Topics /
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
I received email from two people who told me that Microsoft Edge enabled synching without warning or consent, which means that Microsoft sucked up all of their bookmarks. Of course they can turn synching off, but it’s too late. Has this happened to anyone else, or was this user error of some sort? If this is real, can…
The Gun.io blog: insights on hiring software developers, AI in engineering, distributed teams and how to build high-performing technical teams.
The “HTTP/2 Rapid Reset” attack exploits a weakness in the HTTP/2 protocol to generate enormous, hyper-volumetric DDoS attacks. Cloudflare has mitigated a barrage of these attacks in recent months, including an attack three times larger than any previous attack we’ve observed
Interesting telephone equipment in the offices of Ukrainian president Zelensky
Find software and development products, explore tools and technologies, connect with other developers and more. Sign up to manage your products.
Earlier this year, I decided to take a sabbatical. I wanted to reflect on my infosec work and decide what I would like to focus on in the coming years. As you probably know, I’ve spent the last nine years mostly fighting the battle to secure the endpoint, more specifically creating, dev...
As quoted in the original article on Das Erste: We've been thinking of state surveillance for...
Several people have been asking for an update on our public audit of the Truecrypt disk encryption software. I’m happy to say that the project is on track and proceeding apace. Here I wanted …
Two bills reauthorizing Section 702 of the Foreign Intelligence Surveillance Act are headed to the House floor. Meanwhile, FBI agents have used Section 702 databases to conduct millions of invasive searches for Americans’ communications, including those of protesters, racial justice activists, 19,000 donors to a…
Overconfident developers that choose to write their own cryptography code have plagued the information security industry since before it was even an industry. This in and of itself isn’t inhe…
The GlobalSign blog is the top resource to see what's trending in public key infrastructure (PKI), SSL/TSL, digital signing solutions, cybersecurity & more!
The Danish DPA issues an injunction in the Chromebook case
Proton Mail has become the first and only encrypted email provider to support elliptic curve cryptography (ECC), providing more security and performance.
On March 21st, 2017, the U.S. Department of Homeland Security ordered airlines flying to the U.S. out of 10 airports, mostly in Muslim-majority countries in the Middle East, to refuse to transport …
Carousel Apps was the company behind Watu, the application for temporary staffing agencies. It was co-founded by Julian Johnson and Pablo Fernandez. They both since have moved to other things. Julian is working on many projects, but his main one is improving education and quality of life for children in Africa which…
I really want an AI assistant: a Large Language Model powered chatbot that can answer questions and perform actions for me based on access to my private data and tools. …
This content is now available in the Pluralsight course "Secure Account Management Fundamentals" [http://www.pluralsight.com/courses/secure-account-management-fundamentals] Recently I’ve had a couple of opportunities to think again about how a secure password reset function should operate, firstly whilst building this…
tl;dr - a collection of nearly 3k alleged data breaches has appeared with a bunch of data already proven legitimate from previous incidents, but also tens of millions of addresses that haven't been seen in HIBP before. Those 80M records are now searchable, read on for the full story:
You could always sign Git commits with a GPG key, but now your SSH key is just as powerful!
GPG Mail 8 beta for macOS Golden Gate. Read the latest status, installation instructions, known issues and support plan information.
SAN FRANCISCO—Technical standards like fire and electrical codes developed by private organizations but incorporated into public law can be freely disseminated without any liability for copyright infringement, a federal appeals court ruled Tuesday. Tuesday’s ruling by a three-judge panel of the U.S...
I heard multiple times that AWS scans public GitHub repositories for AWS credentials and informs its users of the leaked credentials.
Back in 1998, Tim May warned us of the “Four Horsemen of the Infocalypse”: “terrorists, pedophiles, drug dealers, and money launderers.” I tended to cast it slightly differently. This is me from 2005: Beware the Four Horsemen of the Information Apocalypse: terrorists, drug dealers, kidnappers, and child pornographers…
The new Snowden revelations are explosive. Basically, the NSA is able to decrypt most of the Internet. They’re doing it primarily by cheating, not by mathematics. It’s joint reporting between the Guardian, the New York Times, and ProPublica. I have been working with Glenn Greenwald on the Snowden documents, and I have…
Proofcraft’s Chief Engineer Rafal Kolanski has completed a major “architecture split” overhaul of the seL4 proofs, resulting in the removal of 250k lines of proof and strengthening the link between proofs on different architectures. These changes will significantly reduce future effort required to maintain and extend…
