3571
Bypassing website anti-scraping protections
Apify help & support
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
3572
Tailnet Lock
Use this article learn how to decide who to trust when it comes to your tailnet’s coordination server and how nodes are added to your tailnet.
3573
Reducing Adobe Flash Usage in Firefox
Browser plugins, especially Flash, have enabled some of our favorite experiences on the Web, including videos and interactive content. But plugins often introduce stability, performance, and security issues for browsers. ...
3574
Important Notice Regarding Public Availability of Stable Patches
grsecurity is the only drop-in Linux kernel replacement offering high-performance, state-of-the-art exploit prevention against both known and unknown threats.
3575
The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy
In this post we look under the hood of BrightData's SDK and how it turns ordinary consumer TVs into exit nodes of an enormous commercial, residential proxy network leveraged by the AI industry to scrape web data and train language learning models.
3576
How I bypassed Cloudflare's SQL Injection filter
astrocamel, Blog, Portfolio, George Skouroupathis
3577
Data exfiltration from Writer.com with indirect prompt injection
Authors: PromptArmor and Kai Greshake
3578
Things you must know before you can understand Meltdown as a developer
Meltdown is a cache-timing attack on Intel CPUs that allows all memory to be read by any process because of how they do Speculative Execution.
3579
New campaign targeting security researchers
Details on an ongoing campaign, which we attribute to a government-backed entity based in North Korea, targeting security researchers working on vulnerability research a…
3580
Hardening macOS
Quick and easy guide for securing macOS systems, for both laymen and security enthusiasts. Last updated for Golden Gate.
3581
Run your own OAuth2 server
Run a free OAuth2 Server and OpenID Connect (OIDC) server using open source software in under 10 minutes, and become an OAuth2 provider like Google.
3582
Tales of SugarCRM Security Horrors
This is the personal website of Egidio Romano, a very curious guy from Sicily, Italy. He's a computer security enthusiast, particularly addicted to webapp security.
3583
Internet Censorship Bill Could Spell Disaster for Speech and Innovation
There’s a new bill in Congress that would threaten your right to free expression online. If that weren’t enough, it could also put small Internet businesses in danger of catastrophic litigation. Don’t let its name fool you: the Stop Enabling Sex Traffickers Act (SESTA, S. 1693) wouldn’t help punish...
3584
Exploiting aCropalypse: Recovering truncated PNGs
This article assumes you’ve already heard about the aCropalypse vulnerability, aka CVE-2023-21036. If not, go read about it here (oops, this page doesn't exist yet. Read this tweet in the meantime).
3585
Capturing the Flag with GPT-4
This weekend I went to BSides SF 2023 and had a blast. I went to some really interesting talks (including an excellent one about adversarial machine learning), but mostly I spent my time solving CTF hacking challenges. And this time, I did it with the help of GPT-4, the
3586
Malware found in official gravityforms plugin indicating supply chain breach
Update 7-12-2025 06:00 UTC: We have observed some activity in regard to one of the backdoors that involves a gf_api_token parameter. The IP address 193.160.101.
3587
Update to Security Incident
Update (May 23, 2019) : The affected 184 public network users have been notified via email.
3588
CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
Get details on our discovery of a critical vulnerability in GitHub Copilot Chat.
3589
Firefox turns on DoH as default for US users
Today, Firefox began the rollout of encrypted DNS over HTTPS (DoH) by default for US-based users. The rollout will continue over the next few weeks to conf
3590
Privacy preserving attribution for advertising
Advertising provides critical support for the Web. We’ve been looking to apply privacy preserving advertising technology to the attribution problem, so t
3591
The Fining of Black America
We analyzed the cities most likely to generate substantial revenues from fines. The best indicator that a government will levy excessive fines? If a large proportion of the city's citizens are Black.
3592
The Impending Doom of Expiring Root CAs and Legacy Clients
Regular readers will know that I'm very active in the CA / PKI space and even deliver a 2-day advanced training course [https://www.feistyduck.com/training/the-best-ssl-and-tls-training-in-the-world] on the topic. Over the last year or so I've been watching
3593
Yubikey with USB-C
Learn more about what's happening within the tech and cybersecurity industry and the developments in our business and security keys within our Yubico Blog.
3594
3595
From Markdown to remote code execution in Atom
Recently I took a look at Atom, a text editor by GitHub. With a little bit of work, I was able to chain multiple vulnerabilities in Atom into an actual Remote Code Execution. The vulnerabiliti…
3596
Analyzing iOS 16 Lockdown Mode: Browser Features and Performance
Another year, another Apple iOS/iPadOS/MacOS release, right? But shortly before the iOS 16 betas dropped, Apple made an interesting announcement.
3597
Unexpected security footguns in Go's parsers
File parsers in Go contain unexpected behaviors that can lead to serious security vulnerabilities. This post examines how JSON, XML, and YAML parsers in Go handle edge cases in ways that have repeatedly resulted in high-impact security issues in production systems. We explore three real-world attack scenarios…
3598
3599
3600
Someone attacked our company
At the start of November, someone decided that they would try to attack and destroy our company. Here’s how we stopped them.