5731
GKE Sandbox: Independent operating system kernel to each container
Help lock down your containers with these Kubernetes Engine features and guidance
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,770 posts.
5732
On the Perceived Value of EV Certs, Commercial CAs, Phishing and Let's Encrypt
Last week I wrote about how Life Is About to Get a Whole Lot Harder for Websites Without HTTPS [https://www.troyhunt.com/life-is-about-to-get-harder-for-websites-without-https/]. Somewhere in the comments there, the discussion went off on a tangent about commercial CAs, the threat
5733
The new .zip TLD is going to cause some problems
Many years ago, Google applied for the .zip Top Level Domain. ICANN, in its infinite wisdom, granted it. And now, I think, bad things are going to happen. You see computers try to be helpful. They see you wrote "visit example.com" and autolink the thing which looks like a domain name. That's handy - especially as most…
5734
5735
I accidentally made law enforcement shut down their fake honeypot
How I stumbled across a fake booter site run by international police, and how they panicked when I started digging
5736
Exploiting null-dereferences in the Linux kernel
Posted by Seth Jenkins, Project Zero For a fair amount of time, null-deref bugs were a highly e...
5737
Poison everywhere: No output from your MCP server is safe
Protect your organization with Idira®. Modernize identity governance, automate access reviews, and secure every identity across your hybrid cloud environment.
5738
CPanel and WHM Authentication Bypass – CVE-2026-41940
Hello! Yes, it's all a disaster again! Let's get this party started: 0:00 /0:12 1× No comments today, so imagine this: * We wrote something that we find very funny, * Nobody else gets it, * But everyone humors us Just like a typical watchTowr Labs blog introduction. As
5739
Mind the encryptionroot: How to save your data when ZFS loses its mind
While ZFS has a well-earned reputation for data integrity and reliability, OpenZFS native encryption has some incredibly sharp edges that will cut you if you don't know where to be careful. Unfortunately, I learned this the hard way, standing in a pool of my own blood and tears after thoroughly lacerating myself…
5740
5741
What happens when DNS in China is poisoned and pointed at your server
I’ve been using the Internet in one form or another since the mid-80’s. In that time, I’ve seen a lot of strange stuff happening on our global network. On Tuesday, I experienced something extraordinary. It all started with a text message from my partner Ged at 8:30 AM: Mail server down. Please take a look […]
5742
5743
Illinois General Assembly passes bill to ban citizens from recording police
The Illinois General Assembly just passed a bill that would prevent citizens from recording the police.
5744
Sandboxing and workload isolation
Documentation and guides from the team at Fly.io.
5745
Mitmproxy 9: WireGuard Mode
We’re excited to announce the release of mitmproxy 9, a free and open source interactive HTTPS proxy. This release brings support for raw UDP and DTLS, a new WireGuard proxy mode, and major usability improvements.
5746
What is the randomart image for?
When you generate an SSH key (like I did when looking at signing commits with SSH keys ), you get a “randomart image” from ssh-keygen . These things:
5747
5748
5749
EFF Dismayed by House's Gutted USA Freedom Act
EFF and Other Civil Liberties Organizations Call on Congress to Support Uncompromising Reform Since the introduction of the USA FREEDOM Act, a bill that has over 140 cosponsors, Congress has been clear about its intent: ending the mass collection of Americans' calling records. Many members of...
5750
NPM Package Hijacking From the Hijacker's Perspective
In light of recent events in the javascript community, I would like to share the story of how I came into control of more than 200 heavily…
5751
5752
EFF Challenges National Security Letter Statute in Landmark Lawsuit
Since the first national security letter statute was passed in 1986, the FBI has issued hundreds of thousands of such letters seeking private telecommunications and financial records of Americans without any prior approval from courts. Indeed, for the period between 2003 and 2006 alone, almost 200,...
5753
Practical HTTP Header Smuggling: Sneaking Past Reverse Proxies to Attack AWS
Modern web applications typically rely on chains of multiple servers, which forward HTTP requests to one another. The attack surface created by this forwarding is increasingly receiving more attention, including the recent popularisation of cache poisoning...
5754
Open-sourcing Sandboxed API
Posted by Christian Blichmann & Robert Swiecki, ISE Sandboxing team Many software projects process data which is externally generated, and...
5755
Uber Hacking: How we found out who you are, where you are and where you went
Here at Integrity we love to be challenged, so whenever there is some free time, there is encouragement to do research or to break some things ( https://labs.integrity.pt/advisories/ ) in addition to play foosball.
5756
EFF to Court: Government Must Inform People That It’s Accessing Their Data
Seattle, Washington—The Electronic Frontier Foundation (EFF) told a federal court today that the government is violating the U.S. Constitution when it fails to notify people that it has accessed or examined their private communications stored by Internet providers in the cloud. EFF is supporting...
5757
Why to not use JWT (2021)
We build advanced web apps
5758
HipChat Will Grant Employers Access To 1-to-1 Chat History
Atlassian and Slack have forged a new strategic partnership.
5759
Real vs. fake AirPods with industrial CT
CT scans of counterfeit AirPods Pro and MagSafe chargers reveal pouch cell batteries in circular cavities, internal weights, and a fake ground pin.
5760
Some discouraging anecdotes on how services handle account deletions
I asked 124 services to delete my user account. The results were mixed. 21 never responded, and 16 responded by created even more accounts. Some outright lied.