to code from scratch with hands-on lessons, a structured curriculum, and real projects. Stop watching tutorials, start writing code for free now.
2145
A researcher’s tale of defeating traps, tricks, and complex virtual machines
Office 365 Advanced Threat Protection (Office 365 ATP) blocked many notable zero-day exploits in 2017. In our analysis, one activity group stood out: NEODYMIUM. This threat actor is remarkable for two reasons: FinFisher is such a complex piece of malware that, like other researchers, we had to devise special methods…
2146
ISPs in AU and NZ start censoring the internet without legal precedent
Several websites including Voat, ZeroHedge, Archive.is, LiveLeak, and others have been blocked in Australia and New Zealand in direct contravention to
2147
Android's theft protection features
Android rolls out theft protection features to safeguard your data before, during and after a theft incident.
2148
2149
OpenSSL Licensing Update
The following is a press release that we just released, with the cooperation and financial support of the Core Infrastructure Initiative and the Linux Foundation.
2150
Price of a bot army revealed across online platforms
The first global index tracking real-time prices for buying fake account verifications on 500+ online platforms in every country has been launched by a team at the University of Cambridge.
2151
We X-Rayed a Suspicious FTDI USB Cable
That cheapo cable you bought online? Probably a counterfeit. We x-rayed a suspicious cable to show you exactly what that means, and why counterfeits work worse and wear out faster.
2152
Securing Your Domain Against Seizure: Where Is Safe to Register a Domain Name?
The Gun.io blog: insights on hiring software developers, AI in engineering, distributed teams and how to build high-performing technical teams.
2153
HTTP/2 zero-day vulnerability results in record-breaking DDoS attacks
The “HTTP/2 Rapid Reset” attack exploits a weakness in the HTTP/2 protocol to generate enormous, hyper-volumetric DDoS attacks. Cloudflare has mitigated a barrage of these attacks in recent months, including an attack three times larger than any previous attack we’ve observed
2154
Let's Play a Game – find bugs in popular open-source projects
Find software and development products, explore tools and technologies, connect with other developers and more. Sign up to manage your products.
2155
Joanna Rutkowska leaves Qubes OS, joins Golem
Earlier this year, I decided to take a sabbatical. I wanted to reflect on my infosec work and decide what I would like to focus on in the coming years. As you probably know, I’ve spent the last nine years mostly fighting the battle to secure the endpoint, more specifically creating, dev...
2156
On being targeted by the NSA
As quoted in the original article on Das Erste: We've been thinking of state surveillance for...
2157
The House Intelligence Committee's Surveillance 'Reform' Bill Is a Farce
Two bills reauthorizing Section 702 of the Foreign Intelligence Surveillance Act are headed to the House floor. Meanwhile, FBI agents have used Section 702 databases to conduct millions of invasive searches for Americans’ communications, including those of protesters, racial justice activists, 19,000 donors to a…
2158
Patch OpenSSL on November 1 to avoid “critical” security vulnerability
The GlobalSign blog is the top resource to see what's trending in public key infrastructure (PKI), SSL/TSL, digital signing solutions, cybersecurity & more!
2159
2160
ProtonMail now offers elliptic curve cryptography
Proton Mail has become the first and only encrypted email provider to support elliptic curve cryptography (ECC), providing more security and performance.