3301
Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
Arti 1.0.0 is released and ready for download.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
3302
3303
Pervasive Monitoring Is an Attack
That’s the title of RFC 7258 , also known as BCP 188 (where BCP stands for “Best Current Practice”); it represents Internet Engineering Task Force consensus on the fact that many powerful well-funded entities feel it is appropriate to monitor people’s use of the Net, without telling those people. The consensus is…
3304
3305
KeePassXC 2.6.0 Released
KeePassXC Password Manager
3306
Temporary Cloudflare accounts for AI agents
The moment an agent needs to deploy something, it slams face-first into a wall built for humans. Today we're rolling out Temporary Accounts on Cloudflare Workers. Any agent can now run wrangler deploy — temporary and get a live Worker in seconds.
3307
Hotel Wifi JavaScript Injection
So I’m checking my blog on the hotel wifi, like ya do, and I notice something a little off with the style. There’s a dark colored bar at the top of the page that shouldn’t be there. That’s funny. Maybe a recent Firefox update changed how they treat CSS?
3308
3309
3310
Why Forcing Apple to Write and Sign Code Violates the First Amendment
EFF filed an amicus brief today in support of Apple's fight against a court order compelling the company to create specific software to enable the government to break into an iPhone. The brief is written on behalf of 46 prominent technologists, security researchers, and cryptographers who develop...
3311
3312
Cryptography is a science, not engineering
If we were still in the 1990s, I would agree with Thomas. 1990s cryptography was full of holes, and the best you could hope for was to know how your tools were broken so you could try to work around their deficiencies. This was a time when DES and RC4 were widely used, despite having well-known flaws. This was a time…
3313
Microsoft mishandling example.com
TL;DR: Since at least February 2020, Microsoft's Autodiscover service has incorrectly routed the IANA-reserved example.com to Sumitomo Electric Industries' mail servers at sei.co.jp , potentially sending test credentials there.
3314
CSRF in Doorkeeper OAuth2 gem
I read a post about CSRF on DigitalOcean (in Russian) by Sergey Belove . My first reaction was, obviously, how come ? DigitalOcean is not k...
3315
Slack's Google Drive App can share your private Docs and Drive files
In 2017, Slack launched a popular Google Drive integration that makes it easy to embed, share, and get notified about new items added to Google Drive, including files, images, docs, and more. We use it daily here at Kapwing, an online video editing startup, since we run internally on top
3316
3317
3318
Duck Duck Go: Illusion of Privacy (2013)
There have been several articles in the press recently about users flocking to DuckDuckGo in the wake of the recent NSA snooping revel...
3319
The Insecurity of Debian
The difference in security defaults between Debian and Red Hat.
3320
3321
Zoom Rolling Out End-to-End Encryption Offering
We’re excited to announce that starting next week Zoom’s E2EE offering will be available as a technical preview! Learn more
3322
MoreOnionsPorfavor: Onionize your website and take back the internet
Starting today, July 8th, the Tor Project is running a one month campaign called #MoreOnionsPorfavor to raise awareness about onion sites, that is, websites available over onion services. We recently released a feature called Onion-Location in Tor Browser that announces to users if a website has an onion site…
3323
Mitro Releases a New Free and Open Source Password Manager
Good security practices require us to use different passwords for most or all of the websites and services we interact with. For accounts of any significance, those also need to be strong passwords of one form or another. But if you combine those two requirements (one password per site, most or all...
3324
3325
A Tutorial on Anonymous Email Accounts
Tomorrow, as the Senate Judiciary Committee considers reforming the decades-old federal email privacy law, the personal Inboxes and love lives of senior military and intelligence figures may be on that august body's mind. When the FBI pored through the personal lives of CIA Director David Petraeus...
3326
NSO Group Hacked
NSO Group, the Israeli cyberweapons arms manufacturer behind the Pegasus spyware—used by authoritarian regimes around the world to spy on dissidents, journalists, human rights workers, and others—was hacked. Or, at least, an enormous trove of documents was leaked to journalists. There’s a lot to read out there…
3327
3328
Heap-overflowing Llama.cpp to RCE
Retr0's Threat Research
3329
StartEncrypt considered harmful today
Inzichten over cybersecurity trends, threat intelligence, compliance-updates en technische verdiepingen van het DEFION-team.
3330
S2n Is Now Handling 100 Percent of SSL Traffic for Amazon S3
In June 2015, we introduced s2n, an open-source implementation of the TLS encryption protocol, making the source code publicly available under the terms of the Apache Software License 2.0 from the s2n GitHub repository. One of the key benefits to s2n is far less code surface, with approximately 6,000 lines of code…