4741
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
4742
No Safe Harbor: How NSA Spying Undermined U.S. Tech and Europeans' Privacy
The spread of knowledge about the NSA's surveillance programs has shaken the trust of customers in U.S. Internet companies like Facebook, Google, and Apple: especially non-U.S. customers who have discovered how weak the legal protections over their data is under U.S. law. It should come as no...
4743
Signal – An Ethical Replacement for WhatsApp
Moving from WhatsApp to Signal is an important action, right now. WhatsApp’s parent company, Meta, has been involved in several cases of election interference: America in 2016, Trinidad and Tobago …
4744
Removing PGP from PyPI
PyPI has removed support for uploading PGP signatures with new releases.
4745
“Crypto drainer” template facilitates theft
Crypto Drainers are phishing pages that lure victims into signing malicious transactions that allow the attacker to siphon their crypto and NFTs.
4746
Passkeys and Modern Authentication
Some thoughts in support of simple solutions.
4747
What every IT person needs to know about OpenBSD (2021)
How to have fun with the world’s most important free software project "Functional, free and secure by default", OpenBSD remains a crucial yet largely unacknowledged player in the open source field. This talk aims to highlight the project's signature security features and development practices -- razor sharp focus on…
4748
Bubblewrap: A nimble way to prevent agents from accessing your .env files
Last week I wrote a thing about how to run Claude Code when you don’t trust Claude Code. I proposed the creation of a dedicated user account & standard unix access controls. The objective was to stop Claude from dancing through your .env files, eating your secrets. There are some usability problems with that guide- I…
4749
eBay customers’ personal data was compromised in March
eBay Inc. (Nasdaq: EBAY) said beginning later today it will be asking eBay users to change their passwords because of a cyberattack that compromised a database containing encrypted passwords and other non-financial data.
4750
4751
IDA cybersecurity software provider Hex-Rays acquired
Liège (BE), October 14, 2022 – Hex-Rays, a Belgian cybersecurity company that develops advanced reverse engineering software solutions, has been acquired by a consortium of investors led by Smartfin, a leading European venture capital and private equity investor, and including co-investors SFPIM and SRIW. Ilfak…
4752
Google, Mozilla Close to Finalizing Sanitizer API for Chrome and Firefox Browse
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
4753
4754
4755
How the NSA obtains and uses airline reservations (2013)
A front-page report in today’s New York Times based on documents leaked by NSA whistleblower Edward Snowden confirms that the NSA, like the DHS, uses airline reservation data as part of its profiling and social network analysis of US citizens and foreigners. Today’s report also raises new questions, and suggests some…
4756
Keybase's New Key Model
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
4757
What data on myself I collect and why (2020)
How I am using 50+ sources of my personal data
4758
New details on commercial spyware vendor Variston
The Threat Analysis Group shares new information on the commercial spyware vendor Variston.
4759
How a Political Engineering Firm Exposed Their Code Base
Political data firm AggregateIQ exposed IT assets that raise questions for society about how technology is being used in recent US political history.
4760
PostgreSQL Encryption: The Available Options
On an episode of Postgres FM , the hosts had a (very brief) discussion of data encryption in PostgreSQL. While Postgres FM is a podcast well worth a subscribe, the hosts aren’t data security experts, and so as someone who builds a queryable database encryption system , I found the coverage to be somewhat… lacking. I…
4761
PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619)
FINAL STATUS (2026-10-21): the CVE-2026-109618 / CVE-2026-109619 memory-corruption class shipped patches 2026-10-21. On the patch, that class is closed: the cached-pointer chain dies at the addref and the serialize-state path is a memory-safety bug, not code execution. Two session-handling flaws survive on…
4762
4763
The Whitehouse’s New Executive Order on Cyber Crime Is (Unfortunately) No Joke
On the morning of April 1st, the White House issued a new executive order (EO) that asserts that malicious “cyber-enabled activities” are a national threat, declares a national emergency, and establishes sanctions and other consequences for individuals and entities. While computer and information...
4764
Reverse Engineer’s Perspective on the Boeing 787 ‘51 days’ Directive
Uncover the implications of hacking a Boeing 787 as we analyze recent FAA directives and aviation technology concepts.
4765
Kindle Touch jail broken via ID3 Tag
Update Kindle 5.0.3 has fixed the hole to allow for jailbreak. Upgrading an already jailbroken Kindle Touch is fine as the update does not remove the custom key to allow custom packages. If you on 5.0.3 and have not already installed the key, there is a new jailbreak.
4766
Network Tunneling with QEMU
While investigating an incident, we detected uncommon malicious activity inside one of the systems. We ran an analysis on the artifacts, only to find that the adversary had deployed and launched the QEMU hardware emulator.
4767
4768
Tor Browser 4.5 is released
The Tor Browser Team is proud to announce the first stable release in the 4.5 series. This...
4769
LastPass owner GoTo has been hacked
We recently concluded our investigation into the security incident first shared with customers in November of 2022 regarding unauthorized activity in a third-party cloud storage environment. We eliminated the threat actor’s access to the environment and found no evidence of additional compromise or threat actor…
4770
