5341
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,769 posts.
5342
Members of Congress Demand Answers for the Unjust Domain Name Seizures
This morning, a bipartisan group of Representatives, led by Rep. Zoe Lofgren (D-Calif.), sent a pointed letter to Attorney General Eric Holder and the Secretary of Homeland Security Janet Napolitano protesting the recent spat of domain name seizures—executed on dubious copyright grounds—that have...
5343
FreeDVDBoot – Hacking the Playstation 2 through its DVD player
I've previously discussed how the PlayStation 2 doesn't have any good entry-point software exploits for launching homebrew. You need to either purchase a memory card with an exploit pre-installed (or a memory card to USB adapter), a HDD expansion bay (not available to slim consoles), open up the console to block the…
5344
The silent CVE in the heart of Kubernetes apiserver
An overview into CVE-2018-1002105's root cause and a program to test if your clusters are affected
5345
EFF: Help Us Protect Mesh Networking From Overbroad Patents
Earlier this year, we announced that along with the Cyberlaw Clinic at Harvard’s Berkman Center for Internet and Society, we were challenging six patent applications that, if granted, could threaten the development of 3D printing technology. We asked you—the community—for help, and your input was...
5346
Pacing model development in an era of cyber-critical capabilities
OpenAI is strengthening monitoring, alignment, and security for frontier AI models. See how new safeguards are guiding the pace of model development.
5347
Google allows G Suite administrators to monitor and audit user emails
Google allows Google Workspace administrators to monitor and audit users emails. An Administrator may use Google Vault, Content Compliance rules, Audit API or Email delegation to view and audit users emails. It is recommend for Google Workspace Administrators to consider their local laws before performing email…
5348
Post-quantum cryptography is too damn big
Large-scale quantum computers are capable of breaking all of the common forms of asymmetric cryptography used on the Internet today. Luckily, they don’t exist yet. The Internet-wide transition to post-quantum cryptography began in 2022 when NIST announced their final candidates for key exchange and signatures in the…
5349
5350
Lasershark: Fast, bidirectional communication into air-gapped systems
We present a novel approach to infiltrate data to air-gapped systems without any additional hardware on-site.
5351
5352
I dumped Apple’s word list
macOS ships a VulgarWordUsage.db and a dictionary that rates every word as vulgar, offensive or sensitive. Dumped for 199,000 English words and a dozen other languages.
5353
PyPI: Python packets steal AWS keys from users
Multiple Python packages caught by Sonatype were seen uploading secrets such as AWS keys and environment variables to a web endpoint.
5354
5355
Bitcoin as a law enforcement/natsec honeypot: what is the evidence?
Paranoia appears to be the order of the day, given what we know about the NSA and GCHQ thanks to Edward Snowden. Absent from the stories so...
5356
The Missing Mt. Gox Bitcoins
The official blog of WizSec, a group of bitcoin security specialists, and their investigation into MtGox.
5357
Impact to DigitalOcean customers resulting from Mailchimp security incident
Today, we wanted to share an update about how DigitalOcean and our customers were impacted by a recent security incident disclosed by Mailchimp.
5358
5359
Tinycolor supply chain attack post-mortem
Lessons learned from becoming the unexpected face of a npm supply-chain attack.
5360
5361
CCTV Cameras Sold on Amazon Come with Pre-Installed Malware
I needed a simple set of good outdoor surveillance cameras for a friends home. Like everything else I buy, I turned to Amazon. I found (what seemed like) a great deal for a set of 6 poe cameras and...
5362
Looking into the Stadia Controller Bluetooth Mode Website
With the end of Google's Stadia platform on January 18, 2023, Google published a website allowing people to "Switch the Stadia Controller ...
5363
Global Encryption Day: Demand End-to-End Encryption in DMs
Today is Global Encryption Day, a day to highlight why encryption is critical for a safe, private internet.
5364
5365
5366
OpenSSL 1.1.1 End of Life
OpenSSL 1.1.1 series has reached its End of Life (EOL). As such it will no longer receive publicly available security fixes.
5367
Fuzzing is magic – Or how I found a panic in Rust's regex library
Going through the steps of using cargo fuzz to find bugs in Rust projects
5368
Use GitHub actions at your own risk
Malicious code can be inserted into any GitHub action, even those which are tagged.
5369
5370