6271
Dear Obama, from Infosec
Dear President Obama: We are more than willing to believe Russia was responsible for the hacked emails/records that influenced our electio...
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,772 posts.
6272
Some notes on the Stable Diffusion safety filter
How deep learning models are moderated
6273
6274
Mailinator.com: Anatomy of a Spammy Campaign
Mailinator is a popular disposable email service. It's also become a great tool for QA Teams to test email receipt, acknowledgment, authen...
6275
Swiss police automated crime predictions but has little to show for it
A review of 3 automated systems in use by the Swiss police and judiciary reveals serious issues. Real-world effects are impossible to assess due to a lack of transparency.
6276
'Operation Endgame' Hits Malware Delivery Platforms
Law enforcement agencies in the United States and Europe today announced Operation Endgame , a coordinated action against some of the most popular cybercrime platforms for delivering ransomware and data-stealing malware. Dubbed “the largest ever operation against botnets,” the international effort is being billed as…
6277
Phishing Campaigns Targeting USPS See as Much Web Traffic as the USPS Itself
A USPS smishing attempt prompts the Akamai SIG to unearth shocking statistics: Illegitimate USPS domains see as much traffic as the legitimate USPS domain.
6278
6279
Violence-as-a-Service: Brickings, Firebombings and Shootings for Hire
A 21-year-old New Jersey man has been arrested and charged with stalking in connection with a federal investigation into groups of cybercriminals who are settling scores by hiring people to carry out physical attacks on their rivals. Prosecutors say the defendant recently participated in several of these schemes …
6280
The first serious infowar is now engaged
by John Perry Barlow Governments of the Industrial World, you weary giants of flesh and steel, I come from Cyberspace, the new home of Mind. On behalf of the future, I ask you of the past to leave us alone. You are not welcome among us. You have no sovereignty where we gather.We have no elected...
6281
6282
6283
You can't contain me: elevation-of-privilege vulnerability in Docker for Windows
I have been continuing my journey of searching for windows breakout vulnerabilities in popular applications and one that I discovered in March I found intere...
6284
Linkedin's Response to My "Phishing with Intro" Post
Security and Programming Blog
6285
Google open sourced PSP (hardware cryptographic offload)
We’re making the PSP Security Protocol for offloading encryption to network interface cards open source today. Here’s why.
6286
Mythology About Security
Ed Felton tweeted a few days ago: “Often hear that the reason today’s Internet is not more secure is that the early designers failed to imagine that security could ever matter. That is a myth…
6287
A quiet change to RSA
Over the course of years, RSA implementations gradually replaced Euler's totient function with Carmichael's totient function.
6288
How Heartbleed could've been found
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
6289
OAuth 3.0: the sane and simple way
I'm Tav, a 28-year old from London. I enjoy working on large-scale social, economic and technological systems.
6290
US Senator: What Do Our Cars Know? and Who Do They Share That Information With?
U.S. Senator Ed Markey of Massachusetts has sent a much-needed letter to car manufacturers asking them to clarify a surprisingly hard question to answer: what data cars collect? Who has the ability to access that data? Private companies can often be a black box of secrecy that obscure basic facts...
6291
Arguments Supporting Warrantless Surveillance Wither When Exposed to Sunlight
The government recently declassified a secret letter, written in 2002 laying out the executive branch’s initial legal justifications for the vast expansion of electronic surveillance after September 11, 2001. Like many others, it was written by former DOJ Office of Legal Counsel attorney John Yoo,...
6292
6293
Fun with Shellshock
This is great work. Though I must confess I’m more interested (and far more uneasy) about the other side of the coin — people developing projects like these involving machine learning to find and exploit the vulnerabilities in a fully automated fashion. This is related to, but not quite the same as, attempts at…
6294
Making Containers More Isolated: An Overview of Sandboxed Container Technologies
Currently available container-based infrastructure has limitations because containers are not truly sandboxed and share the host OS kernel. The root of the problem is the weak separation between containers when the host OS creates a virtualized userland for each container. This blog covers four unique projects from…
6295
AWS Nitro Enclaves: Attack Surface
In the race to secure cloud applications, AWS Nitro Enclaves have emerged as a powerful tool for isolating sensitive workloads. But with great power comes great responsibility-and potential security pitfalls. As pioneers in confidential computing security, we at Trail of Bits have scrutinized the attack surface of AWS…
6296
An overview of the top web hacking techniques of 2017
The verdict is in! Following 37 nominations whittled down to a shortlist of 15 by a community vote, our panel of experts has conferred and selected the top 10 web hacking techniques of 2017 (and 2016)
6297
Deceptions, Misinformation, and Word Games Used to Mislead About Surveillance
It’s been two months since President Barack Obama first said that he welcomes a debate about NSA surveillance, which he once again reiterated last week at his press conference. Unfortunately, it’s very hard to have a real debate about a subject when the administration constantly and intentionally...
6298
Is Google reCAPTCHA GDPR Compliant?
Achieve engineered efficiency, uncompromising quality, and long-term stability with our software solutions. We optimize your processes, ensure resilience, and support your growth—so you can focus on what matters most.
6299
6300
Big Time Public License
a FRAND-ly license for software