2251
Google Distributed Cloud air-gapped appliance
The Google Distributed Cloud air-gapped appliance is an integrated hardware and software solution that lets you run workloads at the tactical edge.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
2252
2253
Debunking the Myth of "Anonymous" Data
Today, almost everything about our lives is digitally recorded and stored somewhere. Each credit card purchase, personal medical diagnosis, and preference about music and books is recorded and then used to predict what we like and dislike, and—ultimately—who we are. This often happens without our...
2254
2255
2256
2257
Web Storage: the lesser evil for session tokens
I was recently asked whether it was safe to store session tokens using Web Storage (sessionStorage/localStorage) instead of cookies. Upon googling this I found the top results nearly all assert that w
2258
Google Cloud’s Secrets Manager
Secret Manager is a new GCP product that securely and conveniently stores API keys, passwords, certificates, and other sensitive data.
2259
A New Malware Detection Tool That Can Expose Illegitimate State Surveillance
Recent years have seen a boom in the adoption of surveillance technology by governments around the world, including spyware that provides its purchasers the unchecked ability to target remote Internet users' computers, to read their personal emails, listen in on private audio calls, record...
2260
Browser Fingerprinting: An Introduction and the Challenges Ahead
In the past few years, a technique called browser fingerprinting has received a lot of attention because of the risks it can pose to privacy. What is it? How is it used? What is Tor Browser doing against it? In this blog post, I’m here to answer these questions.
2261
Global Encryption Day: Encryption's Critical Role in Safeguarding Human Rights
Today is the third annual Global Encryption Day, a day to highlight why encryption is critical for a safe, private internet.
2262
2263
Leaking silhouettes of cross-origin images
This blog post is one of several guest blog posts, where we invite participants of our bug bounty program to write about bugs they've reported to us. This is a ...
2264
What We Learned About the Hemisphere Program After Suing the DEA
As the year draws to a close, so has EFF’s long-running Freedom of Information Act lawsuit against the Drug Enforcement Agency about the mass phone surveillance program infamously known as “Hemisphere.” We won our case and freed up tons of records. (So did the Electronic Privacy Information Center...
2265
Kubernetes Security Best Practices
By Connor Gilbert, product manager at StackRox Last month, the Kubernetes ecosystem was shaken by the discovery of the first major security flaw in Kubernetes, the world’s most popular container…
2266
Elixir/Erlang Secure Coding and Deployment Hardening Guidelines
Documentation, specifications and code from the Security Working Group of the Erlang Ecosystem Foundation
2267
Ubuntu Systemd Vulnerability
Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things.
2268
Facial Recognition’s Threat to Privacy Is Worse Than Anyone Thought
Before all of this ever went down In another place, another town You were just a face in the crowd You were just a face in the crowd Out in the street walking around A face in the crowd -Tom Petty If we don’t speak up now, the days when we can walk around with our heads held high without fear of...
2269
EFF to FinCEN: Stop Pushing for More Financial Surveillance
Today, EFF submitted comments to the Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) opposing the agency’s proposal for new regulations of cryptocurrency transactions. As we explain in our comments, financial records can be deeply personal and revealing, containing a...
2270
Noyb aims to end “cookie banner terror” and issues more than 500 GDPR complaints
Today, noyb.eu sent over 500 draft complaints to companies who use unlawful cookie banners - making it the largest wave of complaints since the GDPR came into force.
2271
2272
Improving Git protocol security on GitHub
We’re changing which keys are supported in SSH and removing unencrypted Git protocol. If you’re an SSH user, read on for the details and timeline.
2273
Popular Chinese iOS apps compromised in malware attack
自2011年以来用技术对抗审查。我们使用AI监控审查并在全球范围内扩大言论自由。
2274
PrivateStorage.io: A secure and privacy-focused cloud storage solution
Announcing a cloud storage solution where you are in control of all your data with client-side encryption and no data or vendor lock-in.
2275
The Day Google Decided HttpWatch Was ‘Unwanted Software’
This blog post isn’t about HTTP performance or HttpWatch itself but you may find it useful if you advertise a software product with Google Adwords. Hopefully, you’ll also find our conversation with Google amusing! What Happened ? We received an email like this: Subject: Your AdWords account: Ads...
2276
California Court of Appeal finds geofence warrant unconstitutional
The California Court of Appeal has held that a geofence warrant seeking information on all devices located within several densely-populated areas in Los Angeles violated the Fourth Amendment. This is the first time an appellate court in the United States has reviewed a geofence warrant. The case is...
2277
Website data leaks pose greater risks than most people realize
Students find website data leaks pose greater risks than most people realize
2278
2279
Unikernels are secure
Per Buer is the CEO of IncludeOS . IncludeOS is a clean-slate unikernel written in C++ with performance and security in mind. Per Buer is the founder and previous CEO/CTO of Varnish Software.
2280
SCOTUS declines to hear challenge to warrantless pole camera surveillance
WASHINGTON — The U.S. Supreme Court today declined to hear Moore v. United States, leaving in place a patchwork of lower court decisions on an...