3691
The Strange Case of John Dillinger and the Fraudulent Apple ID
Programming Zen is a blog about programming and emerging technologies, authored by Antonio Cangiano, a Software Development Manager and AI Evangelist at IBM.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,337 posts.
3692
Linux kernel heap quarantine versus use-after-free exploits
It's 2020. Quarantines are everywhere – and here I'm writing about one, too. But this quarantine is of a different kind. In this article I'll describe the Linux Kernel Heap Quarantine that I developed for mitigating kernel use-after-free exploitation.
3693
3694
Race conditions on the web
I enjoy breaking websites.
3695
3696
3697
Deceiving Windows Defender: The Big Stack Bypass
Defeating Windows Defender detection on Windows 10 by creating a large (>2MB) payload allocated on the stack
3698
MitM-ing Postgres
I recently had to set up a new postgres instance at work. While we’re already using Heroku Postgres for production loads, we had some requirements for this one that couldn’t be solved without being database admin, and thus had to go self-hosted. That...
3699
Process behaviour anomaly detection using eBPF and unsupervised learning
Hello everybody, I hope you’ve been enjoying this summer after two years of Covid and lockdowns :D In this post I’m going to describe how to use eBPF syscall t…
3700
Automatically inferring file syntax with afl-analyze
The nice thing about the control flow instrumentation used by American Fuzzy Lop is that it allows you to do much more than just, well, f...
3701
Would you have spotted the fraud?
Pictured below is what’s known as a skimmer, or a device made to be affixed to the mouth of an ATM and secretly swipe credit and debit card information when bank customers slip their cards into the machines to pull out money. Skimmers have been around for years, of course, but thieves are constantly improving them…
3702
3703
Ubuntu Pro Shenanigans
10/18/2026: Drive Specifications Matter (Complete) 10/09/2026: Gear Review: XTEINK X4 Pro 10/09/2026: Gear Review: OLYVUE V78 Dash Cam 10/01/2026: UNREDACTED Magazine Issue 013 09/21/2026: Updated OSINT Scripts 09/20/2026: New Socials 08/29/2026: Blog Archive 08/20/2026: Free PDF Self-Publishing Guide 08/19/2026: OS…
3704
3705
3706
Self-Signed JWTs
An auth scheme where you let yourself in.
3707
3708
Baiting the bot
LLM chatbots can be engaged in endless "conversations" by considerably simpler text generation bots. This has some interesting implications.
3709
France's tax agency got hacked (in French)
Après l'ANTS, le piratage de la DGFiP marque un nouveau palier. Experts de l'État numérique, de la cybersécurité et du politique décryptent cet incident.
3710
3711
3712
Applied Cryptography Engineering
Applied Cryptography taught two generations of developers what they know about crypto, and it is a dreadful instruction manual. The book to replace it with, and what you still have to learn after.
3713
3714
HTTP GZIP Compression remote date and time leak
Tor is a service run by a network of volunteers to allow people to use internet anonymously. Normally tor is used to browse the web without being tracked or identified.
3715
Mac app launches slowed by malware scan (2024)
I've always attributed slow Xcode launches to Xcode simply sucking, but I've noticed that the FileMerge app frequently launches slowly too. When this happens, the app can take a dozen bounces in the Dock before finally opening. FileMerge resides in the folder Xcode.app/Contents/Applications/ within the Xcode bundle…
3716
Linux Capabilities in a nutshell (2019)
Linux capabilities can be difficult to understand so let's go through them quickly
3717
Decompiling Hyper-V Manager to rebuild it from source
This post guides through decompiling Hyper-V Manager to rebuild it from source, aiming to assess its value for potential open-sourcing. It explores manual and automated decompilation processes, including troubleshooting and enhancing the tool, advocating for community-led improvements to this widely-used but neglected…
3718
Investigating the 900GB “Collection #1-5” password leaks with R
This post shows how to process gigabytes of unstructured data with the Spark framework and using the R language.
3719
Detecting VPN (and its configuration) and proxy users on the server side
A lot of people use VPN every day. Somebody use it in always-on mode to circumvent government or corporative internet censorship, while…
3720
How I got tech support scammers infected with Locky
There’s been this debate for a while now, about AI being either the greatest or the worst or maybe the least interesting thing to happen to humanity so far. I have to say I’m not 100% sure where I land on this one myself. AI has empowered me to do things I had been putting off forever, multiplied my productivity and…