5401
Mozilla Announces Experimental Partnership with ProtonVPN
Mozilla has long played an important role in the online world, and we’re proud of the impact we’ve had. But we want to do even more, and that means exploring ...
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,770 posts.
5402
United Kingdom to introduce security labelling on connected devices
In a press release from the UK government on January 27th 2020 called “Government to strengthen security of internet-connected products”, the new law and i
5403
Regin: Top-tier espionage tool enables stealthy surveillance
Broadcom Community - VMTN, Mainframe, Symantec, Carbon Black
5404
5405
Trigger.dev customer environment variables exposed
An attacker gained unauthorized access to environment variables for a subset of organizations. We've blocked the exploit and emailed all impacted account owners with steps to mitigate.
5406
A Warning to Users of NurseryCam
This blog post is intended for a less technical audience – specifically parents and nurseries using the NurseryCam system. NurseryCam is a camera system that is installed in nurseries, allowi…
5407
5408
Storing Passwords in a Highly Parallelized World
Why “Use bcrypt.” is not the best recommendation (anymore).
5409
5410
Flash-Free Clipboard for the Web
As part of our effort to grow the Web platform and make it accessible to new devices, we are trying to reduce the Web's dependence on Flash. As part of ...
5411
How to send DMs on Twitter without permission
I just recalled " SMS commands " feature and tried to send a DM (private, direct message) with "Share on Twitter"-button. It works! Twitt...
5412
How Git servers work, and how to keep yours secure
Disclaimer: I’m no sysadmin extraordinaire, please please please correct me if there’s something blatantly wrong here:
5413
Security Through Transparency
Posted by Ryan Hurst and Gary Belvin, Security and Privacy Engineering Encryption is a foundational technology for the web. We’ve spent a l...
5414
5415
Writing Exploit-Resistant Code with OpenBSD
On April 27, 2019, I gave a talk on how to use OpenBSD to write better software at CarolinaCon 15 in Charlotte.
5416
Kr00k vuln in WiFi chips that allows unauthorized decryption of traffic
Kr00k – formally known as CVE-2019-15126 – is a vulnerability in Broadcom and Cypress Wi-Fi chips that allows unauthorized decryption of some WPA2-encrypted traffic.
5417
Zero Trust Information
Zero Trust Networking is security with Internet assumptions; there is tremendous value if we apply the same approach to information.
5418
Sexual Harassment at DefCon (and Other Hacker Cons)
Excellent blog post by Valerie Aurora about sexual harassment at the DefCon hackers conference. Aside from the fact that this is utterly reprehensible behavior by the perpetrators involved, this is a real problem for our community. The response of “this is just what hacker culture is, and changing it will destroy…
5419
TSA announces “biometrics vision for all commercial aviation travelers”
Today the US Transportation Security Administration released a detailed TSA Biometric Roadmap for Aviation Security & the Passenger Experience , making explicit the goal of requiring mug shots (to be used for automated facial recognition and image-based surveillance and control) as a condition of all domestic or…
5420
An Update on Our Plans to Restrict Data Access on Facebook
Two weeks ago we promised to take a hard look at the information apps can use when you connect them to Facebook as well as other data practices. Today, we want to update you on the changes we're making to better protect your Facebook information.
5421
How does Ada's memory safety compare against Rust?
A comparison of how well Rust and Ada prevent the most common memory-related software errors.
5422
Rules for Writing Safety Critical Code (2006)
Ten rules for writing safety critical code, to facilitate analysis and increase software reliability
5423
Don’t underestimate grep-based code scanning
Static analysis tools (SAST) are perhaps the most common tool for an AppSec team in the endless effort to move security to the left. They can be integrated into development pipelines in order to of…
5424
Battle with bots prompts purge of Amazon, Apple employee accounts on LinkedIn
On October 10, 2022, there were 576,562 LinkedIn accounts that listed their current employer as Apple Inc. The next day, half of those profiles no longer existed. A similarly dramatic drop in the number of LinkedIn profiles claiming employment at Amazon comes as LinkedIn is struggling to combat a significant uptick in…
5425
Sandboxing all the things with Flatpak and BubbleBox
A few years ago, I have blogged about my approach to sandboxing less-trusted applications that I have to or want to run on my main machine. The approach has changed since then, so it is tim...
5426
Void captures over a million Android TV boxes
Doctor Web experts have uncovered yet another case of an Android-based TV box infection. The malware, dubbed <a href="https://vms.drweb.com/search/?q=Android.Vo1d&lng=en"><b>Android.Vo1d</b></a>, has infected nearly 1.3 million devices belonging to users in 197 countries. It is a backdoor that puts its components in…
5427
5428
Android RNG Weakness Renders Bitcoin Wallets Insecure
We recently learned that a component of Android responsible for generating secure random numbers contains critical weaknesses , that render all Android wallets generated to date vulnerable to theft. Because the problem lies with Android itself, this problem will affect you if you have a wallet generated by any Android…
5429
WhatsApp alternatives that respect privacy
WhatsApp may be secure but it’s not private. Learn about the best alternatives to WhatsApp that genuinely respect your privacy.
5430
ICE Is Buying a Tool to Track Phones, Without Warrants
Trump is quietly building a surveillance state, and almost no one is paying attention.