Topics /
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
Initial Disclosure: After extensive research, we have taken a short position in shares of DraftKings, Inc. This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.
Following our presentation at Black Hat USA, in this blog post we provide some details on CVE-2022-20233, the latest vulnerability we found on Titan M, and how we exploited it to obtain code execution on the chip.
Databases exposed by a criminal group leaked more than 300 million Facebook user IDs, names, and phone numbers on the web.
Apple has chosen to leave Big Sur and Catalina (around 35 to 40 percent of all Macs) in danger of actively exploited vulnerabilities that have only been patched for macOS Monterey.
Increase container security by dropping capabilities in Docker. Learn how to drop unnecessary capabilities for increased security.
Posted by the Big Sleep team Introduction In our previous post, Project Naptime: Evaluating Offe...
Read this post for a privacy update regarding third-party tracking code on our website.
Last year, about the time we were messing around with a virtually unheard-of hardware wallet we got a bit excited about the word “unhackable”. Long story short, I ended up supporting a selection of kickstarters that had the word “unhackable” or similar in their title. Of these, at least one got funded and got…
Microsoft Defender is the endpoint security solution preinstalled on every Windows machine since Windows 7. It's a fairly complex piece of software, addressing both EDR and EPP use cases. As such, Microsoft markets two different products. Microsoft Defender for Endpoint is a cloud based endpoint security solution that…
Address Verification allows you to be sure you are securely communicating with the right person, while PGP support adds encrypted email interoperability.
You are seeing this because the administrator of this website has set up Anubis to protect the server against the scourge of AI companies aggressively scraping websites . This can and does cause downtime for the websites, which makes their resources inaccessible for everyone.
Excalidraw introduces browser-based end-to-end encryption using Web Cryptography APIs for secure, private drawing storage.
A photo in a Los Alamos National Laboratory (LANL) student briefing from 2022 shows four people inspecting what appears to be a damaged B61 nuclear bomb.
Emailed password reset links are a common part of web applications. Is your site leaking these confidential links to third party sites?
While browsing the web, you've almost certainly come across sites that let you log in using your social media account. The chances are that this feature is ...
A team of computer scientists at the University of California San Diego and Brave Software. have developed a tool that will increase protections for users’ private data while they browse the web.
We created a centralized authentication service, called Identity, by building upon functionality from the OpenID Connect (OIDC) specification.
UPDATE: EFF also opposes H.R. 3548. Like S. 1757, it would expand border surveillance with biometric, drone, and ALPR technologies. The bill, styled the Border Security for America Act, was introduced by Rep. McCaul in July. EFF opposes a new federal bill that would dramatically expand dragnet...
The government has withdrawn the Personal Data Protection Bill, which had been in the works for three years, slamming the brakes indefinitely on privacy safeguards in India.
UpGuard has identified an exposure of Chicago voters' personal information by an electronic voting machine firm.
Authenticate and authorize your users with Supabase Auth
View, search and download security bulletin information for individual IBM product versions and releases.
