31
The unexpected Google wide domain check bypass
David Schütz's bug bounty writeups
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 293 posts.
32
How to contact Google SRE by dropping a shell in Cloud SQL
Note: The vulnerabilities that are discussed in this post were patched quickly and properly by Google. We support responsible disclosure. The research that resulted in this post was done by me and …
33
U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise
Communications at the U.S. Treasury and Commerce Departments were reportedly compromised by a supply chain attack on SolarWinds , a security vendor that helps the federal government and a range of Fortune 500 companies monitor the health of their IT networks. Given the breadth of the company’s customer base, experts…
34
Please stop using CDNs for external JavaScript libraries
I want to discuss a (minor) antipattern that I think is (slightly) harmful. Lots of websites use large Javascript libraries. They often include them by using a 3rd party Content Delivery Network like so: Copied HTML to 📋⧉ HTML<script src="https://cdn.example.com/js/library-v1.2.3.js"></script> There are, supposedly, a…
35
Does Apple really log every app you run? A technical look
Apple’s launch of macOS Big Sur was almost immediately followed by server issues which prevented users from running third-party apps on their computers. While a workaround was soon found by people on Twitter, others raised some privacy concerns related to that issue.
36
macOS has checked app signatures online for over 2 years
Why does it take 2 years to realise that macOS has been checking signing certificate validity online?
37
The Brave web browser is hijacking links, and inserting affiliate codes
How does this keep happening? It is a mystery.
38
‘War Dialing’ tool exposes Zoom’s password problems
As the Coronavirus pandemic continues to force people to work from home, countless companies are now holding daily meetings using videoconferencing services from Zoom . But without the protection of a password, there’s a decent chance your next Zoom meeting could be “Zoom bombed” — attended or disrupted by someone who…
39
Ok Google: please publish your DKIM secret keys
The Internet is a dangerous place in the best of times. Sometimes Internet engineers find ways to mitigate the worst of these threats, and sometimes they fail. Every now and then, however, a major …
40
Dorking: the use of search engines to find very specific data
tl;dr: Use advanced Google Search to find any webpage, emails, info, or secrets cost: $0 time: 2 minutes Software engineers have long joked about how much of their job is simply Googling things Now you can do the same, but for free Below, I'll cover dorking, the use of …
41
What would you do if you lost your Google account?
What happens when you forget your password or loose your phone? What Google wants to know to validate your identity?
42
NAT Slipstreaming
exploit NAT/firewalls to access TCP/UDP services bound to any system behind victim's NAT
43
44
72% of smart TVs and 46% of game consoles hardcode DNS settings
Welcome Hacker News readers!• Thank you to M. Hammad Mazhar for his research that inspired this guide.• @healyio made some great additional suggestions in th...
45
Kindle collects a surprisingly large amount of data
Reading a book on a Kindle sends Amazon a lot of data about reading habits. How fast pages are turned, font sizes and views, and device details.
46
Why Johnny Won't Upgrade
Software distribution has over the years gone through an enormous revolution in efficiency. Originally, software was developed on things called ‘plug boards’, a matrix of sockets that allowed quick (or so they thought) re-configuration of computing hardware to adapt it to different problems. This was soon followed by…
47
Project Svalbard, Have I Been Pwned and its ongoing independence
This is going to be a lengthy blog post so let me use this opening paragraph as a summary of where Project Svalbard is at: Have I Been Pwned is no longer being sold and I will continue running it independently. After 11 months of a very intensive process culminating
48
Hackers Were Inside Citrix for Five Months
Networking software giant Citrix Systems says malicious hackers were inside its networks for five months between 2018 and 2019, making off with personal and financial data on company employees, contractors, interns, job candidates and their dependents. The disclosure comes almost a year after Citrix acknowledged that…
49
The radix 2^51 trick (2017)
Starting from the “ones” position, we add 6 + 6 = 12, write down a 2 and carry a 1. We proceed to the left, one position at a time, until there are no more digits to add.
50
Stealing secrets from developers using WebSockets
This is a story of a convoluted, not-very-useful method for extracting codez from unwitting JavaScript developers working on top secret…
51
Pressing YubiKeys
If you work in tech, you probably have a YubiKey. I have this one, the YubiKey 5C Nano:
52
The Original Cookie specification from 1997 was GDPR compliant (2019)
Baekdal is your premium site for media reports and trend analysis. Subscribe from €7.55/month
53
‘BlueLeaks’ Exposes Files from Hundreds of Police Departments
Hundreds of thousands of potentially sensitive files from police departments across the United States were leaked online last week. The collection, dubbed “ BlueLeaks ” and made searchable online, stems from a security breach at a Texas web design and hosting company that maintains a number of state law enforcement…
54
55
InstaHide Disappointingly Wins Bell Labs Prize, 2nd Place
[What follows are my thoughts on some recent research in machine learning privacy. These are my thoughts, and do not represent those of others.]
56
Reverse engineering a camera protocol for fun and profit
Way back in late 2019 , I dissected a Reolink B800 IP camera to demonstrate the various parts of an embedded Linux system. It’s fairly nice hardware, actually—it has a 4K video sensor, a microphone, power over Ethernet, and is nominally waterproof. And yes, it runs Linux.
57
eBay is port scanning visitors to their website
Websites are scanning for open ports on your PC to help fight fraud, but this data also flows into a massive, global tracking database.
58
Microsoft buys corp.com so bad guys can’t
In February, KrebsOnSecurity told the story of a private citizen auctioning off the dangerous domain corp.com for the starting price of $1.7 million . Domain experts called corp.com dangerous because years of testing showed whoever wields it would have access to an unending stream of passwords, email and other…
59
FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals
On Monday, Oct. 26, KrebsOnSecurity began following up on a tip from a reliable source that an aggressive Russian cybercriminal gang known for deploying ransomware was preparing to disrupt information technology systems at hundreds of hospitals, clinics and medical care facilities across the United States. Today…
60
On Liberating My Smartwatch from Cloud Services
I’ve often said that if we convince ourselves that technology is magic, we risk becoming hostages to it . Just recently, I had a brush with this fate, but happily, I was saved by open source.