4141
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
4142
4143
Court has confirmed coordinated raids of Zwiebelfreunde in Germany were illegal
Update July 10th: Last week Monday, prosecution stated that they will keep our things for further analysis, even after explicitly confirming to journalists that they are aware that our only connection to Riseup is the collection of donations. This includes items belonging to our partners, and other third parties like…
4144
Bad Connection: Global telecom exploitation by covert surveillance actors
Our investigation uncovers two sophisticated telecom surveillance campaigns and, for the first time, links real-world attack traffic to mobile operator signalling infrastructure. The findings expose how suspected commercial surveillance vendors (CSVs) exploit the global telecom interconnect ecosystem, leverage private…
4145
4146
4147
Don't Use RAR
Group for Apps and Services on Exascale Research Infrastructure is a research, development, and teaching unit at FIDIT + MedRi.
4148
Zcash begins
The Zcash blockchain is live! We released the genesis block this morning, and people all around our planet have begun mining and transacting on it. Our homepage links to a download page where you can…
4149
Disable AI in Firefox
Quick reference for how to turn off AI features in Firefox
4150
SendGrid isn’t emailing about ICE or BLM – it’s a phishing attack
For the past several months, I’ve been receiving and then ignoring a steady stream of concerning emails from Sendgrid, the popular email delivery service owned by Twilio that I use for sendin…
4151
The relay market powering token resellers and fraud
A look inside the gray-market reseller economy that gives mainland China cheap, structured, B2B-grade access to OpenAI, Anthropic, Google, and beyond
4152
History of AOL Warez
Link to original post on rajuabju.com Before I begin, let me state the following: This is my personal perspective of the history of Warez ...
4153
The C bounded model checker: criminally underused
Follow along on a google colab: https://colab.research.google.com/github/philzook58/philzook58.github.io/blob/master/pynb/cbmc_tut.ipynb
4154
Authentication and the Have I Been Pwned API
The very first feature I added to Have I Been Pwned after I launched it back in December 2013 was the public API [https://www.troyhunt.com/have-i-been-pwned-you-can-now-ask-api/]. My thinking at the time was that it would make the data more easily
4155
4156
AWS Built a Security Tool. It Introduced a Security Risk
Discover how AWS’s Account Assessment tool introduced a serious security risk through its default deployment guidance & key steps to detect & remediate it.
4157
Hidden Messages in Emojis and Hacking the US Treasury
On December 30th, while most of us were preparing for a New Year’s Eve celebration, the US Treasury was prepping a notice to lawmakers to notify them that their systems, which (obviously) contain highly sensitive, confidential data, had been compromised.
4158
How Advanced Is the NSA's Cryptanalysis, and Can We Resist It?
The latest Snowden document is the US intelligence ‘black budget.’ There’s a lot of information in the few pages the Washington Post decided to publish, including an introduction by Director of National Intelligence James Clapper. In it, he drops a tantalizing hint: ‘Also, we are investing in groundbreaking…
4159
4160
Want to start hacking?
We asked one of our top 10 hacker contributors, Johan Carlsson, to share his novel approach to bug bounty hunting.
4161
4162
4163
Email Authentication: A Developer's Guide
Learn the importance of SPF, DKIM, DMARC, and BIMI in ensuring email delivery.
4164
Cloudflare incident on August 21, 2025
On August 21, 2025, an influx of traffic directed toward clients hosted in AWS us-east-1 caused severe congestion on links between Cloudflare and us-east-1. In this post, we explain what the failure was, why it occurred, and what we’re doing to make sure this doesn’t happen again.
4165
Chinese app included malware to gain competitive advantage
Google says it has suspended the app for the Chinese e-commerce giant Pinduoduo after malware was found in versions of the software. The move comes just weeks after Chinese security researchers published an analysis suggesting the popular e-commerce app sought to seize total control over affected devices by exploiting…
4166
Verizon, caught red-handed
Verizon has now on multiple occasions refused to connect my Google Nexus 7 LTE tablet, though the device was publicized widely as working on Verizon and...
4167
Online Cheating Site AshleyMadison Hacked
Large caches of data stolen from online cheating site AshleyMadison.com have been posted online by an individual or group that claims to have completely compromised the company’s user databases, financial records and other proprietary information. The still-unfolding leak could be quite damaging to some 37 million…
4168
"No way to prevent this" say users of only language where this regularly happens
Xe Iaso's personal website.
4169
Firefox Private Browsing mode upgrade
October is one of our favorite months of the year with autumn and Cybersecurity Awareness Month. We’re supporting Cybersecurity Awareness with Private Br
4170
A €0.01 bank transfer could compromise a banking AI agent
Blue41 helps regulated organizations monitor AI agent behavior, detect manipulation and misuse, and prove that sensitive workflows stay within safe boundaries.