4981
Introducing 'Trusted Publishers'
Announcing a new, more secure way to publish to PyPI
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
4982
Bypassing Google’s Two-Factor Authentication
Explore the Duo Blog for expert tips, security insights, and resources to stay updated on the latest in security and access management trends.
4983
How I was able to track the location of any Tinder user
By Max Veytsman At IncludeSec we specialize in application security assessment for our clients, that means taking applications apart and finding really crazy vulnerabilities before other hackers do. When we have time off from client work we like to analyze popular apps to see what we find. Towards the end of 2013 we…
4984
Data is a Toxic Asset
Thefts of personal information aren’t unusual. Every week, thieves break into networks and steal data about people, often tens of millions at a time. Most of the time it’s information that’s needed to commit fraud, as happened in 2015 to Experian and the IRS. Sometimes it’s stolen for purposes of embarrassment or…
4985
An Ancient Kernel Hole Is Not Closed
The "stack clash" series of vulnerabilities were a prime opportunity to demonstrate the strength of grsecurity's approach to security. Unlike upstream Linux and other OSes, the issues uncovered were unexploitable under grsecurity for many years.
4986
4987
How deceptive design is used to compromise your privacy and how to fight back
Today, we’re releasing a new guide explaining how to compel companies employing deceptive design to dodge data protection requests—like those for data deletion or access—to comply. It encapsulates five years...
4988
MikroTik authentication revealed
A deep-dive into MikroTik's hand-rolled Elliptic Curve Secure Remote Protocol (EC-SRP) cryptography used in client-server authentication
4989
The USA Freedom Act: What's to Come and What You Need to Know
Update, Nov 18: The USA Freedom Act does not renew the entirety of the Patriot Act, which consisted of over 100 sections changing numerous electronic surveillance laws. The USA Freedom Act does extend three provisions of the Patriot Act: the "lone wolf" provision, the "roving wire tap" provision,...
4990
Why it’s harder to forge a SHA-1 certificate than to find a SHA-1 collision
It’s well known that SHA-1 is no longer considered a secure cryptographic hash function. Researchers now believe that finding a hash collision (two values that result in the same value when SHA-1 is applied) is inevitable and likely to happen.
4991
Scamming the scammers – catching the virus call centre scammers red-handed
A few months back I got a call one evening which was clearly a virus call centre scam; you know, the ones that call you out of the blue, tell you your PC is infected with all sorts of nasties and offer to fix it for you? Or maybe you
4992
4993
Petition the U.S. Government to Force the TSA to Follow the Law
This is important: In July 2011, a federal appeals court ruled that the Transportation Security Administration had to conduct a notice-and-comment rulemaking on its policy of using “Advanced Imaging Technology” for primary screening at airports. TSA was supposed to publish the policy in the Federal Register, take…
4994
Learning to break ciphers
Every now and then, I read a question about learning how to break ciphers, or more generally how to become a cryptographer/cryptologist. From my viewpoint, the most important part of learning this…
4995
The strange story of “Extended Random”
Yesterday, David Benjamin posted a pretty esoteric note on the IETF’s TLS mailing list. At a superficial level, the post describes some seizure-inducingly boring flaws in older Canon printers…
4996
An Update on SolarWinds
We’d like to provide a further update to our customers in regards to the SolarWinds breach. At this point we reiterate the message we posted yesterday – we have not played any role in this breach, nor are we aware of any vulnerabilities in TeamCity that may have led to this breach, as we are also not aware of any…
4997
4998
Reverse engineering Animal Crossing's developer mode
Last summer I began reverse engineering Animal Crossing for the GameCube to explore the possibility of creating mods for the game. I also wanted to document the process to create tutorials for people interested in ROM hacking and reverse engineering. In this post I explore the developer debugging features that are…
4999
A Critique on “A Critique on the OpenPGP Updates”
An occasional blog about OpenPGP keyservers and related issues
5000
Call of Duty Adds Kernel Level Driver for Anti-Cheat
RICOCHET Anti-Cheat fights unfair play across Warzone™ and Vanguard; new kernel-level driver coming first to Call of Duty: Warzone
5001
GitHub Copilot isn't worth the risk
Copilot may be a glimpse into the future of AI, but it comes with a lot of legal and security baggage.
5002
Teenager facing terrorism charges for something he posted on Facebook
Meet Cameron D'Ambrosio. He's 18 and lives in a small town near Boston. He posts a lot of lyrics on Facebook and wants to be a rapper. Oh, and he's being held without bail as a terrorist for ... WHAT??!
5003
LibreSSL's PRNG is Unsafe on Linux
The first version of LibreSSL portable, 2.0.0, was released a few days ago (followed soon after by 2.0.1 ). Despite the 2.0.x version numbers, these are only preview releases and shouldn't be used in production yet, but have been released to solicit testing and feedback. After testing and examining the codebase, my…
5004
Secure Computing for Journalists
This morning on Twitter, Buzzfeed editor Miriam Elder asks the following question: Possibly stupid question: is the Signal desktop client as secure as the mobile app? — Miriam Elder (@MiriamElder) …
5005
5006
An Example of a Sad Google Account Recovery Failure and Its Effects
UPDATE: 24 May 2023: A Proposal for “Enhanced Recovery Services” for Locked Out Google Accounts
5007
How We Proved the Eth2 Deposit Contract Is Free of Runtime Errors
Consensys is a blockchain software company building the tools, infrastructure and research that power the new Era of Decentralized Finance, for a more secure and open economy
5008
Universal's Audible Watermark (2012)
This is my personal blog. The views expressed on this page are mine alone. Update, April 8, 2013: Can you hear it? Take the watermark listening test. Update, January 14, 2015: Check out the results of the listening test. A while ago, I wrote about my confusion regarding Weird Spotify Compression Artifacts. It turns…
5009
PRISM? Come to Israel to study our surveillance state
It seems that those who were astonished, abhorred, enraged or outraged from finding out that the National Security Agency (NSA) tracked millions of united states citizens and did so with the cooperation of numerous internet service providers, telecommunication companies and web-based hosting services had not even…
5010
