2341
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
2342
EFF’s “Spying on Students” Report Highlights Tech Companies’ Data Collection
San Francisco—School children are being spied on by tech companies through devices and software used in classrooms that often collect and store kids’ names, birth dates, browsing histories, location data, and much more—often without adequate privacy protections or the awareness and consent of...
2343
2344
The Critical Security Flaws that Resulted in Last Friday's Hack
A core value CloudFlare is that security information should be shared between organizations to make the entire Internet safer. That is how CloudFlare's systems work: if one site is attacked, data about that attack is immediately shared with the rest of the network so other sites can be safe.
2345
AlgorithmWatch shuts down Instagram monitoring after threats from Facebook
Digital platforms play an ever-increasing role in structuring and influencing public debate. Civil society watchdogs, researchers and journalists need to be able to hold them to account. But Facebook is increasingly fighting those who try. It shut down New York University’s Ad Observatory last week, and went after…
2346
2347
Making popular Ruby packages more secure
News and updates from the RubyGems team — releases, security advisories, and project announcements.
2348
Multiple vulnerabilities in RubyGems
There are multiple vulnerabilities in RubyGems bundled by Ruby.It is reported at the official blog of RubyGems.
2349
EFF Wins National Security Letter Transparency Lawsuit
A federal district court in San Francisco has ruled strongly in favor of our Freedom of Information Act lawsuit seeking records of how and when the FBI lifts gag orders issued with National Security Letters (NSLs). These records will provide a window into the FBI’s use of a highly secretive...
2350
Shedding Too Much Light on a Microcontroller's Firmware Protection (2017)
Proceedings of the 11th USENIX Workshop on Offensive Technologies (WOOT '17) - Vancouver, BC, Canada CVE number 2017-18347
2351
JTAG 'Hacking' the Original Xbox in 2023
Released in November 2001, the original Xbox was Microsoft’s first venture into the game console industry. With its hardware closely resembling a cheap but v...
2352
Mashing Enter to bypass full disk encryption with TPM, Clevis dracut and systemd
This vulnerability allows a physically-present attacker to control the full disk encryption unlock process and gain complete access to decrypted content in some cases where a TPM, dracut and Clevis are used.
2353
GitHub: Private Profiles beta
Users now have the ability to turn their GitHub profile “private”, which gives users controls over features that share user data across the GitHub platform. To enable this setting, visit…
2354
7zip.com Is Serving Malware
A convincing lookalike of the popular 7-Zip archiver site has been silently turning victims’ machines into residential proxy nodes.
2355
New macOS malware steals info, including a user's entire Keychain database
ThreatDown detects new macOS malware like MacStealer that targets Keychain databases and steals sensitive user information. Talk to our security team.
2356
Hardcoded secrets, unverified tokens, and other common JWT mistakes
An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.
2357
2358
Npm security post-mortem
npm Blog (Archive); updates from the npm team are now published on the GitHub Blog and the GitHub Changelog
2359
Backdoor in DVR firmware sends CCTV camera snapshots to email address in China
CCTV is ubiquitous in the UK. A recent study estimates there are about 1.85m cameras across the UK – most in private premises. Most of those cameras will be connected to some kind of recording device, which these days means a Digital Video Recorder or DVR. DVRs take video feeds from multiple cameras and store […]
2360
Rootkit on a Brand new Toshiba laptop
Rootkit on a brand new Toshiba Laptop - Saturday, 30 April 2011 - Alex's blog
2361
Many Bitcoin wallets vulnerable to double-spending of confirmed transactions
This document is being updated as new information arrives. Last update: 2015-07-15 13:00. All times are UTC.
2362
Listen to the whispers: web timing attacks that work
Websites are riddled with timing oracles eager to divulge their innermost secrets. It's time we started listening to them. In this paper, I'll unleash novel attack concepts to coax out server secrets
2363
2364
No Safe Harbor: How NSA Spying Undermined U.S. Tech and Europeans' Privacy
The spread of knowledge about the NSA's surveillance programs has shaken the trust of customers in U.S. Internet companies like Facebook, Google, and Apple: especially non-U.S. customers who have discovered how weak the legal protections over their data is under U.S. law. It should come as no...
2365
Signal – An Ethical Replacement for WhatsApp
Moving from WhatsApp to Signal is an important action, right now. WhatsApp’s parent company, Meta, has been involved in several cases of election interference: America in 2016, Trinidad and Tobago …
2366
Removing PGP from PyPI
PyPI has removed support for uploading PGP signatures with new releases.
2367
“Crypto drainer” template facilitates theft
Crypto Drainers are phishing pages that lure victims into signing malicious transactions that allow the attacker to siphon their crypto and NFTs.
2368
eBay customers’ personal data was compromised in March
eBay Inc. (Nasdaq: EBAY) said beginning later today it will be asking eBay users to change their passwords because of a cyberattack that compromised a database containing encrypted passwords and other non-financial data.
2369
2370
IDA cybersecurity software provider Hex-Rays acquired
Liège (BE), October 14, 2022 – Hex-Rays, a Belgian cybersecurity company that develops advanced reverse engineering software solutions, has been acquired by a consortium of investors led by Smartfin, a leading European venture capital and private equity investor, and including co-investors SFPIM and SRIW. Ilfak…