391
Auth is now available in Supabase (YC S20)
Authenticate and authorize your users with Supabase Auth
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 612 posts.
392
Smartphone contact tracing has failed everywhere
Even the ‘successful’ contact tracing apps have fallen well below expectations, and incapable of discovering their effectiveness.
393
Exponential growth in DDoS attack volumes
How Google prepares for and protects against the largest volumetric DDoS attacks.
394
395
A Guide to Threat Modelling for Developers
Threat modeling is a risk based approach to cyber security requirements analysis.
396
The facts around Zoom and encryption for meetings/webinars
Learn more about how to use each Zoom product to connect with coworkers, customers, businesses, and more with insights and best practices.
397
398
How to Use Trend Micro's Rootkit Remover to Install a Rootkit
The opinions expressed in this publication are those of the authors. They do not reflect the opinions or views of my employer. All research was conducted independently. For a recent project, I had to do research into methods rootkits are detected and the most effective measures to catch them when
399
400
Millions of email addresses leaking to advertising and analytics companies
Breaches have been found on websites including Wish.com, JetBlue.com, Quibi.com, WashingtonPost.com, NGPVan.com and numerous other…
401
Hiding messages in x86 binaries using semantic duals
This is a quick writeup of a steganographic tool that I threw together: steg86 . It uses a quirk of the x86 instruction encoding format to hide messages in pre-existing binaries with no size or performance overhead.
402
403
FreeDVDBoot – Hacking the Playstation 2 through its DVD player
I've previously discussed how the PlayStation 2 doesn't have any good entry-point software exploits for launching homebrew. You need to either purchase a memory card with an exploit pre-installed (or a memory card to USB adapter), a HDD expansion bay (not available to slim consoles), open up the console to block the…
404
Google allows G Suite administrators to monitor and audit user emails
Google allows Google Workspace administrators to monitor and audit users emails. An Administrator may use Google Vault, Content Compliance rules, Audit API or Email delegation to view and audit users emails. It is recommend for Google Workspace Administrators to consider their local laws before performing email…
405
406
Me on Covid-19 contact tracing apps
I was quoted in BuzzFeed: “My problem with contact tracing apps is that they have absolutely no value,” Bruce Schneier, a privacy expert and fellow at the Berkman Klein Center for Internet & Society at Harvard University, told BuzzFeed News. “I’m not even talking about the privacy concerns, I mean the efficacy. Does…
407
United Kingdom to introduce security labelling on connected devices
In a press release from the UK government on January 27th 2020 called “Government to strengthen security of internet-connected products”, the new law and i
408
409
Kr00k vuln in WiFi chips that allows unauthorized decryption of traffic
Kr00k – formally known as CVE-2019-15126 – is a vulnerability in Broadcom and Cypress Wi-Fi chips that allows unauthorized decryption of some WPA2-encrypted traffic.
410
Zero Trust Information
Zero Trust Networking is security with Internet assumptions; there is tremendous value if we apply the same approach to information.
411
412
Beware of the GIF: Account Takeover Vulnerability in Microsoft Teams
Protect your organization with Idira®. Modernize identity governance, automate access reviews, and secure every identity across your hybrid cloud environment.
413
Mozilla SOPS with KMS and Git is underrated (2019)
Hashicorp Vault hogs the limelight as cost-effective powerful KMS solutions are hidden in plain sight. Click here to explore Mozilla SOPS.
414
How to decrypt WhatsApp end-to-end media files
At the center of the "Saudis hacked Bezos" story is a mysterious video file investigators couldn't decrypt, sent by Saudi Crown Prince MBS t...
415
A first look at Ghidra’s Debugger – Game Boy Advance Edition
Building Ghidra and reviewing the debugging features
416
SSH Emergency Access
Learn how to prepare for emergency access to your SSH hosts.
417
Using a Yubikey as a touchless, magic unlock key for Linux
Yubikeys are great for security, but their benefits decrease somewhat when you leave them in your computer unattended. I also have login passwords that are way too long. How to solve these problems? Use a Yubikey to unlock your computer!
418
419
Zero Trust Networks
I am leery of jargon. I am as guilty of using it as the next engineer, but there comes a point where there are just too many precise, narrowly-understood terms polluting your vocabulary. The circle of people you can talk to shrinks until going to the store to buy milk feels like an exercise in speaking a foreign…
420
Finding secrets by decompiling Python bytecode in public repositories
Cache rules everything around me. `pyc` files can contain secrets and should not be checked in to source control. Use the standard Python [.gitignore](https://github.com/github/gitignore/blob/master/Python.gitignore).