2791
Comparing how security experts and non-experts stay safe online
Posted by Iulia Ion, Software Engineer - Rob Reeder, Research Scientist - Sunny Consolvo, User Experience Researcher Today, you can find...
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
2792
2793
Tiny, tamper-proof ID tag can authenticate almost anything
A cryptographic tag developed at MIT uses terahertz waves to authenticate items by recognizing the unique pattern of microscopic metal particles that are mixed into the glue that sticks the tag to the item’s surface.
2794
Releasing rainbow tables to accelerate Net-NTLMv1 protocol deprecation
Mandiant aims to lower the barrier for security professionals to demonstrate the insecurity of Net-NTLMv1.
2795
The Death of Infosec Twitter
"Infosec Twitter," a vibrant community of security practitioners, known for its insight, inspiration, and entertainment, is coming to an end.
2796
EC2 Instance Connect
Discover more about what's new at AWS with Introducing Amazon EC2 Instance Connect
2797
Saying goodbye to encrypted SMS/MMS
It’s 2015, and the end of the road for encrypted SMS/MMS in TextSecure. The TextSecure story started back in 2009, at the dawn of the smartphone era. Back then, TextSecure focused on securing the transport that everyone coming from feature phones was familiar with: SMS. Today, many things have c...
2798
Keyless SSL: The Nitty Gritty Technical Details
We announced Keyless SSL yesterday to an overwhelmingly positive response. We read through the comments on this blog, Reddit, Hacker News, and people seem interested in knowing more and getting deeper into the technical details.
2799
2800
Managed SSL for Google App Engine
We’re excited to announce the beta release of managed SSL certificates at no charge for applications built on Google App Engine . This service automatically encrypts server-to-client communication — an essential part of safeguarding sensitive information over the web. Manually managing SSL certificates to ensure a…
2801
You are being followed: The business of social media surveillance
Anubis could not load its JavaScript. The server may be overloaded. Please reload the page to try again.
2802
Introducing Heroku Private Spaces
As the world becomes more cloud-centric, and more of our apps and business depend on its capabilities, the trust, control and management of cloud services
2803
Copyright troll lawsuit blows up in face of Righthaven
Righthaven is attempting to make a business out of suing Internet websites for copyright infringement. It has filed 180 copyright actions so far —without ever first asking that a work be removed from the target website—in each case alleging “willful infringement” and attempting to extract...
2804
Using ‘radioactive data’ to detect if a data set was used for training
Facebook AI has developed a new technique to mark the images in a dataset, so that researchers can then determine if a particular machine learning model...
2805
2806
Disappointing Unsealing Decision in Aaron Swartz Case
The public lost another battle in the U.S. v. Aaron Swartz case, this one over transparency. On May 13, 2013, the U.S. District Court judge handling the prosecution sided with the government, the Massachusetts Institute of Technology and JSTOR and refused to make public any information in the case...
2807
ACLU and EFF Sue Over Warrantless Phone and Laptop Searches at U.S. Border
Lawsuit on Behalf of 11 Travelers Challenges Searches of Electronic Devices as Unconstitutional
2808
Statistician calls for audit to address election hacking fears
Double-check needed before Electoral College cements presidential results on Dec. 19
2809
Protect your privacy and your phone number with Firefox Relay
When you share your personal phone number with anyone outside your circle of family and friends, it essentially gives them permission to call you anytime o
2810
CVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalation to Root
The Qualys Threat Research Unit has identified a Local Privilege Escalation (LPE) vulnerability affecting default installations of Ubuntu Desktop version 24.04 and later. This flaw (CVE-2026-3888)…
2811
OpenSSH Pre-Auth Double Free – Writeup and Proof-of-Concept
Understanding the OpenSSH CVE-2023-25136 high vulnerability. Read our analysis with Proof-of-Concept, learn what's vulnerable, and discover remediations.
2812
DOMPurify bypass: XSS via HTML namespace confusion
Securitum is a pure pentesting company specialising in the security of IT systems. We have experience in performing security audits (including penetration tests) - mainly for financial/e-commerce/industrial sectors. We have performed penetration tests and cyber security services for leading European banks (see…
2813
2814
2815
Onion names reserved by the IETF
The Internet Engineering Task Force (IETF), the body that sets standards for the Internet, has...
2816
Fireworks AI security breach impacts Notion and their customers
A tool that connects everyday work into one space. It gives you and your teams AI tools—search, writing, note-taking—inside an all-in-one, flexible workspace.
2817
Scalable and secure access with SSH
Visit the post for more.
2818
2819
Google announces Sec-Gemini v1 a new experimental cybersecurity model
Today, we’re announcing Sec-Gemini v1, a new experimental AI model focused on advancing cybersecurity AI frontiers. As outlined a year ago, defenders face the daunting t…
2820
