5011
Auth.js is now part of Better Auth
Auth.js, formerly known as NextAuth.js, is now being maintained and overseen by Better Auth team
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
5012
Using a Canon EOS camera as a webcam in Debian
Learn how to use your Canon EOS camera as a webcam on Debian Linux with secure boot enabled. Step-by-step guide for installing dependencies, signing the v4l2loopback module, and using the camera in applications. Works with many camera brands including Canon, Fuji, HP, Kodak, Nikon, Pentax, Sanyo, and Sony.
5013
5014
5015
Complete, Persistent Compromise of Netgear Wireless Routers
UPDATE: Turns out, Jacob Holocomb ( @rootHak42 on Twitter) of Independent Security Evaluators found this bug back in April on a different d...
5016
Cisco's Talos team analysis of WannaCry worm
By Martin Lee, Warren Mercer, Paul Rascagneres, and Craig Williams. Executive Summary A major ransomware attack has affected many organizations across the world reportedly including Telefonica in Spain, the National Health Service in the UK, and FedEx in the US. The malware responsible for this attack is a ransomware…
5017
Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More
The RETADUP worm that affected Israeli hospitals turned out have bigger impact than we first thought. It was accompanied by an even more dangerous threat: an Android malware that can take over the device. We’ve named this Android backdoor GhostCtrl.
5018
AppLovin nonconsensual installs
Mobile adtech juggernaut AppLovin recently faced multiple allegations of misconduct . Allegations run the gamut—privacy, ad targeting, even national security and ties to China. I was among the researchers consulted by skeptical investors this spring, and I was quoted in one of their reports, explaining my concerns…
5019
Fuzzing between the lines in popular barcode software
Fuzzing—one of the most successful techniques for finding security bugs, consistently featured in articles and industry conferences—has become so popular that you may think most important software has already been extensively fuzzed. But that’s not always the case. In this blog post, we show how we fuzzed the ZBar…
5020
5021
GitHub Actions update: Helping maintainers combat bad actors
The trustworthiness of our platform is crucial, and our team is committed to developer productivity and Actions performing the way we intended.
5022
SimpleVisor – Intel VT-x hypervisor in 500 lines of C code
Simplevisor : SimpleVisor is a simple, portable, Intel VT-x hypervisor with two specific goals: using the least amount of assembly code (10 lines), and having the smallest amount of VMX-related code to support dynamic hyperjacking and unhyperjacking (that is, virtualizing the host state from within the host). It runs…
5023
Microsoft Shuts off HTTPS in Hotmail for Over a Dozen Countries
UPDATE (3/26/11): HTTPS is again available for those in the countries discussed below. Microsoft denies deliberately blocking access to HTTPS, blaming the problem on a bug: We are aware of an issue that impacted some Hotmail users trying to enable HTTPS. That issue has now been resolved. Account...
5024
5025
5026
Over the Air: Exploiting Broadcom’s Wi-Fi Stack (Part 2)
Posted by Gal Beniamini, Project ZeroIn this blog post we'll continue our journey into gaining re...
5027
5028
Software Engineering Institute Makes CERT C++ Coding Standard Freely Available
SEI News | A collection of the latest news articles from the CMU Software Engineering Institute.
5029
Hunting for Malicious Packages on PyPI
I installed every package on PyPI to look for malicious content. This is what I found.
5030
Removing Bad Actors on Facebook
We removed 32 Pages and accounts from Facebook and Instagram because they were involved in coordinated inauthentic behavior.
5031
Digital ID, a new way to create and present an ID in Apple Wallet
Digital ID is a new way for users to create an ID in Apple Wallet using their U.S. passport, and present it with the privacy of iPhone or Apple Watch.
5032
Github became the web's largest font piracy site (2017)
Front-end antics and typographic mischievousness
5033
Even 'uncensored' models can't say what they want
A safety-filtered pretrain can duck a charged word without refusing. It puts a fraction of the probability an open-data pretrain puts there. We call that...
5034
Google listening in to your room shows importance of privacy defense in depth
Does it always feel like Google’s listening in? Learn how to manage voice recordings, adjust privacy settings, and stop voice activation on Android and iPhone.
5035
Police in Mississippi to Pilot a Program to Live-Stream Amazon Ring Cameras
The police surveillance center in Jackson, Mississippi, will be conducting a 45-day pilot program to live stream the security cameras, including Amazon Ring cameras, of participating residents.
5036
Path to Astra: critical capabilities and frontier safeguards
Astra is the first OpenAI model to meet the Critical cybersecurity capability threshold under the Preparedness Framework, with stronger safeguards for release.
5037
Slightly safer vibecoding by adopting old hacker habits
I have seen a lot of public discussion around supply-chain attacks on the Python ecosystem, prompt injection risks when using coding agents,...
5038
Managed by Bots: surveillance of gig economy workers
What if your boss was an algorithm? What would you do if your employer suddenly fired you or reduced your pay without telling you why? And without being willing to give you a reason when you ask for one?
5039
5040
Certificate Revocation Issue
We're experts in automated, Scalable, Integrated Digital Certificates Solutions, SSLs/TLSs, managed PKI, IoT, authentication & email security. Learn more about our identity management services.