6451
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,772 posts.
6452
A look at home routers, and a surprising bug in Linux/MIPS
Xôi Lạc TV là địa chỉ theo dõi bóng đá trực tuyến được người dùng đánh giá cao. Với hàng loạt giải đấu được phát sóng miễn phí cùng nhiều thông tin được cập nhật như lịch thi đấu, kết quả, bảng xếp hạng, tỷ số và những tin tức thể thao đáng chú ý.
6453
ISP Advertisement Injection - CMA Communications
Apple Inc. endorsing H&R Block with a beautiful bright green banner ad, compliments of CMA Communications. Tired from the day’s ev...
6454
Why We’re Suing NSO
Some of the most courageous journalists in the world write for El Faro, a Salvadoran news organization whose fearless, independent reporting about corruption, violence, and human rights abuses in Central America has earned it the gratitude of readers all over the world—and the enmity of criminal gangs and…
6455
So I lost my OpenBSD FDE password (2016)
The other day I set up a new OpenBSD instance with a nice RAID array, encrypted with Full Disk Encryption. And promptly proceeded to forget part of the passphrase.
6456
“YOLO” is not a valid hash construction
Among the cryptographic missteps we see at Trail of Bits, “let’s build our own tool out of a hash function” is one of the most common. Clients have a problem along the lines of “we need to hash a bunch of different values together” or “we need a MAC” or “we need […]
6457
Microsoft Uses Trademark Law to Disrupt Trickbot Botnet
Microsoft Corp. has executed a coordinated legal sneak attack in a bid to disrupt the malware-as-a-service botnet Trickbot , a global menace that has infected millions of computers and is used to spread ransomware. A court in Virginia granted Microsoft control over many Internet servers Trickbot uses to plunder…
6458
6459
Yahoo Japan's password-free authentication reduced inquiries, sped up sign-in
Yahoo! JAPAN achieved a passwordless identity system. Learn their approach and the consequences of the effort.
6460
6461
6462
Myspace lets you hijack any account just by knowing the person’s birthday
In April this year whilst roaming the plains of the wild world web, I stumbled across an old Myspace account of mine. Attempting to gain access and delete the account I discovered a business process so flawed it deserves its own place in history. I wrote to Myspace describing my
6463
Mandiant Exposes APT1, One of China’s Cyber Espionage Units
Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.
6464
Equifax or Equiphish?
More than a week after it said most people would be eligible to enroll in a free year of its TrustedID identity theft monitoring service, big three consumer credit bureau Equifax has begun sending out email notifications to people who were able to take the company up on its offer. But in yet another security stumble…
6465
Linux Threat Hunting: ‘Syslogk’ a kernel rootkit found in the wild
Syslogk Rootkit Revealed: Analysis
6466
Ukrainian Billionaires Allegedly Laundered Money in the US
Ukraine’s largest bank is taking its battle with its former owners to US shores. In a civil lawsuit filed in the state court of Delaware, PrivatBank accuses Ihor Kolomoisky and Gennady Bogolyubov, the billionaires who owned the bank before it was nationalized three years ago, of large-scale money laundering in the…
6467
I Hacked My Car Guides: Creating Custom Firmware
Notice Note: As of 2022/10/25 the information in this series is slightly outdated. See Part 5 for more up to date information. I take no responsibility for any damages due to the information or steps provided on this site. The content is for educational purposes only. You modify your own car’s firmware at your…
6468
GnuPG - 16 Years of protecting privacy
In case you are not automatically redirected, please follow this link to https://gnupg.org/blog .
6469
Good Bad ISPs
Defend yourself against tracking and surveillance. Circumvent censorship. | Good Bad ISPs
6470
Bypassing Gemma and Qwen safety with raw strings
How a Single Function Call Gates Safety Alignment in Gemma, Qwen, and Other Open-Source LLMs
6471
Details Behind Today's Internet Hacks
At 1:19pm, a researcher noticed that the New York Times' website wasn't loading. We know the New York Times tech team, so we emailed to check in. Minutes later, the CTO of the NYT called us back.
6472
OWASP Data Breach Notification
OWASP Data Leak Notification on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.
6473
Stop adding email tracking links to phone numbers
My Chinese takeaway delivery was late. Very late. I flipped open the confirmation email sent by Just-Eat to double-check I had all the details correct. At the bottom was a "click to call" link. Hurrah! I clicked dial, and this is what filled my screen: An absurdly long phone number. Bemused, I went to inspect the link…
6474
Look before you paste from a website to terminal
All about making life easier and efficient with Linux
6475
6476
ReBreakCaptcha: Breaking Google’s ReCaptcha v2 Using Google
TL;DR A logic vulnerability, dubbed ReBreakCaptcha, which lets you easily bypass Google’s ReCaptcha v2 anywhere on the web. Overview Back in 2016, I started poking around to see how hard it w…
6477
Breaking SecuROM 7 – A Dissection
This is an archive of an old whitepaper made by three reverse engineering experts on breaking down SecuROM and its multiple layers of protection. Archive Opening NotesAs mentioned, this is a whitepa
6478
Write Fuzzable Code
“An obvious way to deal with embedded interpreters — which someone must have thought of and tried, but I don’t have any pointers — would be to have an API for teaching the fuzzer how to see coverage of the language being interpreted.”
6479
Weaponizing PostScript
In a recent pentesting assignment, there was a service which converted uploaded files to PDF/A format, to make them safer for handling. Afte...
6480
Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
Posted by Sergei Glazunov and Mark Brand, Project ZeroIntroductionIt was a normal week in the Pro...