2401
Getting debug access on a Brother printer over Telnet
As it turns out, the Brother NC-8700w Command Console is more interesting than it first appears.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,335 posts.
2402
RTFM 0day in iOS apps
DIN INFO IP Adresse ( IPv4 eller IPv6) 104.165.132.197 Port: 47376 Hostnavn: 104.165.132.197 X-Forward IP Adresse(r): Browser (UserAgent): Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Forespørgsels Timestamp (Unix tid): 1793882617 Forespørgsels…
2403
How I could delete any video on YouTube
About Vulnerability Research Grants and a little story how I could delete any video on YouTube.
2404
2405
Evading Airport Security
The news is reporting about Evan Booth, who builds weaponry out of items you can buy after airport security. It’s clever stuff. It’s not new, though. People have been explaining how to evade airport security for years. Back in 2006, I—and others—explained how to print your own boarding pass and evade the photo-ID…
2406
Google Forcing Nest Cameras’ Visual Indicator Light To Be On
Google Forcing Nest Cameras Visual Indicator Light To Be On
2407
Remote Code Execution in Marvel Rivals Game
Reverse Engineering: I discovered a serious Remote Code Execution (RCE) vulnerability in a popular game that could let attackers run code on your PC. Watch how I found it, reported it, and what you can do to stay safe.
2408
Flurry of Calls Among Saudi Staff and Spy Coincided with 9/11 Hijackers’ Arrival
Future al Qaeda cleric Anwar al-Awlaki also connected
2409
500M Avira antivirus users introduced to cryptomining
Many readers were surprised to learn recently that the popular Norton 360 antivirus suite now ships with a program which lets customers make money mining virtual currency . But Norton 360 isn’t alone in this dubious endeavor: Avira antivirus — which has built a base of 500 million users worldwide largely by making the…
2410
How Ethereum can be stolen through DNS rebinding
The Post has been moved here
2411
2412
2413
OkCupid's “Removed” Visitor API
A blog about programming, the tech industry, and tech education.
2414
A peek into Reddit's anti-spam internals
How Reddit accidentally leaked its spamurai system.
2415
2416
Apple Has Begun Scanning Your Local Image Files Without Consent
Preface: I don’t use iCloud. I don’t use an Apple ID. I don’t use the Mac App Store. I don’t store photos in the macOS “Photos” application, even locally. I…
2417
Xcode constantly phones home
Building StopTheMadness Pro in Xcode is usually very fast, because my project doesn't use any Swift. It's a combination of Objective-C, which compiles much more quickly than Swift, and JavaScript, which doesn't need to be compiled. However, sometimes the builds were very slow for some strange reason. Checking the…
2418
Common LibreSSL porting mistakes
The other day I wrote an article discussing LibreSSL , and the common mistakes being made by those thinking they know how to port it to oth...
2419
SELinux bypasses
This post aims at giving an overview of what SELinux is, how it is implemented, and how to bypass it, from the point of view of Android kernel exploitation.
2420
2421
2422
RSA chief believed cryptographers’ warnings on Dual EC DRBG lacked merit (2014)
"When, last September, it became possible that concerns raised in 2007 might have merit as part of a strategy of exploitation, NIST as the...
2423
Zero Knowledge Proofs: An illustrated primer
One of the best things about modern cryptography is the beautiful terminology. You could start any number of punk bands (or Tumblrs) named after cryptography terms like ‘hard-core predicate&#…
2424
2425
Three ways formally verified code can go wrong in practice
"Correct" doesn't mean "correct" when correctly using "correct"
2426
Anonymous message to NATO
Greetings, members of NATO. We are Anonymous. In a recent publication, you have singled out Anonymous as a threat to “government and th...
2427
2428
Gone (Almost) Phishin'
This is a little embarrassing to share, but I’d rather someone else be able to spot a dangerous scam before they fall for it. So, here goes. One evening last month, my Apple Watch, iPhone, and Mac …
2429
8M GitHub profiles were leaked from GeekedIn's MongoDB
Let me make it crystal clear in the opening paragraph: this incident is not about any sort of security vulnerability on GitHub's behalf, rather it relates to a trove of data from their site which was inappropriately scraped and then inadvertently exposed due to a vulnerability in another service.
2430
I exploited existing YouTube videos with a fake Patreon profile
I am watching a lot of investing videos on youtube recently. I like to watch them while I eat, or they play in the background while I do something else. I…