6691
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,772 posts.
6692
6693
6694
A persistent denial of service vulnerability affecting iOS
This domain is for use in documentation examples without needing permission. This is not a service; avoid relying on it for testing and monitoring purposes.
6695
The NSA Continues to Violate Americans' Internet Privacy Rights
A federal court will be scrutinizing one of the National Security Agency’s worst spying programs on Monday. The case has the potential to restore crucial privacy protections for the millions of Americans who use the internet to communicate with family, friends, and others overseas.
6696
Advanced Tor Browser Fingerprinting
The ability to privately communicate through the internet is very important for dissidents living under authoritary regimes, activists and basically everyone concerned about internet privacy.
6697
Dissecting an SSL Certificate (2017)
Dissecting an SSL certificate
6698
The Final Answer For What To Do To Prevent Piracy [of Indie Games]
(For some reason, Blogger deleted this post. I have recreated it. Sorry for any comments that were lost.) This article is my decisive sta...
6699
Leaf-Node Weakness in Bitcoin Merkle Tree Design
This document describes a weakness in Bitcoin Design that reduces the security of SPV proofs and therefore SPV Wallets. The weakness was discovered by me on August 2017, but during the responsable…
6700
Tails installer is now in Debian
Tails (The amnesic incognito live system) is a live OS based on Debian GNU/Linux which aims at preserving the user's privacy and anonymity by using the Internet anonymously and circumventing censorship. Installed on a USB device, it is configured...
6701
37C3: Fuzzing the TCP/IP Stack
Our exploration begins with an honest appraisal of traditional fuzzing methodologies that have been applied to TCP/IP stacks before, like ISIC, revealing their inherent limitations, e.g., they can't reach beyond the TCP initial state. Recognizing the need for a more evolved approach, we take a different approach…
6702
Stopping FTP support in Firefox 90
The File Transfer Protocol (FTP) has long been a convenient file exchange mechanism between computers on a network. While this standard protocol has been supported in all major browsers ...
6703
Memory safety absolutists
When seeing the title of this post, I bet in some people's minds, the first thought was "Rust devs!". This connection is not unfounded. Rust devs tend to be passionate about memory safety. Some of it, I'm sure, may have been caused by a classic language wars attitude: my language is better than yours, and here is why…
6704
Minnesota Wants to Ban Under-18s from User-Generated Content Services
As part of an omnibus bill, the Minnesota House of Representatives passed a troubling bill restricting how under-18 users engage with user-generated content (UGC) services. [At the bottom of this post, I’ve included the text as passed by the Minnesota...
6705
The Difficulty of Private Contact Discovery
Building a social network is not easy. Social networks have value proportional to their size, so participants aren’t motivated to join new social networks which aren’t already large. It’s a paradox where if people haven’t already joined, people aren’t motivated to join. The trouble is that whi...
6706
Cisco Adaptive Security Appliance SNMP Remote Code Execution Vulnerability
A vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area. The…
6707
Excess Automobile Deaths as a Result of 9/11
People commented about a point I made in a recent essay: In the months after 9/11, so many people chose to drive instead of fly that the resulting deaths dwarfed the deaths from the terrorist attack itself, because cars are much more dangerous than airplanes. Yes, that’s wrong. Where I said “months,” I should have…
6708
Why FPGA manufacturers keep their bitstream formats secret
Every FPGA vendor keeps the bitstream format for their device secret. Only the tools provided in binary-only format by the vendor (and a select few third parties under NDA) can generate these bitstreams.
6709
1% of CMS-Powered Sites Expose Their Database Passwords (2011)
Feross Aboukhadijeh is a computer security researcher, teacher, web developer, designer, long distance runner, gamer, music lover, and builder of websites that (sometimes) go viral.
6710
Thinking About Smart Contract Security
Over the last day with the community's help we have crowdsourced a list of all of the major bugs with smart contracts on Ethereum so far, including both the...
6711
Critical RCE Vulnerabilities in React and Next.js
React2Shell (CVE-2025-55182) is a critical RCE vulnerability in React Server Components. Learn which versions are impacted and how to mitigate.
6712
Lawsuit challenges Virginia City's use of cameras for warrantless surveillance
NORFOLK, Va.—Today, two Norfolk-area residents teamed up with the Institute for Justice (IJ) to file a federal lawsuit against the city, challenging the constitutionality of […]
6713
Ad-tech is fascist tech
A core tenet of the enshittification hypothesis is that all the terrible stuff we're subjected to in our digital lives today is the result of foreseeable (and foreseen) policy choices, which created the enshittogenic policy environment in which the worst people's worst ideas make the most money:
6714
Sendy Is Insecure: How Not to Implement ReCAPTCHA
Sendy's reCAPTCHA implementation doesn't do anything.
6715
6716
The Internet of Things Will Be the World's Biggest Robot
The Internet of Things is the name given to the computerization of everything in our lives. Already you can buy Internet-enabled thermostats, light bulbs, refrigerators, and cars. Soon everything will be on the Internet: the things we own, the things we interact with in public, autonomous things that interact with…
6717
Reverse Engineering US Airline's PNR System and Accessing All Reservations
Timeline & Responsible Disclosure
6718
Disable Your SSH access accidentally with scp
Here's an interesting bug I ran into recently: After transferring some files to my server via scp, I couldn't log in via SSH anymore - my key was rejected by sshd.
6719
How to Find Facebook Users on Match.com by Using Face Recognition Tools
黄色福利站-2022国语高清视频播放,粗大猛地挺进娇喘啊在线视频-国产不卡青柠影院-久久草网-未删减1080P迅雷高清下载
6720
Brute Force Incognito Browsing
Both Firefox and Chrome have a feature for creating temporary private browsing sessions. Firefox calls it Private Browsing and Chrome calls it Incognito Mode . Both work essentially the same way. A temporary browsing session is started without carrying over most existing session state (cookies, etc.), and no state…