6631
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,772 posts.
6632
How de-Googled is Lineage OS?
Lineage OS is based on the Android Open-Source Project, whose primary maintainer is Google. To what extent can it be considered Google-free?
6633
Disinformation-for-hire in Kenya
Mozilla Fellows Odanga Madung and Brian Obilo reveal that Kenyan journalists, judges, and other members of civil society are facing coordinated disinformation campaigns on Twitter — and the site is doing very little to stop it.
6634
9M Australians affected by Optus data breach
Optus notifies customers of a cyberattack that has allowed unauthorised access to customers personal information.
6635
6636
Dangerous bug in Chrome’s ‘New Tab’ page bypassed security features
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
6637
6638
Tesla Wall Connector bootloader bypasses the firmware downgrade ratchet
Exploiting the Tesla Wall Connector from its charge port connector -
6639
I Read the Entire Cybersecurity Executive Order; Here's What You Need to Know
Cybersecurity is hard enough. Doing it across federal agencies is a mammoth task.
6640
Parallel Reconstruction of Lawful TLS Wiretapping
Transport Layer Security (TLS) is the protocol involved in getting the lock icon to appear in your browser next to the URL. Under the hood it uses a bunch of really cool numbers for encryption. Some numbers are considered private and need securing; some are considered public and are fine for sharing. You can mix your…
6641
Encrypting files with passkeys and age
Encrypting files with passkeys, using the WebAuthn prf extension and the TypeScript age implementation.
6642
Improved Authentication for Email Encryption and Security
Today, we are happy to become the first and only secure email service to support Secure Remote Password (SRP), a much more secure authentication method.
6643
Long-Term Consequences of Spectre and Its Mitigations
Robert O'Callahan. Christian. Kiwi. Software guy. All content human-authored unless otherwise noted.
6644
Dear Search Guard Users
We’ve filed a lawsuit against the makers of Search Guard. Here is what we know, the actions we’re taking, and potential impact to Search Guard users.
6645
FIDO2 security key company publishes results of internal security audit
This blogpost summarizes the result of a cooperation between SoloKeys and Doyensec, and was originally published on SoloKeys blog by Emanuele Cesena. You can...
6646
6647
Why the Sanitizer API is just `setHTML()`
Why the Sanitizer API is just <code>setHTML()</code>
6648
Security flaws caused by compiler optimizations
Learn how to optimize compilers for enterprise-wide automation, avoiding pitfalls with examples and solutions.
6649
6650
PyPI Preventing Domain Resurrection Attacks
PyPI now checks for expired domains to prevent domain resurrection attacks, a type of supply-chain attack where someone buys an expired domain and uses it to take over PyPI accounts through password resets.
6651
How Organized Spam is Taking Control of Google's Search Results
In the past few months, I have been watching a very unsettling trend unfold in very competitive ecommerce search results on Google. It appears that huge amounts of money are put into place to systematically and successfully manipulate highly competitive search terms in order to sell fake…
6652
6653
Protecting NATS and the integrity of open source
Updated May 1, 2025: CNCF and Synadia have come to an agreement to ensure that NATS continues to thrive as a healthy open source project within CNCF, with Synadia’s continued support and involvement.
6654
I could send any text message from Indian government IDs
Sometimes, you don’t necessarily need to hack a system to exploit it.
6655
7M Adobe Creative Cloud Accounts Exposed to the Public
A data exposure of 7 million Adobe Creative Cloud account records could put users at risk of targeted phishing.
6656
LeftoverLocals: Listening to LLM responses through leaked GPU local memory
We are disclosing LeftoverLocals: a vulnerability that allows recovery of data from GPU local memory created by another process on Apple, Qualcomm, AMD, and Imagination GPUs. LeftoverLocals impacts the security posture of GPU applications as a whole, with particular significance to LLMs and ML models run on impacted…
6657
SecretSpec: Declarative Secrets Management
Fast, Declarative, Reproducible, and Composable Developer Environments using Nix.
6658
Finland: New surveillance law threatens fundamental rights (2015)
Finnish EDRi member Electronic Frontier Finland (Effi) is gravely concerned over a draft law on Internet surveillance. The bill that the country’s current government is in the process of preparing will grant the military and the Finnish Security Intelligence Service (Supo) the authority to conduct electronic mass…
6659
A framework to securely use LLMs in companies – Part 1: Overview of Risks
Part 1 of a multi-part series on using LLMs securely within your organisation. This post provides a framework to categorize risks based on different use cases and deployment type.
6660
Kernel Pwning with eBPF: A Love Story
How are low-level vulnerabilities exploited and detected in the modern age? This expert guide walks you through the ins and outs of eBPF and Kernel security.