Topics /
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
Carousel Apps was the company behind Watu, the application for temporary staffing agencies. It was co-founded by Julian Johnson and Pablo Fernandez. They both since have moved to other things. Julian is working on many projects, but his main one is improving education and quality of life for children in Africa which…
GPG Mail 8 beta for macOS Golden Gate. Read the latest status, installation instructions, known issues and support plan information.
SAN FRANCISCO—Technical standards like fire and electrical codes developed by private organizations but incorporated into public law can be freely disseminated without any liability for copyright infringement, a federal appeals court ruled Tuesday. Tuesday’s ruling by a three-judge panel of the U.S...
I heard multiple times that AWS scans public GitHub repositories for AWS credentials and informs its users of the leaked credentials.
Proofcraft’s Chief Engineer Rafal Kolanski has completed a major “architecture split” overhaul of the seL4 proofs, resulting in the removal of 250k lines of proof and strengthening the link between proofs on different architectures. These changes will significantly reduce future effort required to maintain and extend…
A Accenture oferece oportunidades que surgem a partir da disrupção tecnológica em todas as indústrias, em todos os países, todos os dias. Saiba mais!
What if a secure device had an attacker-viewable crashdump format? What if that same device allowed putting arbitrary memory into the crashdump? Amazingly, the ps4 tempted fate by supporting both of these features! Let’s see how that turned out…
Users of the Signal messaging app got hit by a hacker attack. We analyze what happened and why the attack demonstrates that Signal is reliable.
Read the preliminary post incident report regarding the CrowdStrike Falcon content update affecting Windows hosts.
DMARC has been public since 2012. We checked 67,336 domains: 68.4% still have no policy or one that does not enforce it.
This blog post describes how electronic passports work, the threats within their threat model, and how they protect against those threats using cryptography. It also discusses the implications of using electronic passports for novel applications, such as zero-knowledge identity proofs.
Why using cryptographic hashes doesn't make data anonymous.
This MacKeeper report will tell you about 6 major data breaches that happened in 2018.
Our goal is to ensure users understand who is advertising to them and why they are seeing specific ads.
We do penetration testing, source code auditing and vulnerability assessments
Obama’s position on encryption is now public, as reported by the Washington Post. According to Ellen Nakashima and Andrea Peterson of the Post, Obama “will not —for now—call for legislation requiring companies to decode messages for law enforcement.” Instead, the Post reports, the “administration...
Learn about SAML authentication and the mechanics behind some of the most common SAML use cases, all through the fictional BaaS (Beer-as-a-Service).
We have compiled a list of some of the best practices to prevent API key leakage and keep secrets and credentials safe. Secrets management doesn’t have a one-size-fits-all approach, so this list considers multiple perspectives so you can be informed in deciding to or not to implement strategies.
A Stanford computer scientist says Internet voting would be "a complete disaster."
In late January 2023, almost 45 GB of source code from the Russian search giant Yandex was leaked on BreachForums by a former Yandex employee.
Posted by Platform Hardening Team In Android 11 we continue to increase the security of the Android platform. We have moved to safer def...
A typical website is made of numerous components coming from a wide variety of sources.
CCPA impacts dev teams more than GDPR. Learn who must comply, what data is covered, and how to protect test data safely.
Fighting censorship with technology since 2011. We use AI to monitor censorship and expand free speech worldwide.
Google Cloud uses the open-source KVM hypervisor that has been validated by scores of researchers as the foundation of Google Compute Engine and Google Container Engine , and invests in additional security hardening and protection based on our research and testing experience. Then we contribute back our changes to the…
The Containers feature in Firefox Nightly gives users the ability to place barriers on the flow of data across sites by isolating cookies, indexedDB, localStorage, and caches within discrete browsing ...
Introducing oniux: Kernel-level Tor isolation for any Linux app. This torsocks alternative uses namespaces to isolate Linux applications over the Tor network and eliminate data leaks.
