Topics /
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
At Signal, our goal is to build a reliable, secure, and private communication experience that is broadly accessible and simple to use. From the beginning, we’ve designed Signal so that your information is in your hands rather than ours.
Two months ago I have published a detailed survey of varioussecurity-related problems plaguing the Intel x86 platforms. While the picturepainted in the paper...
Security Researcher | Ethical Hacker | Web Application Security
Containers allow for cookies (a small file used for storing information) as well as other relevant files to be isolated either independently or collectively as a group (for example you could have a finance container). Isolating cookies inside of containers prevents other sites from being able to access them, thus…
EFF is launching a new extension for Firefox and Chrome called Privacy Badger. Privacy Badger automatically detects and blocks spying ads around the Web, and the invisible trackers that feed information to them. You can try it out today: Privacy Badger is EFF's answer to intrusive and objectionable...
Posted by Eric Grosse, VP Security Engineering We are constantly on the lookout for malicious activity on our systems, in particular attem...
Let’s talk about that thing nobody’s talking about. Let’s talk about a vulnerability that’s exposing 2018-2020 Macs while most are declining to act nor report about the matter. Oh, and did I mention it’s unpatchable?
At Open Whisper Systems, we’ve been developing open source “consumer-facing” software for the past four years. We want to share some of the things we’ve learned while doing it. As a software developer, I envy writers, musicians, and filmmakers. Unlike software, when they create something, it is...
The Turkey Blocks internet censorship watchdog has identified and verified that restrictions on the Tor anonymity network and Tor Browser are now in effect throughout Turkey. Our study indicates that service providers have successfully complied with a government ...
I really like Secure by Design. The key idea is that there is a big overlap between secure code and good software design. Code that is strict, clear and focused will be easier to reason about, and …
This isn’t phishing; it’s not even spear phishing. It’s laser-guided precision phishing: One of the leaked diplomatic cables referred to one attack via email on US officials who were on a trip in Copenhagen to debate issues surrounding climate change. “The message had the subject line ‘China and Climate Change’ and…
It’s super late at night on Thanksgiving weekend in Canada. I shouldn’t be thinking about weird internet drama, but here we are.
On 4 October 2023, Cloudflare experienced DNS resolution problems. Some users may have received SERVFAIL DNS responses to valid queries. In this blog, we’re going to talk about what the failure was, why it occurred, and what we’re doing to make sure this doesn’t happen again
Find out more about the biggest 2017 data breaches in this MacKeeper report!
Grants are Tailscale’s next generation of access controls that combine network and application capabilities into a single syntax.
How malicious environment variables can trick scripting language interpreters into executing arbitrary commands, a Linux exploitation technique.
We take a detailed look at a hacking incident that gave a user unauthorized access to our code and data.
Website with the collection of all the cheat sheets of the project.
An overview of containers and seccomp as sandboxing primitives
KPTI/KAISER Meltdown Initial Performance Regressions
Posted by Christian Blichmann, Software Engineer BinDiff is a comparison tool for binary files that helps to quickly find differences and ...
Posted by Daniel Bleichenbacher, Security Engineer and Thai Duong, Security Engineer We’re excited to announce the release of Project Wyche...
Yesterday, we posted a troubling explanation from the FBI of why it doesn’t want you to know whether your phone and internet providers are cooperating in the most expansive surveillance program that Congress has ever enacted: You might sue.
The FIDO Alliance has published a working draft of a new set of specifications for secure credential exchange that, when standardized and implemented by
Y esterday I was rudely summoned away from a beautiful autumn day of wild foraging by The King.
