241
WhatsApp alternatives that respect privacy
WhatsApp may be secure but it’s not private. Learn about the best alternatives to WhatsApp that genuinely respect your privacy.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 366 posts.
242
Microsoft Windows RCE Vulnerability Gives an Attacker Complete Control
Synack Red Team breaks down a Windows RCE vulnerability enabling full remote code execution and complete attacker control — exploitation techniques and real-world security analysis.
243
244
Opening Up the Samsung Q60 Series Smart TV (2019)
True cyber security combines advanced technology and best practice. Get tips and read articles on how to take your online security even further.
245
The Privacy Lesson of 9/11: Mass Surveillance Is Not the Way Forward
Congress must ensure that the next generation of Americans is able to speak and associate freely, without fear of surveillance.
246
247
248
Supporting Let’s Encrypt, the nonprofit making HTTPS free for all
Today, we’re thrilled to be partnering with Let’s Encrypt, the world’s largest certificate authority.
249
Bypassing macOS TCC user privacy protections by accident and design
TCC is meant to protect user data from unauthorized access, but design flaws mean users and malware can bypass TCC, even by accident.
250
Simple SSH Security
Simple SSH Security Within a couple of minutes you can improve your SSH security significantly.
251
How to fight back against Google FLoC
Here’s a closer look at Google’s Federated Learning of Cohorts (FLoC) initiative and how you can fight back and opt-out as a web user and a web developer.
252
Practical HTTP Header Smuggling: Sneaking Past Reverse Proxies to Attack AWS
Modern web applications typically rely on chains of multiple servers, which forward HTTP requests to one another. The attack surface created by this forwarding is increasingly receiving more attention, including the recent popularisation of cache poisoning...
253
Browser Fingerprinting Without JavaScript
Turning off JavaScript blocks ads but not device tracking. Discover how no-JavaScript fingerprinting works.
254
What's an SPF Record?
SPF records are DNS records that help prevent SPAM and forged emails
255
Sequoia 1.3
Sequoia is a modular OpenPGP implementation in Rust.
256
Encrypted Client Hello: The Future of ESNI in Firefox
Background Two years ago, we announced experimental support for the privacy-protecting Encrypted Server Name Indication (ESNI) extension in Firefox Nightly. The Server Name Indication (SNI) TLS extension enables server and ...
257
Farm equipment security at DEF CON 29
At DEF CON 29, a security researcher exposed the vulnerabilities of farm equipment manufacturers.
258
How WhatsApp enables multi-device capability
For years, people have been asking us to create a true multi-device experience that allows people to use WhatsApp on other devices without requiring a smartphone connection. Today, we’re announcing…
259
260
Portugal proposed law tries to sneak in biometric mass surveillance
Whilst the European Parliament has been fighting bravely for the rights of everyone in the EU to exist freely and with dignity in publicly accessible spaces, the government of Portugal is attempting to push their country in the opposite direction: one of digital authoritarianism. The Portuguese lead organisation in…
261
(L)Awful Interception
One of democracy's foundations is the fact that all human beings have certain inalienable rights and freedoms. Suspended by trust and shared values. Today, trust and shared values are being replaced by “control and surveillance”.
262
What does a PGP signature on a Git commit prove?
With git, a cryptographic signature on a commit provides strong integrity guarantees of the entire history of that branch going backwards...
263
YubiKey Bio Series
The YubiKey Bio Series delivers secure second factor and passwordless logins for desktop-based FIDO-supported services and applications.
264
YouTube starts to require a credit card or ID to verify the age in EU (2020)
We’ve taken important steps to make YouTube a safer place for families. We’re announcing a continuation of these efforts.
265
EU legislation allows emails, messages and other communications to be scanned
On 6 July, the European Parliament adopted in a final vote the derogation to the main piece of EU legislation protecting privacy, the ePrivacy Directive, to allow Big Tech to scan your emails, messages and other online communications.
266
Why Did Satoshi Decide to Use Secp256k1 Instead of Secp256r1?
Secp256k1 and secp256r1 are two commonly used curves. Hyperledger / Fabric developed by IBM is using secp256r1 while Bitcoin is using secp256k1. What is the difference between these two and why did Satoshi decide to use secp256k1 which is considered as a surprising choice at the time?
267
268
A Declaration of the Independence of Cyberspace (1996)
by John Perry Barlow Governments of the Industrial World, you weary giants of flesh and steel, I come from Cyberspace, the new home of Mind. On behalf of the future, I ask you of the past to leave us alone. You are not welcome among us. You have no sovereignty where we gather.We have no elected...
269
Software Verification and Analysis Using Z3
Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.
270
Facebook sues two Chrome extension devs for scraping user data
Today we filed a lawsuit against two individuals for violating our Terms of Service and Portugal’s Database Protection Law.