3121
The easiest bug bounties I have won
The bugs I will write about are the simplest ones I have ever found on Facebook. The point of this blog is to show that some bugs can be fo...
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,335 posts.
3122
Translation of Carrier IQ's Media Release
We Got Caught Doing Something We Were Kind of Hoping No One Would Notice and Now We’re Nervously Placing Exclamation Marks at the End of Our Media Alert Headlines!
3123
Internet Access Providers Aren't Bound by DMCA Unmasking Subpoenas–In Re Cox
The DMCA online safe harbor is a notice-and-takedown scheme. Web hosts aren’t liable for copyright-infringing third-party uploads unless and until the copyright owner submits a proper takedown notice to the host, at which point the web host can remain legally...
3124
Extracting TLS keys from an unwilling application (2020)
I want to be able to inspect the traffic of programs running on my computer. I don’t really trust those programs and ideally I’d like to put nearly all of them into a high security jail. One of those programs is Oculus software. There are a few reasons why I want to be cautious about Oculus software.
3125
Finding and exploiting hidden features of Animal Crossing's NES emulator (2018)
While looking for ways to activate the developer menus left over in Animal Crossing, including the NES emulator game selection menu, I found an interesting feature that exists in the original game that was always active, but never used by Nintendo. In addition to the NES/Famicom games that can be obtained in-game, it…
3126
How to Dual-Boot Ubuntu 20.04 and Windows 10 with Encryption
When you run the Ubuntu installer, there’s an option to dual-boot Ubuntu with an existing Windows installation. There’s also an option to encrypt your Ubuntu...
3127
Turning Everyday Gadgets into Bombs Is a Bad Idea
I think turning everyday gadgets into bombs is a bad idea. However, recent news coverage has been framing the weaponization of pagers and radios in the Middle East as something we do not need to concern ourselves with because “we” are safe.
3128
AI cheats: Why you didn't notice your teammate was cheating
For the past few years, cheats have evolved rapidly. First came memory reading aimbots, then colorbots, and now AI aim assist. Cheats have escaped the host PC. How does it affect the players and anti-cheats?
3129
The German Problem with Tor
EAs of the 5th July 2020, there are 1357 Tor bridges available for users in countries who censor the Tor network to use. Having just over 1,000 IP addresses is not a lot for such a big privacy network as Tor is, especially considering that the number of Tor Bridges peaked at 4,227 on the 4th January 2015. That means…
3130
Browser extensions spy on you, even if its developers don't
I've developed a few browser extensions, and every week I receive numerous emails with "revenue offer". Some experienced developers know that offers like these will inject malware into the browsers of your users, but scammers who make these offers will not tell you about it. They offer "integrations" that don't look…
3131
3132
3133
Dear Obama, from Infosec
Dear President Obama: We are more than willing to believe Russia was responsible for the hacked emails/records that influenced our electio...
3134
Some notes on the Stable Diffusion safety filter
How deep learning models are moderated
3135
3136
'Operation Endgame' Hits Malware Delivery Platforms
Law enforcement agencies in the United States and Europe today announced Operation Endgame , a coordinated action against some of the most popular cybercrime platforms for delivering ransomware and data-stealing malware. Dubbed “the largest ever operation against botnets,” the international effort is being billed as…
3137
3138
Violence-as-a-Service: Brickings, Firebombings and Shootings for Hire
A 21-year-old New Jersey man has been arrested and charged with stalking in connection with a federal investigation into groups of cybercriminals who are settling scores by hiring people to carry out physical attacks on their rivals. Prosecutors say the defendant recently participated in several of these schemes …
3139
The first serious infowar is now engaged
by John Perry Barlow Governments of the Industrial World, you weary giants of flesh and steel, I come from Cyberspace, the new home of Mind. On behalf of the future, I ask you of the past to leave us alone. You are not welcome among us. You have no sovereignty where we gather.We have no elected...
3140
3141
Linkedin's Response to My "Phishing with Intro" Post
Security and Programming Blog
3142
Mythology About Security
Ed Felton tweeted a few days ago: “Often hear that the reason today’s Internet is not more secure is that the early designers failed to imagine that security could ever matter. That is a myth…
3143
A quiet change to RSA
Over the course of years, RSA implementations gradually replaced Euler's totient function with Carmichael's totient function.
3144
How Heartbleed could've been found
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
3145
OAuth 3.0: the sane and simple way
I'm Tav, a 28-year old from London. I enjoy working on large-scale social, economic and technological systems.
3146
3147
Fun with Shellshock
This is great work. Though I must confess I’m more interested (and far more uneasy) about the other side of the coin — people developing projects like these involving machine learning to find and exploit the vulnerabilities in a fully automated fashion. This is related to, but not quite the same as, attempts at…
3148
3149
Big Time Public License
a FRAND-ly license for software
3150
I made 20 GDPR deletion requests. 12 were ignored
I made 20 GDPR data deletion requests in the past year. 2 complied immediately. 6 complied after I filed complaints with data protection offices. 12 still haven't. The regulation exists, the enforcement doesn't.