Topics /
The most popular blog posts about security & privacy on Hacker News. 8,762 posts.
Back in 2013, I was beginning to get the sense that data breaches were becoming a big thing. The prevalence of them seemed to be really ramping up as was the impact they were having on those of us that found ourselves in them, myself included. Increasingly, I was writing
Abusing an unauthenticated Bluetooth protocol to turn a PC speaker into a Rubber Ducky.
Update: You did it! After a forceful debate on Monday 26 January, in which many peers protested the introduction of these amendments, Lord Blair withdrew them from consideration. Directly after the Charlie Hebdo massacre, we cautioned the public and politicians to be "wary of any attempt to rush...
Am I now committing civil disobedience... just by keeping my personal literary website up as is?
Watermarks that spy on users are no mere watermarks
Along with Threema, Tresorit, and Tutanota, we are releasing a joint statement calling on the EU to reject any ban or attack on end-to-end encryption.
This week MIT’s Computer Science and Artificial Intelligence Laboratory (CSAIL) announced that a 20-year-old cryptographic puzzle was just solved by a self-taught programmer from Belgium, 15 years earlier than MIT scientists expected.
Apple will delete your data if you don’t use an app for seven days. This effectively kills offline web apps.
The governments of Australia, Germany, the UK and the US are destroying your privacy. Some people don't see the problem...
When I was a small child, I took an IQ test. One of the first questions I stumbled on was "A piece of candy costs 25¢. Jonny has a dime. How many nickels does he need to buy the candy?" My 7-year old brain popped. WTAF is a nickel? Or a dime for that matter? We don't have those coins in my country! We don't spend in ¢…
When logged into a web application, the session does not remain valid forever. Typically, the session expires after a fixed time after login, or after the user has been idle for some time. How long should these times be?
We don’t want people to be deceived, so we take legal action against misleading domains.
Magika code and model are freely available starting today in Github under the Apache2 License.
We are pleased to announce a new, major privacy enhancement to Firefox’s cookie handling that lets you fully erase your browser history for any website. Today’s new version of Firefox ...
Posted by Vinay Shet, Product Manager, reCAPTCHA reCAPTCHA protects the websites you love from spam and abuse. So, when you go online—say...
Bug Bounty Hunter & Researcher
Today, we’re pleased to announce Cover Your Tracks, the newest edition and rebranding of our historic browser fingerprinting and tracker awareness tool Panopticlick. Cover Your Tracks picks up where Panopticlick left off. Panopticlick was about letting users know that browser fingerprinting was...
On March 27 The following message was posted on the official GitHub blog: We are currently experiencing the largest DDoS (distributed denial of service) attack in github.coms history. The attack began around 2AM UTC on Thursday, March 26, and involves a wide combination of attack vectors. These incl[...]
We confirm that in 2020 and 2021 we observed and notified the government of the United Kingdom of multiple suspected instances of Pegasus spyware infections within official UK networks, including the Prime Minister’s Office and the Foreign and Commonwealth Office.
What would you do if your organization had used a domain name for 27 years, and the registrar holding the domain seized it without any advance warning? All
You surely know this: You're looking at some website with some useful shell commands. However, those commands are long as hell and you know you're probably not gonna need them for a few years or so (so there's no need to memorize them). So, what do you do? You copy-paste them. Here's an example:
It's unfortunately no longer enough to force websites to check your government-issued ID before you can access certain content, because politicians have now discovered that people are using Virtual Private Networks (VPNs) to protect their privacy and bypass these invasive laws. Their solution? Entirely ban the use of…
Good news out of the Ninth Circuit: the federal court of appeals heeded EFF’s advice and rejected an attempt by Oracle to hold a company criminally liable for accessing Oracle’s website in a manner it didn’t like. The court ruled back in 2012 that merely violating a website’s terms of use is not a...
The new Outlook now appears to be a data collection service for Microsoft’s 801 external partners for targeted advertising.
Pretty much every day, I get a reminder from someone about how little people know about their exposure in data breaches. Often, it's after someone has searched Have I Been Pwned [https://haveibeenpwned.com/] (HIBP) and found themselves pwned somewhere or other. Frequently, it's some long-forgotten site
Note: As of 2022/10/25 the information in this series is slightly outdated. See Part 5 for more up to date information. The Car Last summer I bought a 2021 Hyundai Ioniq SEL. It is a nice fuel-efficient hybrid with a decent amount of features like wireless Android Auto/Apple CarPlay, wireless phone charging, heated…
How an expired nameserver let me take over e164.arpa zones for multiple territories, and why I probably should have checked my logs sooner.
The Latest News from Research at Kudelski Security
