211
Using ‘radioactive data’ to detect if a data set was used for training
Facebook AI has developed a new technique to mark the images in a dataset, so that researchers can then determine if a particular machine learning model...
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 319 posts.
212
213
DOMPurify bypass: XSS via HTML namespace confusion
Securitum is a pure pentesting company specialising in the security of IT systems. We have experience in performing security audits (including penetration tests) - mainly for financial/e-commerce/industrial sectors. We have performed penetration tests and cyber security services for leading European banks (see…
214
Office Drama on macOS
infecting macOS via macro-laden documents and 0days
215
What a one line change did to the Chrome sandbox
Posted by James Forshaw, Project ZeroThe Chromium sandbox on Windows has stood the test of time. ...
216
Guidance to developers affected by effort to block less secure browsers, apps
We are always working to improve security protections of Google accounts. Our security systems automatically detect, alert and help protect our users against a range of security threats. One form of phishing, known as “ man-in-the-middle ”, is hard to detect when an embedded browser framework (e.g., Chromium Embedded…
217
United States wants HTTPS for all government sites, all the time
The Sophos Blog
218
Sandboxing and workload isolation
Documentation and guides from the team at Fly.io.
219
Privacy Badger Is Changing to Protect You Better
Privacy Badger was created to protect users from pervasive non-consensual tracking, and to do so automatically, without relying on human-edited lists of known trackers. While our goals remain the same, our approach is changing. It is time for Privacy Badger to evolve.Thanks to disclosures from...
220
Threema apps are Open Source
In Celebration of Becoming Open Source, Threema is 50% Off
221
Sequoia PGP 1.0 Released: The Seedling Is a Sapling
Sequoia is a modular OpenPGP implementation in Rust.
222
Accused spy Alexander Yuk Ching Ma evidently beat the polygraph
On Thursday, 13 August 2020, FBI Special Agent Chris Jensen filed under seal a criminal complaint against Alexander Yuk Ching Ma of Honolulu, Hawaii, charging him with “Conspiracy to Gather and Communicate National Defense Information of the United States to a Foreign Nation.” On Monday, 17 August 2020, the complaint…
223
224
225
Let’s build a high-performance fuzzer with GPUs
TL;DR: Can we use GPUs to get 10x performance/dollar when fuzzing embedded software in the cloud? Based on our preliminary work, we think the answer is yes! Fuzzing is a software testing technique that supplies programs with many randomized inputs in an attempt to cause unexpected behavior. It’s an important, […]
226
OpenSK: a fully open-source security key implementation
Posted by Elie Bursztein, Security & Anti-abuse Research Lead, and Jean-Michel Picod, Software Engineer, Google Today, FIDO security...
227
Lessons from Bug Hunters Who've Found 400 Bugs in Popular DBMSs
TiDB is the distributed SQL database built for AI agents. Vectors, transactions, and analytics in one engine with ACID guarantees and elastic scale.
228
The Fake Cisco
True cyber security combines advanced technology and best practice. Get tips and read articles on how to take your online security even further.
229
RansomEXX Trojan attacks Linux systems
We recently discovered a new file-encrypting Trojan built as an ELF executable and intended to encrypt data on machines controlled by Linux-based operating systems.
230
Breaking Samsung Firmware, or Turning Your S8/S9/S10 into a DIY “Proxmark”
This post is a companion to the DEF CON 28 video available here https://www.youtube.com/watch?v=aLe-xW-Ws4c Breaking the Firmware of Samsung’s NFC Chips Recently I have been looking into how to push the capabilities of my old smartphones beyond what you could traditionally do just by rooting it. Smartphones contain…
231
Why Not WireGuard
The latest thing that is getting a lot of attention is WireGuard - the new shooting star in terms of VPN. But is it as great as it sounds? I would like to discuss some thoughts, have a look at the implementation and tell you why WireGuard is not a solution that will replace IPsec or OpenVPN.
232
233
Swiss police automated crime predictions but has little to show for it
A review of 3 automated systems in use by the Swiss police and judiciary reveals serious issues. Real-world effects are impossible to assess due to a lack of transparency.
234
The fresh smell of ransomed coffee
How a simple coffee maker became a cybersecurity nightmare
235
DuckDuckGo Founding Member in Global Privacy Control Standards Effort
We're proud to announce the launch of Global Privacy Control (GPC), a new standard to put privacy protection in the hands of consumers.
236
Multi-account containers add-on sync feature
The Multi-Account Containers Add-on will now sync your container configuration and site assignments. Firefox Multi-Account Containers allows users to separate their online identities into different tab types called Containers. Each ...
237
Buffer overflow when pwfeedback is set in sudoers
Sudo’s pwfeedback option can be used to provide visual feedback when the user is inputting their password. For each key press, an asterisk is printed. This option was added in response to user confusion over how the standard Password: prompt disables the echoing of key presses. While pwfeedback is not enabled by…
238
239
240
Threema Goes Open Source
Threema Goes Open Source, Welcomes New Partner