3451
Introducing 1Password for Teams
The ultimate password keeper for business, 1Password simplifies team security. Secure your company's data with our business password vault.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
3452
Google has indexed thousands of publicly accessible HP printers
A quick, well crafted Google search returns “About 86,800 results” for publically accessible HP printers.
3453
3454
3455
Oh-Auth – Abusing OAuth to take over millions of accounts
OAuth Account Takeover. Salt Labs shows how hackers could abuse OAuth to take over millions of accounts on Grammarly, Vidio, and Bukalapak.
3456
3457
3458
Taking over 60k spyware user accounts with SQL injection
Serverless means it's secure, right?
3459
OnionShare 2 adds anonymous dropboxes
After nearly a year of work from a growing community of developers, designers, and translators, I'm excited that OnionShare 2 is finally ready. You can download it from onionshare.org. OnionShare is an open source tool for securely and anonymously sending and receiving files using Tor onion services. It
3460
Cracking the Adventure Time cipher
I recently read “Adventure Time: Volume 1”, a comic book based on the smart animated series of the same name. In the comic, I found some odd looking messages at the …
3461
3462
Researchers exploit HTTP/2, WPA3 protocols to stage ‘timeless timing’ attacks
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
3463
To Know If the Election Was Hacked, Look at the Ballots
You may have read at NYMag that I’ve been in discussions with the Clinton campaign about whether it might wish to seek recounts in critical…
3464
What to do if you’re stopped by the police
When I was 5, I saw the Karate Kid. I saw that bad guys could beat me up, and I had no recourse if I didn't know karate. I promptly signed up for martial arts classes.
3465
Private and Public Mastodon
Here’s how to get into a lot of trouble: Suppose you (like me) love the intellectual wealth found in free-form text on the Internet. And (like me) are a reasonably competent programmer. And (like me) have derived value and pleasure searching Twitter. And (like me) you look at this nifty new Fediverse thing and see…
3466
How to turn off Apple Intelligence
Learn how to turn off Apple Intelligence on iPhone, iPad, or Mac. Asurion Experts show you step-by-step how to manage your Apple devices’ smart features.
3467
Google Safe Browsing incident
For approximately six hours on 25.9.2025, the entire statichost.eu domain was flagged as deceptive by Google Safe Search. This meant that anyone using Google Safe Search was shown a very aggressive warning or outright blocked when trying to access any site on the statichost.eu domain. In some cases even custom domains…
3468
The Moral Character of Cryptographic Work
Abstract: Cryptography rearranges power: it configures who can do what, from what. This makes cryptography an inherently political tool, and it confers on the field an intrinsically moral dimension. The Snowden revelations motivate a reassessment of the political and moral positioning of cryptography. They lead one to…
3469
Passwordless Authentication – Access Your Bitwarden Web Vault Without a Password
Logging into your Bitwarden vault just got easier! A new passwordless experience enables you to access your Bitwarden vault with another device.
3470
I Found a $90k Remote Code Execution Vulnerability in Google
A Flask cookie on developers.google.com was signed with a secret it carried inside itself. Pulling that secret out turned a forged session into code execution across Google's developer sites.
3471
Reasons to Prefer Blake3 over Sha256
This post is a copy of tweets by Zooko Wilcox-O'Hearn . SHA256 was designed by the NSA. BLAKE (the original) and BLAKE3 were designed by Jean-Philippe Aumasson
3472
Against risk-based authentication (or, why I wouldn't trust Google Cloud)
If you were deciding on whether to use AWS, Azure or Google Cloud for a production application, what factors would you use to make the decision? There are probably many such factors you might think of, but I'd like to point out one that probably isn't commonly considered: the relative trustworthiness of Google's…
3473
European Union dedicated questionnaire on the Encryption of Data
On both sides of Atlantic the debate around strong cryptography frequently resurfaces. Proponents of weakening cryptography or introduction of backdoors (or "golden keys") cite national security. Technologists and activists oppose such proposals, citing freedoms and cybersecurity. Regulating cryptography is of course…
3474
ZCash (formerly Zerocash/Zerocoin) technology preview
I’m extremely happy to announce the Zcash project. Zcash (formerly “Zerocash”/“Zerocoin”) is a project to create a new currency for the Internet, inspired by Bitcoin. Bitcoin is an amazing and complex…
3475
3476
If you care about user privacy, don’t use Facebook JavaScript SDK
With email aliases , you can be anonymous online and protect your inbox against spams and phishing.
3477
The Need for a Digital Geneva Convention
YouTube Video
3478
I exploited TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain (2018)
The original research reports on security issues found in ACME TLS-SNI-01 which caused Let's Encypt to sunset it.
3479
3480
Xerox Alto zero-day: cracking disk password protection on a 45 year old system
We've been archiving a bunch of old Xerox Alto disk packs from the 1970s. A few of them turned out to be password-protected, so I needed ...