4381
Privacy-Preserving Ad Click Attribution for the Web
A typical website is made of numerous components coming from a wide variety of sources.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
4382
Encryption at Rest: Whose Threat Model Is It Anyway?
Head’s up: This is a blog post about applied cryptography, with a focus on web and cloud applications that encrypt data at rest in a database or filesystem. While the lessons can be broadly a…
4383
CCPA Will Hit Dev Teams Harder Than GDPR
CCPA impacts dev teams more than GDPR. Learn who must comply, what data is covered, and how to protect test data safely.
4384
Sendgrid under siege from hacked accounts
Email service provider Sendgrid is grappling with an unusually large number of customer accounts whose passwords have been cracked, sold to spammers, and abused for sending phishing and email malware attacks. Sendgrid’s parent company Twilio says it is working on a plan to require multi-factor authentication for all…
4385
Essential security for Linux servers (2013)
Father, Founder, and FuturistBuilding bestinterest.app and podcasting for coparents.Learn more about me.
4386
4387
China listening in on Skype - Microsoft assumes you approve
Fighting censorship with technology since 2011. We use AI to monitor censorship and expand free speech worldwide.
4388
Bitcoin Private Key Necromancy
tl;dr: https://github.com/pierce403/keyhunter ~ The Longer Version ~ A few weeks ago, a friend came to me with a problem. Way back...
4389
Aren't AMP Caches committing copyright infringement?
How can mass-copying pages from web publishers without a license not be mass-copyright infringement? The weird copyright law exemption that enables AMP Caches.
4390
4391
Ways we harden our KVM hypervisor at Google Cloud: Security in plaintext
Google Cloud uses the open-source KVM hypervisor that has been validated by scores of researchers as the foundation of Google Compute Engine and Google Container Engine , and invests in additional security hardening and protection based on our research and testing experience. Then we contribute back our changes to the…
4392
4393
Containers Come to Firefox Test Pilot
The Containers feature in Firefox Nightly gives users the ability to place barriers on the flow of data across sites by isolating cookies, indexedDB, localStorage, and caches within discrete browsing ...
4394
4395
Apple's MacBook Pro DFU port documentation is wrong
According to the Apple support document How to identify the DFU port on Mac , the DFU (device firmware update) port location for MacBook Pro models with Apple silicon is as follows:
4396
Scam Alert: Fake DMCA Takedown for Link Insertion
There are a lot of scams out there, but one that's been plaguing bloggers like me lately is a novel twist: A fake DMCA takedown notice that's actually a link insertion scam! Beware: The notices I'm getting are very convincing-looking, complete with a fake law firm website!
4397
4398
Linux Local Privilege Escalation via SUID /proc/pid/mem Write
Introducing Mempodipper , an exploit for CVE-2012-0056. /proc/ pid /mem is an interface for reading and writing, directly, process memory by seeking around with the same addresses as the process's virtual memory space. In 2.6.39, the protections against unauthorized access to /proc/ pid /mem were deemed sufficient…
4399
Hacking Transcend WiFi SD Cards
UPDATE : This post has been featured in the Hacker News front page! Thanks! I have also updated this post with additional information (at t...
4400
Oniux: Kernel-level Tor isolation for any Linux app
Introducing oniux: Kernel-level Tor isolation for any Linux app. This torsocks alternative uses namespaces to isolate Linux applications over the Tor network and eliminate data leaks.
4401
4402
4403
RCE on Telia Routers
Multiple vulnerabilities could allow running arbitrary code on an intranet server and gain root access on all the customers' routers
4404
OpenPGPjs v3.0
We're happy to announce a major new version of OpenPGPjs, the world's most widely used JavaScript PGP encryption library. Version 3.0 brings many enhancements to the hundreds of applications and millions of users who rely on OpenPGPjs.
4405
Testing a new encrypted messaging app's extraordinary claims
How I accidentally breached a nonexistent database and found every private key in a 'state-of-the-art' encrypted messenger called Converso.
4406
CodeMender: an AI agent for code security
Using advanced AI to fix critical software vulnerabilities
4407
It’s 255:19AM. Do you know what your validation criteria are?
Ed25519 signature validation criteria vary widely between implementations, creating risks for consensus systems. Here's why and how to fix it.
4408
On the new Snowden documents
If you don’t follow NSA news obsessively, you might have missed yesterday’s massive Snowden document dump from Der Spiegel. The documents provide a great deal of insight into how the NSA brea…
4409
SSL certificate requirements are becoming obnoxious
SSL requirements are quickly becoming obnoxious.
4410
Signal Desktop beta now publicly available
For the past few months, the Signal Desktop beta has been available through an invitation program. We’ve gotten a lot of feedback, made a lot of improvements, and are now ready to open the beta up for public access.