271
Cryptographic coin flipping, now in Keybase
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 579 posts.
272
New Tools for Detecting HTTPS Interception
The practice of HTTPS interception continues to be commonplace on the Internet. This blog post discusses types of monster-in-the-middle devices and software, and how to detect them.
273
Preventing Tracking Prevention Tracking
This blog post covers enhancements to Intelligent Tracking Prevention (ITP) included in Safari on iOS and iPadOS 13.3, Safari 13.0.4 on macOS Catalina, Mojave, and High Sierra.
274
DNS Wars
NANOG is now quite an institution in the Internet, particularly in the North American Internet community. It was an offshoot of the Regional Techs meetings, which were part of the NSFNET framework of the late 80s and early 90s. NANOG has thrived since then and is certainly one of the major network operational forums…
275
Clarifying ProtonMail and Huawei
Proton Mail official clarification about Huawei partnership.
276
Authentication and the Have I Been Pwned API
The very first feature I added to Have I Been Pwned after I launched it back in December 2013 was the public API [https://www.troyhunt.com/have-i-been-pwned-you-can-now-ask-api/]. My thinking at the time was that it would make the data more easily
277
278
PayPal's Beautiful Demonstration of Extended Validation FUD
Sometimes the discussion around extended validation certificates (EV) feels a little like flogging a dead horse. In fact, it was only September that I proposed EV certificates are already dead [https://www.troyhunt.com/extended-validation-certificates-are-dead/] for all sorts of good reasons that have only been…
279
Jerks on the Internet: what my first DDoS taught me
Ambitious software engineer
280
AMD Responds to WSJ ‘Keys to the Kingdom’ Story
A AMD oferece soluções de computação adaptativa e de alto desempenho de liderança para promover IA de data center, PCs com IA, dispositivos de borda inteligentes, jogos e muito mais.
281
The iPhone 11 Pro’s Location Data Puzzler
One of the more curious behaviors of Apple’s new iPhone 11 Pro is that it intermittently seeks the user’s location information even when all applications and system services on the phone are individually set to never request this data. Apple says this is by design, but that response seems at odds with the company’s…
282
GitHub Supports Web Authentication (WebAuthn) for Security Keys
The WebAuthn standard for security keys is making authentication as easy as possible. Now you can use security keys for second-factor authentication on GitHub with many more browsers and devices.
283
284
Capital One attacker may have breached other major corporations
Federal prosecutors this week charged a Seattle woman with stealing data from more than 100 million credit applications made with Capital One Financial Corp . Incredibly, much of this breach played out publicly over several months on social media and other open online platforms. What follows is a closer look at the…
285
Centralised DoH is bad for privacy
Recently, Mozilla announced it would be moving Firefox DNS lookups to Cloudflare by default, for its American audience.
286
Web Scraping and Crawling Are Perfectly Legal, Right? (2017)
In this post, you'll find out more on the legal aspect of web scraping and crawling, and what possible consequences you might face.
287
288
Who Owns Your Wireless Service? Crooks Do
Incessantly annoying and fraudulent robocalls. Corrupt wireless company employees taking hundreds of thousands of dollars in bribes to unlock and hijack mobile phone service. Wireless providers selling real-time customer location data, despite repeated promises to the contrary. A noticeable uptick in SIM-swapping…
289
290
DHS Asserting Unconstitutional Authority to Search Travelers’ Phones and Laptops
BOSTON — The Electronic Frontier Foundation (EFF) and the ACLU today asked a federal court to rule without trial that the Department of Homeland Security violates the First and Fourth Amendments by searching travelers’ smartphones and laptops at airports and other U.S. ports of entry without a...
291
ISPs in AU and NZ start censoring the internet without legal precedent
Several websites including Voat, ZeroHedge, Archive.is, LiveLeak, and others have been blocked in Australia and New Zealand in direct contravention to
292
ProtonMail now offers elliptic curve cryptography
Proton Mail has become the first and only encrypted email provider to support elliptic curve cryptography (ECC), providing more security and performance.
293
Everything you ever wanted to know about building a secure password reset (2012)
This content is now available in the Pluralsight course "Secure Account Management Fundamentals" [http://www.pluralsight.com/courses/secure-account-management-fundamentals] Recently I’ve had a couple of opportunities to think again about how a secure password reset function should operate, firstly whilst building this…
294
Scaring People into Supporting Backdoors
Back in 1998, Tim May warned us of the “Four Horsemen of the Infocalypse”: “terrorists, pedophiles, drug dealers, and money launderers.” I tended to cast it slightly differently. This is me from 2005: Beware the Four Horsemen of the Information Apocalypse: terrorists, drug dealers, kidnappers, and child pornographers…
295
Breach at IT Outsourcing Giant Wipro
Indian information technology (IT) outsourcing and consulting giant Wipro Ltd. [ NYSE:WIT ] is investigating reports that its own IT systems have been hacked and are being used to launch attacks against some of the company’s customers, multiple sources tell KrebsOnSecurity. Wipro has refused to respond to questions…
296
Privacy-Preserving Ad Click Attribution for the Web
A typical website is made of numerous components coming from a wide variety of sources.
297
CCPA Will Hit Dev Teams Harder Than GDPR
CCPA impacts dev teams more than GDPR. Learn who must comply, what data is covered, and how to protect test data safely.
298
Aren't AMP Caches committing copyright infringement?
How can mass-copying pages from web publishers without a license not be mass-copyright infringement? The weird copyright law exemption that enables AMP Caches.
299
Your Android Phone Is a Security Key
Now, your phone running Android 7+ can be your security key, protecting you against phishing. Use it to protect your personal and work Google Accounts.
300
Setting Up an Ad-Blocking VPN with WireGuard and Pihole
This guide will walk you through the setup of a remote machine that will act as a personal VPN server at the cost of 3 to 5 USD per month. We will also configure it to act as a DNS resolver that will automatically block spam, tracking, advertising and malware domains on all of your connected devices.