3121
Full third-party cookie blocking and more
This blog post covers several enhancements to Intelligent Tracking Prevention (ITP) in iOS and iPadOS 13.4 and Safari 13.1 on macOS to address our latest discoveries in the industry around tracking.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
3122
3123
If you care about security you might want to move the iPhone Camera app
There's a quirk in the iPhone Camera app that can drive a security conscious iPhone owner crazy: if you touch your finger on the Camera app ...
3124
Gitlab Critical Security Release
GitLab release announcements and feature highlights.
3125
Hackers Breached Virginia Bank Twice in Eight Months, Stole $2.4M
Hackers used phishing emails to break into a Virginia bank in two separate cyber intrusions over an eight-month period, making off with more than $2.4 million total. Now the financial institution is suing its insurance provider for refusing to fully cover the losses.
3126
Target's EasySweep – Simplifying Skimmer Detection
An article by Anonymous : Target's patented EasySweep device protects guests' data from skimmers.
3127
MongoBleed Explained Simply
CVE-2025-14847 allows attackers to read any arbitrary data from the database's heap memory. It affects all MongoDB versions since 2017, here's a simple explanation:
3128
Security advisory: Breach and Django
Posted by Jacob Kaplan-Moss on Aug. 6, 2013
3129
AI browser extensions are a security nightmare
AI-powered browser extensions come with alarming security risks, but most companies still don't have policies for how their employees can use them.
3130
China issues new encryption import control
On November 2, 2021, Ministry of Commerce of China (“MOFCOM”) officially released the revised Catalogue of Technologies Subject to Import Prohibition and Restriction (“Technology Catalogue”), effective immediately, which identifies, among others, foreign “data encryption technology employing a key length greater than…
3131
Bitwarden second security audit report
Bitwarden will continue to uphold high cybersecurity standards through annual third-party security audits of the Bitwarden product and service.
3132
Some new snippets from the Snowden documents
A weblog about Signals Intelligence, Communications Security and top level telecommunications equipment
3133
Tracking my phone's silent connections
FOSS and life. Kushal Das talks here.
3134
The embedded YouTube player told me what you were watching
David Schütz's bug bounty writeups
3135
A Recycled IP Address Caused Me to Pirate Books by Accident
Let me tell you a story on how a subdomain of mine managed to serve 390,000+ PDF books without any of my servers being compromised.
3136
Firefox 90 supports Fetch Metadata Request Headers
We are pleased to announce that Firefox 90 will support Fetch Metadata Request Headers which allows web applications to protect themselves and their users against various cross-origin threats like ...
3137
Analysing the alleged Minneapolis police department “hack”
The situation in Minneapolis at the moment (and many other places in the US) following George Floyd's death [https://en.wikipedia.org/wiki/Death_of_George_Floyd] is, I think it's fair to say, extremely volatile. I wouldn't even know where to begin commentary on that, but
3138
Sustaining Digital Certificate Security
Posted by Ryan Sleevi, Software Engineer This post updates our previous notification of a misissued certificate for google.com Followin...
3139
How to hide your IP address
A field guide to VPNs, proxies, and traffic relaying
3140
How to Bypass Cloudflare: A Comprehensive Guide
Learn the best hands-on techniques to bypass Cloudflare Bot Management. Understand how it works, its sensor data, and evade detection.
3141
FORCEDENTRY: Sandbox Escape
Posted by Ian Beer & Samuel Groß of Google Project Zero We want to thank Citizen...
3142
An Open Letter to Members of the W3C Advisory Committee
Dear member of the World Wide Web Consortium's Advisory Committee, You may have heard that over the past year we've been trying to insert legal safeguards into the Encrypted Media Extensions project at the W3C, which standardizes streaming video DRM. We've previously been opposed to the W3C...
3143
3144
Two vulnerabilities in Zoom could lead to code execution
A member of Cisco Talos discovered this vulnerability. Cisco Talos recently discovered two vulnerabilities in the popular Zoom video chatting application that could allow a malicious user to execute arbitrary code on victims’ machines. Video conferencing software has skyrocketed in popularity during the COVID-19…
3145
JWT is Awesome
Here’s my take on JWT* and why I think it’s amazing, after having migrated hundreds of applications in JP Morgan from a legacy authentication solution. *JWT = JSON Web Token 1) Pro: JWT…
3146
3147
Breaking RSA with a quantum computer?
A group of Chinese researchers have just published a paper claiming that they can—although they have not yet done so—break 2048-bit RSA. This is something to take seriously. It might not be correct, but it’s not obviously wrong. We have long known from Shor’s algorithm that factoring with a quantum computer is easy…
3148
Browser in the Browser (BITB) Attack
Providing security research and red team techniques
3149
Codex Hacked a Samsung TV
We gave Codex a foothold. It popped a root shell.
3150
Intel Security Issue Update: Addressing Reboot Issues
Intel Newsroom delivers the latest news, announcements, and updates. Stay informed on Intel innovations.