6301
The fresh smell of ransomed coffee
How a simple coffee maker became a cybersecurity nightmare
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,772 posts.
6302
I made 20 GDPR deletion requests. 12 were ignored
I made 20 GDPR data deletion requests in the past year. 2 complied immediately. 6 complied after I filed complaints with data protection offices. 12 still haven't. The regulation exists, the enforcement doesn't.
6303
6304
Tethered Jailbreaks Are Back
Earlier today, a new iPhone Boot ROM exploit, checkm8 (or Apollo or Moonshine), was published on GitHub by axi0mX, affecting the iPhone 4S through the iPhone X. The vulnerability was patched in devices with A12 and A13 CPUs. As of this writing, the iPhone XS, XS Max, XR, 11, 11 Pro and 11 Pro Max […]
6305
We've learned nothing from the SolarWinds hack
Mac's Tech Blog
6306
6307
6308
TunnelBear Joins McAfee
TunnelBear joins McAfee but will continue to develop the bear-filled products you've come to know and love.
6309
Python malware starting to employ anti-debug techniques
First time anti-debug techniques are discovered in PyPI malware. Read how these techniques are implemented, including analysis and tips from JFrog Security Research.
6310
Why Did Satoshi Decide to Use Secp256k1 Instead of Secp256r1?
Secp256k1 and secp256r1 are two commonly used curves. Hyperledger / Fabric developed by IBM is using secp256r1 while Bitcoin is using secp256k1. What is the difference between these two and why did Satoshi decide to use secp256k1 which is considered as a surprising choice at the time?
6311
6312
6313
Magento eCommerce PHP Remote Code Execution
Critical remote code execution vulnerability in Magento (SUPEE-5344). Patch immediately. Affects 200,000 stores. Includes patch download and analysis.
6314
A Declaration of the Independence of Cyberspace (1996)
by John Perry Barlow Governments of the Industrial World, you weary giants of flesh and steel, I come from Cyberspace, the new home of Mind. On behalf of the future, I ask you of the past to leave us alone. You are not welcome among us. You have no sovereignty where we gather.We have no elected...
6315
Buenos Aires Censors and Raids the Technologists Fixing Its E-Voting System
Buenos Aires is currently in the middle of electing its mayor and city council. With a first round that took place on July 5th, and a second round due on July 19th, the election is the first time Argentina's capital city has used an electronic voting system called Vot.ar, created by local company...
6316
TrueCrypt Master Key Extraction And Volume Identification
One of the disclosed pitfalls of TrueCrypt disk encryption is that the master keys must remain in RAM in order to provide fully transparent...
6317
An Opinionated Yubikey Set-Up Guide
How to set up a YubiKey 5 in 2023.
6318
Cryptography behind the top cryptocurrencies
This table is based on research at Nash for work expanding our MPC protocol to secure wallets on new blockchains. We took a snapshot of rankings by market cap in early February 2021. In summary, 74 coins use ECDSA and the secp256k1 curve, including Bitcoin, Ethereum, and 48 ERC20 tokens. 10 coins use EdDSA and…
6319
Home Made TPM2.0 Module
Introduction With the recent launch of Windows 11 Microsoft also made having a hardware TPM module mandatory. Although this technology is not new (it was introduced in Windows 10 and Windows Server…
6320
6321
6322
Why Apple's iPhone encryption won't stop NSA
Recent news headlines have made a big deal of Apple encrypting more of the storage on their handsets, and claiming to not have a key. Depend...
6323
Reconstructing Public Keys from Signatures
One weird hobby of mine is reasonable properties of cryptographic schemes that nobody promised they do or don’t have. Whether that’s invisible salamanders or binding through shared secr…
6324
Lessons learned while protecting Gmail
Posted by Elie Bursztein - anti-abuse & security research, Nicolas Lidzborski - Gmail security engineering, and Vijay Eranti - Gmail anti-abus...
6325
6326
DuckDuckGo Founding Member in Global Privacy Control Standards Effort
We're proud to announce the launch of Global Privacy Control (GPC), a new standard to put privacy protection in the hands of consumers.
6327
6328
RediShell: Critical remote code execution vulnerability in Redis
A 13‑year Redis flaw (CVE‑2025‑49844) allows attackers to escape Lua sandbox and run code on hosts. See Wiz Research’s analysis and mitigations.
6329
6330
Hackers influence ChatGPT and Gemini to direct users to scam centers
Think you can trust AI to give you correct answer? Think again.