301
Update on campaign targeting security researchers
An update on a hacking campaign targeting security researchers.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 678 posts.
302
Microsoft Patches Six Zero-Day Security Holes
Microsoft today released another round of security updates for Windows operating systems and supported software, including fixes for six zero-day bugs that malicious hackers already are exploiting in active attacks.
303
An EPYC escape: Case-study of a KVM breakout
Posted by Felix Wilhelm, Project ZeroIntroduction KVM (for Kernel-based Virtual Machine) is the ...
304
Rally, a novel privacy-first data sharing platform
Mozilla teams up with Princeton University researchers to enable crowdsourced science for public good; collaborates with research groups at Princeton, Stan
305
International coalition calls for action against surveillance-based advertising
Groups in Europe and U.S. ask for action to end practices that threaten citizens’ rights.
306
NATO Classified Cloud Platform Compromised
Hackers attempted to use the data in an extortion scheme, joking about altering the source code or sending it to Russian intelligence
307
308
309
310
CVE-2021-3011: Key recovery on Google Titan Key
Download the Writeup Illustration made by Romain Flamand Abstract The Google Titan Security Key is a FIDO U2F hardware device proposed by Google (available since July 2018) as a two-factor authentication token to sign in to applications (e.g. your Google account). Our work describes a side-channel attack that targets…
311
How does one get hired by a top cybercrime gang?
The U.S. Department of Justice (DOJ) last week announced the arrest of a 55-year-old Latvian woman who’s alleged to have worked as a programmer for Trickbot , a malware-as-a-service platform responsible for infecting millions of computers and seeding many of those systems with ransomware.
312
313
macOS 11’s hidden security improvements
A deep dive into macOS 11's internals reveals some security surprises that deserve to be more widely known.
314
New campaign targeting security researchers
Details on an ongoing campaign, which we attribute to a government-backed entity based in North Korea, targeting security researchers working on vulnerability research a…
315
Scanning your iPhone for Pegasus
Scan your iPhone for NSO Group's Pegasus malware using Mobile Verification Toolkit (MVT) by Amnesty International
316
How Iran Uses Bitcoin Mining to Evade Sanctions and “Export” Oil
The US imposes an almost total economic embargo on Iran, including a ban on all Iranian imports and sanctions on Iranian financial institutions.
317
Van Buren is a victory against overbroad interpretations of the CFAA
The Supreme Court’s Van Buren decision today overturned a dangerous precedent and clarified the notoriously ambiguous meaning of “exceeding authorized access” in the Computer Fraud and Abuse Act, the federal computer crime law that’s been misused to prosecute beneficial and important online...
318
319
Browser Fuzzing at Mozilla
Mozilla has been fuzzing Firefox for a while. It has proven to be one of the most efficient ways to identify quality and security issues.
320
Mozilla rolls out DoH to Canadian users of Firefox
CIRA Joins Firefox’s Trusted Recursive Resolver Program In a few weeks, Firefox will start the by-default rollout of DNS over HTTPS (or DoH for short) to
321
The Fraud Supply Chain
Fraud is largely conducted by professionals operating in specialized firms, which have their own ecosystem of evil.
322
Avoid Consumer Routers
Consumer Routers are not secure
323
Preparing Rustls for Wider Adoption
It’s time for the Internet to move on to more secure software, and that’s why our Memory Safety Initiative is coordinating work to make further improvements to the Rustls TLS library.
324
EFF's reply to cease-&-desist letter – “Virtual Coachella” parody video
eff_ltr_to_rico_mgmt_re_krazam_llc.pdf
325
326
Your face is not a bar code: arguments against automatic face recognition (2001)
An abridged version of this article appeared in Whole Earth 106, Winter 2001, pages 74-77.
327
Claude Shannon: The Mathematical Theory of Cryptography
The foundation of modern cryptography.
328
Autofill in password managers can allow login credentials to be stolen
Security Researcher | Ethical Hacker | Web Application Security
329
Guide to Firefox Containers (2018)
Containers allow for cookies (a small file used for storing information) as well as other relevant files to be isolated either independently or collectively as a group (for example you could have a finance container). Isolating cookies inside of containers prevents other sites from being able to access them, thus…
330
A deeper dive into our May 2019 security incident
We take a detailed look at a hacking incident that gave a user unauthorized access to our code and data.