Topics /

Security & Privacy

The most popular blog posts about security & privacy on Hacker News. 473 posts.

2015
33

Auditing GitHub users’ SSH key quality

If you have just/as of late gotten an email about your keys being revoked, this is because of me, and if you have, you should really go through and make sure that no one has done anything terrible to you, since you have opened yourself to people doing very mean things to you for what is most likely a very long time.

35

Truecrypt report

A few weeks back I wrote an update on the Truecrypt audit promising that we’d have some concrete results to show you soon. Thanks to some hard work by the NCC Crypto Services group, soon is n…

39

Section 215 Expires For Now

Senate to Vote on USA FREEDOM Act Later in the WeekSection 215 has expired. At least for now.The law that the NSA used to authorize its collection of vast amounts of information about the telephone calls of ordinary Americans is no more. Even though it’s likely temporary, it’s a good thing and we...

45

One in every 600 websites has .git exposed

Deeply technical and hands-on AI and tech leader. Built, scaled and sold my own… · Experience: Cubes · Education: Nanzan University · Location: London Area, United Kingdom · 500+ connections on LinkedIn. View Jamie Brown’s profile on LinkedIn, a professional community of 1 billion members.

48

Who Hacked Ashley Madison?

AshleyMadison.com , a site that helps married people cheat and whose slogan is “Life is Short, have an Affair,” recently put up a half million (Canadian) dollar bounty for information leading to the arrest and prosecution of the Impact Team — the name chosen by the hacker(s) who recently leaked data on more than 30…

59

Introducing s2n, a New Open-Source TLS Implementation

February 22, 2022: s2n has been renamed to s2n-tls. See details. At Amazon Web Services, strong encryption is one of our standard features, and an integral aspect of that is the TLS (previously called SSL) encryption protocol. TLS is used with every AWS API and is also available directly to customers of many AWS…