61
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 113 posts.
62
63
64
Secret iOS business; what you don’t know about your apps
In the beginning, there was the web and you accessed it though the browser and all was good. Stuff didn’t download until you clicked on something; you expected cookies to be tracking you and you always knew if HTTPS was being used. In general, the casual observer had a
65
66
Repairing Corrupted ZIP Files by Brute Force Scanning in C
My brother is a wonderful photographer , and took 14 gigabytes of photos at my recent graduation from Columbia, some of which I hope to post on PhotoFloat -- my web 2.0 photo gallery done right via static JSON & dynamic javascript .
67
68
69
Hackers Can Kill Diabetics w/ Insulin Pumps? Facts vs. Fear Mongering
UPDATE: Jay Radcliffe, the researcher discussed in this post, has emailed me, a ...
70
71
72
73
Undeletable Cookies
A couple of weeks ago Wired reported the discovery of a new, undeletable, web cookie: Researchers at U.C. Berkeley have discovered that some of the net’s most popular sites are using a tracking service that can’t be evaded—even when users block cookies, turn off storage in Flash, or use browsers’ “incognito”…
74
CNN, NYTimes, Mashable all vulnerable to XSS
Pretending innocence, I ask why all these high profile websites have their homepages covered in spinning images? CNN (screenshot) The New York Times (screenshot) Mashable (screenshot) Fox News (screenshot) Okay, obviously enough, I’m messing with them. But how can I do that? The answer is cross site scripting (“XSS”)…
75
76
77
78
79
80
81
Translation of Carrier IQ's Media Release
We Got Caught Doing Something We Were Kind of Hoping No One Would Notice and Now We’re Nervously Placing Exclamation Marks at the End of Our Media Alert Headlines!
82
Electronic Arts Hates Strong Passwords
EA does not allow passwords longer than 16 characters or passwords that contain symbols. However passwords like cool, pass and love are totally acceptable.
83
84
Neat trick for getting private info for Facebook, GMail, Twitter and Digg users
Hidden img and script tags with onload and onerror let any site tell if you're logged into GMail, Facebook, Twitter or Digg. Google called it expected.
85
Be careful what you put in an email
Posts about OMakase written by Om Malik
86
Bitcoin is Not Anonymous
TL;DR Bitcoin is not inherently anonymous. It may be possible to conduct transactions is such a way so as to obscure your identity, but, ...
87
The Final Answer For What To Do To Prevent Piracy [of Indie Games]
(For some reason, Blogger deleted this post. I have recreated it. Sorry for any comments that were lost.) This article is my decisive sta...
88
Hiding your data in plain sight: USB hardware hiding
This article will describe the possibility of hiding data in any kind of USB hardware. Even though USB data carriers come in various sizes and forms, which already sometimes makes them hard to recognize, this approach could even make it worse. Any USB device could be a data carrier and thus from a forensics point of…
89
Zero Day Vulnerability in many Wordpress Themes
Big News [April 24th, 2012]: I’ve launched Wordfence to permanently fix your WordPress site’s security issues. Read this now.
90