511
I have recordings proving Coinbase knew about breach months before disclosure
I have recordings and emails showing attacks months before Coinbase's 'discovery'. Timeline, headers, and audio evidence.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,762 posts.
512
End of "Chat Control": EU parliament stops mass surveillance
The controversial mass surveillance of private messages in Europe is coming to an end. After the European Parliament had already rejected the indiscriminate and blanket Chat Control by US tech companies on 13 March, conservative forces attempted a democratically highly questionable maneuver yesterda
513
514
Reverse Engineering TikTok's VM Obfuscation
TikTok has a reputation for its aggressive data collection. The platform has implemented various methods to make it difficult for reverse-engineers to understand exactly what data is being collected and how it is being used.
515
Passkeys will come at a cost
Firstyear's blog
516
1Password Has Raised $620M
As our online lives become subject to new and evolving threats, we're doubling down on protecting the digital privacy and peace of mind of everyday people – at home and at work.
517
Am I logged in or not? GDPR case study on the example of Chrome browser change
It is surprisingly difficult to find realistic, interesting and creative privacy case studies. It is perhaps even more difficult in the case of major software. There are no proper motivations for making this kind of work public (employees often paid to do some kind of work in-house; their compensation
518
Can you get root with only a cigarette lighter?
Before you can write an exploit, you need a bug. When there are no bugs, we have to get creative—that's where Fault Injection comes in. Fault injection can take many forms, including software-controlled data corruption, power glitching, clock glitching, electromagnetic pulses, lasers, and more.
519
520
Airbnb and security camera disclosure
This post got *a lot* of attention. I’m super happy about that because I had been afraid that we had reached a point where we collectively didn’t care about cameras or meaningful disclosure. Although, to that point here’s a comment someone posted: "I just assume that there will be camera constantly recording when I…
521
What It Costs to Run Let's Encrypt
Today we’d like to explain what it costs to run Let’s Encrypt. We’re doing this because we strive to be a transparent organization, we want people to have some context for their contributions to the project, and because it’s interesting. Let’s Encrypt will require about $2.9M USD to operate in 2017. We believe this is…
522
Undermining Democracy: The EU Commission's Controversial Push for Surveillance
The European Commission wants to turn digital communication apps, such as WhatsApp, iMessage, Instagram, TikTok and X, into mass surveillance tools so that digital communications of all EU citizens, including their live conversations, photos and videos, can be automatically scanned for criminal offences.[1] Even of…
523
524
EFF’s Game Plan for Ending Global Mass Surveillance
We have a problem when it comes to stopping mass surveillance. The entity that’s conducting the most extreme and far-reaching surveillance against most of the world’s communications—the National Security Agency—is bound by United States law. That’s good news for Americans. U.S. law and the...
525
Passkeys are not a trap
A post called Passkeys are a trap. Do not use them. has been doing the rounds over the last few days, making it pretty high on Hacker News, and I've had it sent to me many times with an 'is this true?' kind of vibe. It's written for
526
A decade of Have I Been Pwned
A decade ago to the day, I published a tweet launching what would surely become yet another pet project that scratched an itch, was kinda useful to a few people but other than that, would shortly fade away into the same obscurity as all the other ones I'd launched
527
US Secret Service: “Massive Fraud” Against State Unemployment Insurance Programs
A well-organized Nigerian crime ring is exploiting the COVID-19 crisis by committing large-scale fraud against multiple state unemployment insurance programs, with potential losses in the hundreds of millions of dollars, according to a new alert issued by the U.S. Secret Service .
528
529
SolarWinds hackers were able to access Microsoft source code
As we said in our recent blog , we believe the Solorigate incident is an opportunity to work together in important ways, to share information, strengthen defenses and respond to attacks. Like other SolarWinds customers, we have been actively looking for indicators of the Solorigate actor and want to share an update…
530
Malware identified in CCleaner 5.33
Update 9/18: CCleaner Cloud version 1.07.3191 is also reported to be affected Update 9/19: This issue was discovered and reported by both Morphisec and Cisco in separate in-field cases and reported separately to Avast. Update 9/19: There has been some confusion on how the
531
I tricked Claude into leaking your deepest, darkest secrets
How I tricked Claude into leaking your deepest, darkest secrets
532
Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA
A weblog about Signals Intelligence, Communications Security and top level telecommunications equipment
533
Chaos Computer Clubs Breaks Iris Recognition System of the Samsung Galaxy S8
Biometric authentication systems – again – don’t deliver on their security promise: The iris recognition system of the new Samsung Galaxy S8 was successfully defeated by hackers of the Chaos...
534
What's Inside the EU Green Pass QR Code?
Here in Austria, you need to be either vaccinated against, tested negative for, or have recovered from COVID-19 to go to the pub (or pretty much everywhere) right now. If you don't want to carry around your paperwork proving one of those, you can alternatively show your Green Pass QR code to be let in.
535
Who owns Express VPN, Nord, Surfshark? VPN relationships explained (2024)
Who owns the major VPN companies like Express, Nord, and Surfshark? We take you through an interactive map of the murky world of VPNs.
536
Germany opposes EU plans for client-side scanning
Germany opposes client-side scanning planned by EU - it would create an unprecedented surveillance monster that violates fundamental rights.
537
Let's Encrypt makes certs for 30% of web domains
Looking at a dataset of 350 million ssl connections inspires some initial questions:
538
UK Parliament undermined the privacy, security, freedom of all internet users
The U.K. Parliament has passed the Online Safety Bill (OSB), which says it will make the U.K. “the safest place” in the world to be online. In reality, the OSB will lead to a much more censored, locked-down internet for British users. The bill could empower the government to undermine not just the privacy and security…
539
540
Facebook's Hypocrisy on Apple's New iOS 14 Privacy Feature
In their latest attempt to disrupt the iOS anti-ad tracking feature, Facebook has stooped to a new low