1261
Reversing Safeway's private APIs to automate coupon collection
Reverse-engineering Safeway's coupon APIs to automate adding digital offers to an account.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,333 posts.
1262
Missouri governor’s office responsible for teacher data leak
Missouri Governor Mike Parson made headlines last year when he vowed to criminally prosecute a journalist for reporting a security flaw in a state website that exposed personal information of more than 100,000 teachers. But Missouri prosecutors now say they will not pursue charges following revelations that the data…
1263
Forging signed commits on GitHub
Creating fake signed commits
1264
1265
Twitter's Secret “Guest Mode”
Twitter has an undocumented feature which lets you follow accounts without being logged in. Here's how I found it, and how you can use it. My crappy old TV has a crappy old web browser on it. One boring Sunday, I decided to see which websites worked and which didn't on a 6 year old browser. Anything using LetsEncrypt…
1266
How Popular Is “Sign in with Apple”?
Link to: https://benpackard.github.io/blog/2020-01-28-sign-in-with-apple/
1267
Subscription bombing and how to mitigate it
How bots used our sign-up and forgot password pages to bomb real people's inboxes, and what we did to stop it. A practical guide to subscription bombing for founders and developers who think CAPTCHA is an "I'll do it later" task.
1268
Freenom, the free domains website, is a scam
Self-taught developer. Go, Rust, Python and Javascript. - hackermondev
1269
Google disables SSL search at BT’s request
Update – Since this was posted, Max Allan and Damion Yates have investigated further and found that BT are intercepting DNS queries and replying with doctored DNS results, which I didn’…
1270
Quantum Computers Are Not a Threat to 128-Bit Symmetric Keys
There is no need to update symmetric key sizes as part of the post-quantum transition, due to the details of how Grover's algorithm scales. Most authorities agree.
1271
Reverse engineering software licensing from early-2000s abandonware
This series concerns a software licensing system used in a proprietary software application from circa 2004. The software was available in an unregistered trial mode with limited functionality. A free licence could be obtained by registering online with the software vendor. The software became abandonware circa 2009…
1272
Using Ghidra to Reverse Engineer Super Monkey Ball for GameCube
In Part 1, we used Dolphin’s debugger to find the location of Player 1’s score in RAM . In this article, our goal is to hack the score calculation routine so that the bonus goals do not award so many points.
1273
Privacy is ok
I hate to write a piece just saying Someone Is Wrong On The Internet. But Reid Blackman’s The Signal App and the Danger of Privacy at All Costs (in the NYTimes , forsooth) is not just wrong but dangerously misleading. I haven’t seen a compact explainer on why, so here goes.
1274
Google Joins Apple to Opt-out of Mobile Advertising IDs
Android 12 makes interest-based advertising obsolete to set off an irreversible collapse in Facebook’s ad ecosystem
1275
OpenID Connect specifications published as ISO standards
I’m thrilled to report that the OpenID Connect specifications have now been published as ISO/IEC standards. They are:
1276
Hacker, Hack Thyself
We’ve read so many sad stories about communities that were fatally compromised or destroyed due to security exploits. We took that lesson to heart when we founded the Discourse project; we endeavor to build open source software that is secure and safe for communities by default, even if there
1277
1278
1279
The patent troll that won a $308M jury trial against Apple
*If you’re the owner of this website and have questions, reach out to Bluehost. We’re happy to help.
1280
1281
FBI Agents Visit Anti-ICE Protester: "Your name was brought up."
“Your name was brought up.”
1282
What3Words – The Algorithm
What3Words is a widely promoted system that is used for sharing a location using just three words. For example, ///wedge.drill.mess is located in Hyde Park.The globe is divided into 3m squares, eac…
1283
Pin-pointing China's attack against GitHub
For the past week, the website "GitHub" has been under attack by China. In this post, I pin-point where the attack is coming from by doing a...
1284
Early Impacts of Let's Encrypt
During the months I worked in Let's Encrypt's operations team I got fairly used to being the go-to man for any question that a database query could solve.…
1285
Mozilla and Opera remove Avast extensions from their add-on stores
The Avast extensions which were spying on their users are no longer available from Mozilla and Opera add-on stores. Google still has to take action.
1286
Explain like I’m 5: Kerberos (2013)
Explain like I’m 5 years old: Kerberos – what is Kerberos, and why should I care?
1287
1288
De-Googling: My Progress
I wrote a bit about my reasoning to De-Google here . Now I want to write a bit about my progress, the struggles and what I ended up with.
1289
ProtonMail Voluntarily Offers Assistance for Real-Time Surveillance?
Proton Mail disputed some of the content of the post originally published at this location. We will continue the discussion directly with Proton Mail, in particular at a meeting in …
1290
Why Searching Through 500M Pwned Passwords Is So Quick
In the immortal words of Ricky Bobby, I wanna go fast [https://www.youtube.com/watch?v=_qJGsSuFRIg]. When I launched Pwned Passwords V2 last week [https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/], I made it fast - real fast - and I want to talk briefly here