5521
Cofactor Explained: Clearing Elliptic Curves' dirty little secret
Efficient elliptic curves tend not to have a prime order. This discusses the problems this causes, and the solutions.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,770 posts.
5522
5523
5524
5525
It’s Official: Cars Are the Worst Category We Have Ever Reviewed for Privacy
Privacy Not Included was launched in 2017 to help you understand the privacy risks of tech products that connect to the internet. We are continuing that work in the form of Product Reviews at our magazine Nothing Personal, where our privacy experts do hours of hands-on testing and research on the most popular consumer…
5526
Quick notes about the bash bug, its impact, and the fixes so far
We spent a good chunk of the day investigating the now-famous bash bug (CVE-2014-6271), so I had no time to make too many jokes about it on...
5527
Belgium launches nationwide safe harbor for ethical hackers
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
5528
The Fallacy of Cracking Contests (1998)
In this issue: The Fallacy of Cracking Contests How to Recognize Plaintext News The Doghouse: Iomega Zip Disks Counterpane Systems News Final Report from the Commerce Department Technical Advisory Committee on Key Recovery Comments From Readers About "CRYPTO-GRAM"
5529
Guccifer 2.0 Hacked Clinton Foundation
Many of you have been waiting for this, some even asked me to do it. So, this is the moment. I hacked the Clinton Foundation server and downloaded hundreds of thousands of docs and donors’ da…
5530
You Know GDPR Is Good Based on Who Hates It
FDR has always been one of my favorite presidents, second maybe to Lincoln. Both were men the establishment assumed were one of them until, to their horror, they governed like they weren't. Both could trash the opposition in one breath and take the moral high ground in the next.
5531
GitHub Private Repos Considered Private-Ish
This week, we discovered that GitHub.com’s RSA SSH private key was briefly exposed in a public GitHub repository.
5532
The GDPR blog post
It was about 6 months ago that I was involved in my first GDPR meeting. Other people in our company had obviously been talking about it…
5533
Patronizing Passwords
Passwords suck. Let’s make them better.
5534
Until Today, If You Were 17, It Could Have Been Illegal To Read Seventeen.com
If you are 17 or under, a federal prosecutor could have charged you with computer hacking just for reading Seventeen magazine online—until today. It’s not because the law got any better. Earlier today, we wrote about news sites that alarmingly prohibit their youth audiences from accessing the news...
5535
Is duckduckgo.com partially enforcing the “celebrity threesome injunction”?
The "celebrity threesome injuction" forbids publication in England and Wales of the identities of a famous married couple who reportedly had sex with someone else. In other words, nothing bad, or important.
5536
Teach a man to phish and he’s set for life
One frustrating aspect of email phishing is the frequency with which scammers fall back on tried-and-true methods that really have no business working these days. Like attaching a phishing email to a traditional, clean email message, or leveraging link redirects on LinkedIn , or abusing an encoding method that makes…
5537
The Privacy Lesson of 9/11: Mass Surveillance Is Not the Way Forward
Congress must ensure that the next generation of Americans is able to speak and associate freely, without fear of surveillance.
5538
Running NanoClaw in a Docker Shell Sandbox
Learn how to run NanoClaw, a Claude-powered WhatsApp assistant, inside a Docker Sandboxes shell sandbox for stronger isolation and proxy-managed API keys.
5539
My Heart Bleeds for OpenSSL
Overview Today has been eventful, to say that least. My colleague and I patched several services, re-issued keys for them and started the ...
5540
Bcrypt at 25
As one of the creators of bcrypt back in 1997, I find it somewhat surprising that, 25 years later, we still rely heavily on passwords. My initial encounter with password security took place in 1993 at the University of Hamburg. Having just discovered Unix, I was fascinated by a service called Yellow Pages that allowed…
5541
Civil society in Latvia, Lithuania, and Poland targeted with Pegasus spyware
At least seven more Russian, Belarusian, Latvian, and Israeli journalists and activists have been targeted with Pegasus within the EU.
5542
DigiCert Statement on Trustico Certificate Revocation
In communications today, Trustico has suggested that the certificate revocation is due to the upcoming Google Chrome distrust of Symantec roots. That is incorrect. DigiCert wants to make it clear that the certificates needed to be revoked because Trustico sent us the private keys; this has nothing to do with future…
5543
Writing memory safe JIT compilers
How to kill off a top source of browser exploits
5544
5545
Kernel RCE in iOS/macOS with ICMP
Today, GitHub code scanning has all of LGTM.com’s key features—and more! The time has therefore come to announce the plan for the gradual deprecation of LGTM.com.
5546
Exploiting Volvo/Eicher's fleet platform to gain control over all users/vehicles
VE Commercial Vehicles’ My Eicher platform had a critical vulnerability that let you take over anyone’s account and gain control over their vehicle fleets.
5547
What Is the Secure Enclave?
The big tech news this week is that the FBI is trying to force Apple to unlock a suspect's iPhone. One of the interesting points around this story is that the iPhone in question is an older one, an iPhone 5c. Newer phones have what Apple calls the Secure Enclave, which some say protects against requests of this…
5548
Dear Mozilla, stop watching me
I have signed the StopWatching.Us letter today. I am not a US citizen, so even if the letter succeeds, I don’t think my privacy will improve substantially. But at least I did something.
5549
Hackers Can Kill Diabetics w/ Insulin Pumps? Facts vs. Fear Mongering
UPDATE: Jay Radcliffe, the researcher discussed in this post, has emailed me, a ...
5550
BitHub = Bitcoin + GitHub. An experiment in funding privacy OSS
At Open Whisper Systems, we often get emails from people who’d like to donate money to the project. For an OSS project, particularly one that aspires to a collective sense of ownership, handling donations is not always entirely straightforward. The fundamental contradiction is that while donatio...