2611
Tor Browser 8.0 released
We gave the world’s most private browsing experience a UX overhaul.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
2612
Analyzing the legal implications of GitHub Copilot
Explore the potential legal challenges GitHub Copilot faces regarding copyright infringement and license compliance of its code suggestions.
2613
Bitcoin's big secret: How cryptocurrency became law enforcement's secret weapon
WIRED's Andy Greenberg discusses a revelation that turned his decades-long reporting on its head: Bitcoin became a criminal's worst nightmare.
2614
New Report Shows Cops Used Ring Cameras to Monitor Black Lives Matter Protests
San Francisco - The Electronic Frontier Foundation (EFF) has obtained emails that show that the Los Angeles Police Department (LAPD) sent at least one request—and likely many more—for Amazon Ring camera video of last summer’s Black-led protests against police violence. In a report released today,...
2615
Requiring MFA on popular gem maintainers
News and updates from the RubyGems team — releases, security advisories, and project announcements.
2616
Best Practices for Securing SSH
This article explores 5 SSH best practices you should observe to boost the security of your infrastructure.
2617
2618
Restaurant Delivery Payment-Skimming Campaign
InfoHawk research has uncovered a network of 820 suspicious restaurant domains impersonating major US chains, including Jersey Mike's, Jimmy John's, Firehouse Subs, Chipotle, and Dave's Hot Chicken. Some are running sophisticated payment-skimming attacks that capture credit card information and ask customers for their…
2619
Upcoming coordinated security fix for all Matrix server implementations
Matrix, the open protocol for secure decentralised communications
2620
Exponential growth in DDoS attack volumes
How Google prepares for and protects against the largest volumetric DDoS attacks.
2621
Post-Mythos Cybersecurity: Keep calm and carry on
As some of those fears, uncertainties, and doubts about Mythos are starting to feel real, what can we do about it? Paradoxically, I believe that little needs to change in what we’ve been doing for years.
2622
Zero-day Flash exploit on all platforms, fix two weeks out
For the complete experience, please enable JavaScript in your browser. Thank you!
2623
Vulnerabilities in chips in 37% of smartphones
Highlights Check Point Research discovered vulnerabilities in MediaTek’s chips, embedded in 37% of all smartphones globally CPR discovered several %
2624
Appeals Court Holds that Email Privacy Protected by Fourth Amendment
In a landmark decision issued today in the criminal appeal of U.S. v. Warshak, the Sixth Circuit Court of Appeals has ruled that the government must have a search warrant before it can secretly seize and search emails stored by email service providers. Closely tracking arguments made by EFF in its...
2625
A kernel stack use-after-free: Exploiting Nvidia's GPU Linux drivers
This article details two bugs discovered in the NVIDIA Linux Open GPU Kernel Modules and demonstrates how they can be exploited. The bugs can be triggered by an attacker controlling a local unprivileged process. Their security implications were confirmed via a proof of concept that achieves kernel read and write…
2626
Opera breached, has code cert stolen, possibly spreads malware
The Sophos Blog
2627
Dnsmasq wins the first BlueHats Prize
BlueHats prizes is an initiative by the French Interministerial Digital Directorate. They are awarded to maintainers of critical free and open source projects. In 2024 four prizes of € 10 000 each will be given out. We are happy to announce the winner of the first 2024 BlueHats prize is Simon Kelley, maintainer of the…
2628
2629
Hacker leaks 281 GB of data from Germany's far-right AfD party
Germany's far-right AfD (Alternative für Deutschland) party has confirmed that it has suffered a security breach, after a hacker published what appear to be hundreds of thousands of the controversial political party's internal emails.
2630
Making email more secure with MTA-STS standard
Posted by Nicolas Lidzborski, Senior Staff Software Engineer, Google Cloud and Nicolas Kardas, Senior Product Manager, Google Cloud We’re...
2631
2632
Briar is in maintenance mode
This is a quick update about the status of Briar. Short version: the project is still active but we’re only making essential security updates and bugfixes for now. Long version: For several years we’ve been trying to find solutions to some of the longstanding issues with Briar, such as high battery usage and…
2633
2634
Teardown of a Failed Linux LTS Spectre Fix
An in-depth analysis of the journey of a Spectre fix into the upstream LTS kernels that left its users with nothing more than a false sense of security.
2635
How to defeat Ed25519 and EdDSA using faults
The Latest News from Research at Kudelski Security
2636
Beware of hacked ISOs if you downloaded Linux Mint on February 20th
We were exposed to an intrusion today. It was brief and it shouldn’t impact many people, but if it impacts you, it’s very important you read the information below.
2637
Proposed UN cybercrime treaty has evolved into an expansive surveillance tool
EFF has joined forces with 110 NGOs today in a joint statement delivered to the United Nations Ad Hoc Committee, clearly outlining civil society non-negotiable redlines for the proposed UN Cybercrime Treaty, and asserting that states should reject the proposed treaty if these essential changes are...
2638
Rustls Server-Side Performance
In past years, the Rustls project has been happy to receive substantial investments from the ISRG. One of our goals has been to improve performance without compromising on safety. We last posted about our performance improvements in October of 2024, and we're back to talk about another round of improvements. What is…
2639
2640
PureBoot, the High Security Boot Process
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.