3151
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,335 posts.
3152
We've learned nothing from the SolarWinds hack
Mac's Tech Blog
3153
3154
3155
Magento eCommerce PHP Remote Code Execution
Critical remote code execution vulnerability in Magento (SUPEE-5344). Patch immediately. Affects 200,000 stores. Includes patch download and analysis.
3156
Cryptography behind the top cryptocurrencies
This table is based on research at Nash for work expanding our MPC protocol to secure wallets on new blockchains. We took a snapshot of rankings by market cap in early February 2021. In summary, 74 coins use ECDSA and the secp256k1 curve, including Bitcoin, Ethereum, and 48 ERC20 tokens. 10 coins use EdDSA and…
3157
Home Made TPM2.0 Module
Introduction With the recent launch of Windows 11 Microsoft also made having a hardware TPM module mandatory. Although this technology is not new (it was introduced in Windows 10 and Windows Server…
3158
3159
Why Apple's iPhone encryption won't stop NSA
Recent news headlines have made a big deal of Apple encrypting more of the storage on their handsets, and claiming to not have a key. Depend...
3160
Reconstructing Public Keys from Signatures
One weird hobby of mine is reasonable properties of cryptographic schemes that nobody promised they do or don’t have. Whether that’s invisible salamanders or binding through shared secr…
3161
3162
3163
3164
Hackers influence ChatGPT and Gemini to direct users to scam centers
Think you can trust AI to give you correct answer? Think again.
3165
Meta's Muse appears to use an OpenAI model labeled muse-special
While Muse was building my website, one subagent ran on a model called azure/muse-special. So I dug through the filesystem again.
3166
3167
Why are neural networks and cryptographic ciphers so similar? (2025)
Several neural network design principles are almost identical to cipher design principles.
3168
Representing SHA-256 Hashes as Avatars
How to turn 256 bits of entropy into a beautiful, avatar-friendly circular SVG: the Hashvatar.
3169
Who and what is Coinhive?
Multiple security firms recently identified cryptocurrency mining service Coinhive as the top malicious threat to Web users, thanks to the tendency for Coinhive’s computer code to be used on hacked Web sites to steal the processing power of its visitors’ devices. This post looks at how Coinhive vaulted to the top of…
3170
3171
A Cryptographic Near Miss
A recent issue in scalar multiplication makes for a good case study of how unsafe interfaces, undocumented assumptions, and time lead to vulnerabilities.
3172
3173
3174
Electronic Arts Hates Strong Passwords
EA does not allow passwords longer than 16 characters or passwords that contain symbols. However passwords like cool, pass and love are totally acceptable.
3175
3176
3177
3178
Why So Many Top Hackers Hail from Russia
Conventional wisdom says one reason so many hackers seem to hail from Russia and parts of the former Soviet Union is that these countries have traditionally placed a much greater emphasis than educational institutions in the West on teaching information technology in middle and high schools, and yet they lack a…
3179
How I found a data leak of a company during a college lecture
A few weeks ago I gave a guest lecture at the Windesheim University of Applied Sciences in The Netherlands. Being a Windesheim graduate myself I’ve always kept in touch with my former teachers. One of them told me recently that a lot of students want to learn more about IT security & hacking and invited me to give a…
3180
