241
Reddit and LinkedIn apps also caught copying and pasting clipboard contents
Linkedin and Reddit both check your clipboard and copy and paste your clipboard contents with every keystroke - even when you’re in another app. Another
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 319 posts.
242
Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
Posted by Sergei Glazunov and Mark Brand, Project ZeroIntroductionIt was a normal week in the Pro...
243
244
245
An Android 8.0-9.0 Bluetooth Zero-Click RCE
Nowadays, Bluetooth is an integral part of mobile devices. Smartphones interconnect with smartwatches and wireless headphones. By default, most devices are configured to accept Bluetooth connections from any nearby unauthenticated device. Bluetooth packets are processed by the Bluetooth chip (also called a…
246
Restrict Access to your internal websites on AWS with BeyondCorp
Discover how BeyondCorp assists in securely restricting access to internal websites, ensuring organizational data remains protected.
247
FIDO2 security key company publishes results of internal security audit
This blogpost summarizes the result of a cooperation between SoloKeys and Doyensec, and was originally published on SoloKeys blog by Emanuele Cesena. You can...
248
New Cryptographic Tools on Keybase
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
249
Gitlab Support is no longer processing MFA resets for free users
From August 15th, GitLab Support will no longer be manually removing MFA from free accounts.
250
251
Everything old is new again: binary security of WebAssembly
Daniel Lehmann, University of Stuttgart; Johannes Kinder, Bundeswehr University Munich; Michael Pradel, University of Stuttgart
252
Off-Facebook Activity Is a Welcome but Incomplete Move
Today Facebook announced the roll-out of its Off-Facebook Activity tool (initially introduced as “Clear History” nearly two years ago). The tools shows you a list of apps, websites, and businesses that Facebook knows you have visited through its business tools (including Facebook Login, Facebook’s...
253
Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolver (TRR) Comment Period
We're crowdsourcing ideas and recommendations to help us enhance the privacy and security benefits of DNS-over-HTTPS (DoH) for users around the world
254
Deprecating password authentication in GitHub API
Get started with one of our guides, or jump straight into the API documentation.
255
FritzFrog: A New Generation of Peer-to-Peer Botnets
A Akamai é a empresa de cibersegurança e computação em nuvem que potencializa e protege negócios online.
256
257
UtahFS: Encrypted File Storage
Several months ago, I realized that I had a lot of sensitive files on my computer (my diary, if you must know) that I was afraid of losing, but I didn’t feel comfortable putting them in something like Google Drive or Dropbox. Introducing UtahFS.
258
259
Getting a biometric security key right
"Discover the upcoming YubiKey Bio with biometric capabilities. Enhance your security with our cutting-edge, FIDO-enabled device. Sign up for updates!
260
New Federal Court Rulings Find Geofence Warrants Unconstitutional
Update December 14, 2021: After this post was published, on June 4, 2021, a federal magistrate judge in Kansas issued another opinion denying the government's application for a geofence warrant.Update May 17, 2021: Since this post was published, the court unsealed its July 24, 2020 opinion denying...
261
Rootless Containers
Rootless containers is a new concept that don’t require root privileges in order to formulate, but have some unique challenges.
262
263
How CDNs Generate Certificates
Say Hi to Thomas. Thomas's first weeks at Fly have been hectic, but he's been taking notes, copious notes that can teach you all about the wild world of certificate infrastructure. Read on to discover more...
264
Reimagining the Browser: Introducing Cloudflare Browser Isolation Beta
Today, we’re excited to open up a beta of a third approach to keeping web browsing safe with Cloudflare Browser Isolation.
265
FF Sandbox Escape
By James Forshaw, Project ZeroIn my previous blog post I discussed an issue with the Windows Kern...
266
We View Nikola’s Response as a Tacit Admission of Securities Fraud
Milton should be working with the formerly big 3. He is just another fraud like musk…
267
Security vulnerabilities fixed in Firefox 72.0.1 and ESR 68.4.1
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw.
268
Exploiting Android Messengers with WebRTC
Posted by Natalie Silvanovich, Project ZeroThis is a three-part series on exploiting messenger ap...
269
TikTok and WeChat: Curating and controlling global information flows
Curating and controlling global information flows What’s the Problem? While most major international social media networks remain banned from the Chinese market in the People’s Republic of China (PRC), Chinese social media companies are expanding overseas and building up large global audiences. Some of those…
270