1
Announcing the first SHA-1 collision
Posted by Marc Stevens (CWI Amsterdam), Elie Bursztein (Google), Pierre Karpman (CWI Amsterdam), Ange Albertini (Google), Yarik Markov (Goog...
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 348 posts.
2
Keybase launches encrypted Git
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
3
4
5
There is no WhatsApp 'backdoor'
Today, The Guardian published a story falsely claiming that WhatsApp’s end-to-end encryption contains a “backdoor.”
6
1Password Travel Mode: Protect your data when crossing borders
Travel Mode protects your 1Password data from unwarranted searches when you travel. Find out how – and why — to use it.
7
Do you need a VPN?
Early this year, the U.S. Congress rolled back Internet privacy rules, giving service providers free reign to track, store and sell browsing data. In July,
8
Chrome 56 will mark HTTP pages with password fields as non-secure
Posted by Emily Schechter, Chrome Security Team [Updated on 12/5/16 with instructions for developers] Developers : Read more about how to ...
9
The New York Times Is Now Available as a Tor Onion Service
Updated: March 4, 2025
10
Wildcard Certificates Coming January 2018
Update, March 13, 2018 Wildcard certificate support is live. Let’s Encrypt will begin issuing wildcard certificates in January of 2018. Wildcard certificates are a commonly requested feature and we understand that there are some use cases where they make HTTPS deployment easier. Our hope is that offering wildcards…
11
Firefox Multi-Account Containers
Our new Multi-Account Containers extension for Firefox means you can finally wrangle multiple email/social accounts. Maybe you’ve got two Gmail or Instag
12
13
Accessing Publicly Available Information on the Internet Is Not a Crime
EFF is fighting another attempt by a giant corporation to take advantage of our poorly drafted federal computer crime statute for commercial advantage—without any regard for the impact on the rest of us. This time the culprit is LinkedIn. The social networking giant wants violations of its...
14
15
Malware identified in CCleaner 5.33
Update 9/18: CCleaner Cloud version 1.07.3191 is also reported to be affected Update 9/19: This issue was discovered and reported by both Morphisec and Cisco in separate in-field cases and reported separately to Avast. Update 9/19: There has been some confusion on how the
16
Chaos Computer Clubs Breaks Iris Recognition System of the Samsung Galaxy S8
Biometric authentication systems – again – don’t deliver on their security promise: The iris recognition system of the new Samsung Galaxy S8 was successfully defeated by hackers of the Chaos...
17
18
Gas Pump Skimmers
What’s the first thing that should scare you? There’s three. And the next? The label ‘46’. They’ve got so many in the field criminals need to number them just to keep track.
19
Lavabit Reloaded
There is nothing here so move right along.
20
Upspin – Another option for file sharing
Posted by Andrew Gerrand, Eric Grosse, Rob Pike, Eduardo Pinheiro and Dave Presotto, Google Software Engineers Existing mechanisms for fil...
21
Obama Expands Surveillance Powers on His Way Out
With mere days left before President-elect Donald Trump takes the White House, President Barack Obama’s administration just finalized rules to make it easier for the nation’s intelligence agencies to share unfiltered information about innocent people. New rules issued by the Obama administration...
22
Milestone: 100M Certificates Issued
Let’s Encrypt has reached a milestone: we’ve now issued more than 100,000,000 certificates. This number reflects at least a few things: First, it illustrates the strong demand for our services. We’d like to thank all of the sysadmins, web developers, and everyone else managing servers for prioritizing protecting your…
23
Machine learning without centralized training data
Posted by Brendan McMahan and Daniel Ramage, Research ScientistsStandard machine learning approaches require centralizing the training data on one ...
24
25
EFF, ACLU Sue Over Warrantless Phone, Laptop Searches at U.S. Border
Boston, Massachusetts—The Electronic Frontier Foundation (EFF) and the American Civil Liberties Union (ACLU) sued the Department of Homeland Security (DHS) today on behalf of 11 travelers whose smartphones and laptops were searched without warrants at the U.S. border. The plaintiffs in the case are...
26
27
28
iOS 11's Misleading "Off-Ish" Setting for Radios Is Bad for User Security
Turning off your Bluetooth and Wi-Fi radios when you’re not using them is good security practice (not to mention good for your battery usage). When you consider Bluetooth’s known vulnerabilities, it’s especially important to make sure your Bluetooth and Wi-Fi settings are doing what you want them...
29
A Case of Stolen Source Code
Last week, for about three days, the macOS video transcoding app HandBrake was compromised . One of the two download servers for HandBrake was serving up a special malware-infested version of the app, that, when launched, would essentially give hackers remote control of your computer.
30
An in-depth security review of the Intel Management Engine
Security Center