691
Court found NSA surveillance unconstitutional in 2011
It turns out that Foreign Intelligence Surveillance Court in 2011 found that the NSA's surveillance under the FISA Amendments Act to be unco...
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,333 posts.
692
Recall: Stealing everything you've ever typed or viewed on your own Windows PC
Photographic memory comes to Windows, and is the biggest security setback in a decade.
693
‘ELITE’: The Palantir app ICE uses to find neighborhoods to raid
"Internal ICE material and testimony from an official obtained by 404 Media provides the clearest link yet between the technological infrastructure Palantir is building for ICE and the agency’s activities on the ground."
694
Zero click vulnerability in Apple’s macOS Mail
Zero-Click Zip TL;DR
695
How I could have hacked any Facebook account
Note: This is being published with the permission of Facebook under the responsible disclosure policy. The vulnerability is now fixed. ...
696
Don't be evil: Moving everything off of Google
Wherein I move many of my internet services away from Google Apps.
697
Bitwarden PINs can be brute-forced
Video showing bitwarden. User then sets the pin 2345. The vault is locked and then bitwarden is quit. In the terminal the exploit program is run, which after a short while outputs the PIN 2345.
698
Passwords Evolved: Authentication Guidance for the Modern Era
In the beginning, things were simple: you had two strings (a username and a password) and if someone knew both of them, they could log in. Easy. But the ecosystem in which they were used was simple too, for example in MIT's Time-Sharing Computer [https://www.wired.com/
699
HTML5 localStorage allows sites to fill up users' hard disks
Use HTML5 localStorage to completely fill up Chrome, Safari, and IE users hard disks. Trololo...
700
What’s interesting about the Florida water system hack is that we heard about it
Stories about computer security tend to go viral when they bridge the vast divide between geeks and luddites, and this week’s news about a hacker who tried to poison a Florida town’s water supply was understandably front-page material. But for security nerds who’ve been warning about this sort of thing for ages, the…
701
Amazon Echo Flex: Microphone mute button appears to be real and functional
Teardown and analysis of electronics. Integrated circuit design analysis.
702
703
704
Attacking UNIX Systems via CUPS
Hello friends, this is the first of two, possibly three (if and when I have time to finish the Windows research) writeups. We will start with targeting GNU/Lin…
705
How I advertise malicious software on Google Ads
A caller phones Radio Erywan. “Is it true that in Moscow, on Red Square, they give out cars?” “True. Not in Moscow, however, but in St. Petersburg. Not on Red Square, but on Revolution Square. Not cars, but bikes. And they don’t give them out, but steal them”. Edit: Through the apparent magic of Hacker News, my Google…
706
707
It's Way Too Easy to Get a .gov Domain Name
Many readers probably believe they can trust links and emails coming from U.S. federal government domain names, or else assume there are at least more stringent verification requirements involved in obtaining a .gov domain versus a commercial one ending in .com or .org. But a recent experience suggests this trust may…
708
Jwz: Google's pseudonym support "obvious bullshit"
In a shamefully credulous statement, they say: Proponents of pseudonymity scored a major victory today, when Google executive Vic Gundotra revealed at the Web 2.0 Summit that social networking service Google+ will begin supporting pseudonyms and other types of identity. According to Mashable, Google+ will be "adding…
709
710
711
Apple Passwords’ generated strong password format
This post briefly summarizes part of a talk I gave in 2018. All information in this post has been accessible on YouTube since then. There is no new information or news in this post. On Mastodon recently, jsveningsson@mastodon.social asked me: Having an annoying argument on Threads about Apple generated passwords…
712
I was seven words away from being spear-phished
Three weeks ago I received a very flattering email from the University of Cambridge, asking me to judge the Adam Smith Prize for Economics:
713
Microsoft Put Off Fixing Zero Day for 2 Years
A security flaw in the way Microsoft Windows guards users against malicious files was actively exploited in malware attacks for two years before last week, when Microsoft finally issued a software update to correct the problem.
714
Simulating the PIN cracking scene in Terminator 2
In the beginning of Terminator 2: Judgement Day, John Connor uses a laptop to crack the PIN of a stolen debit card.
715
Timeline of the OpenAI accidental attack against Hugging Face
OpenAI gave a last-minute presentation at the Black Hat security on Wednesday about “the Hugging Face Incident” (previously on this blog). The video was published yesterday. It’s short and information …
716
717
718
VPN leaks users’ IPs via WebRTC
VPN leaks users’ IPs via WebRTC: I’ve tested hundred VPN and Proxy providers and 19 of them leaks users’ IPs via WebRTC (16%)
719
Claude Code Found a Linux Vulnerability Hidden for 23 Years
Claude Code has gotten extremely good at finding security vulnerabilities, and this is only the beginning.
720
Privacy is the most important concept of our time
Privacy is more than the right of an individual to be left alone. It concerns the very fabric of society.