6721
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,772 posts.
6722
6723
Threat Actors Now Target Docker via Container Escape Features
We provide a technical analysis of a container abuse attack that features a payload that’s specifically crafted to be able to escape privileged Docker containers.
6724
6725
The Prosecution of Aaron: A Response to Orin Kerr
Aaron Swartz committed suicide last week. He was 26, a genius and my friend. Not a really good friend, but someone I had worked with off and on for 11 years, liked a lot, had laughed with frequently, occasionally shaken my head over and deeply admired. When I first met him he looked like this.
6726
New SysJoker Backdoor Targets Windows, Linux, and macOS
In December 2021, we discovered a new multi-platform backdoor that targets Windows, Mac, and Linux that we have named SysJoker.
6727
Equinix: Major Accounting Manipulation, Core Business Decay
Initial Disclosure: After extensive research, we have taken a short position in shares of Equinix, Inc. (NASDAQ:EQIX). This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.
6728
Heartbleed and Static Analysis
The issue with things like Frama-C is that they are by far the easiest to use if you start out a project using them, and you often don’t know which projects you retroactively wished you had done so until they are big and crufty.
6729
The Backbone of Cybersecurity: Hardware Security Modules
Discover how Hardware Security Modules (HSMs) provide robust security solutions for managing cryptographic keys and protecting sensitive data in various industries.
6730
Tinder's lack of encryption allows spying
The Sophos Blog
6731
Capsicum
I spent a couple of years evangelizing about Capsicum. I wrote many articles about it. So, it is very natural that I would also like to update you on this blog about the progress of the Capsicum project in FreeBSD, because this is what I’m doing in my free time. That said I feel that this blog wouldn’t be completed…
6732
New debugging method found undetected security flaws in popular web apps
By exploiting some peculiarities of the popular Web programming framework Ruby on Rails, MIT researchers have developed a system that can quickly comb through tens of thousands of lines of application code to find security flaws.
6733
6734
Cloudflare deploys protections against php2shell vulnerability
Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers.
6735
New Cryptographic Tools on Keybase
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
6736
Tor Browser User Manual
The community team is excited to announce the new Tor Browser User Manual! The manual is...
6737
Gitlab Support is no longer processing MFA resets for free users
From August 15th, GitLab Support will no longer be manually removing MFA from free accounts.
6738
I cannot consistently write safe C/C++ code
Robert O'Callahan. Christian. Kiwi. Software guy. All content human-authored unless otherwise noted.
6739
Manifest V3, webRequest, and ad blockers
Vivaldi comes with its own built-in Ad and Tracker Blocker, tons of customization options, a built-in Mail and Calendar, and more. Will it follow Google’s strict reliance on Manifest V3?
6740
6741
6742
Snowden-haters are on the wrong side of history
In the autumn on 1963, J. Edgar Hoover’s FBI, worried at Martin Luther King’s growing influence, began tapping his phones and bugging his hotel rooms. They hoped to discredit him by gai…
6743
6744
6745
Thinking of a Cybersecurity Career?
Thousands of people graduate from colleges and universities each year with cybersecurity or computer science degrees only to find employers are less than thrilled about their hands-on, foundational skills. Here’s a look at a recent survey that identified some of the bigger skills gaps, and some thoughts about how…
6746
Help I accidently enabled HSTS on localhost
I ran into an issue after accidently enabling HSTS for a website on localhost. This was not an issue for the original website that was runni...
6747
6748
PGP needs to be retired in honor
personal ramblings, noone cares about
6749
Rediscovering the Intel AMT Vulnerability
On May 1, 2017 Intel disclosed the AMT vulnerability (INTEL-SA-00075), but details of that vulnerability were not made public. However, Tenable researchers were able to overcome this challenge and make Tenable the first to deliver Intel AMT vulnerability detection capabilities to customers, just minutes after Intel’s…
6750
Kevin Mitnick Hacked California Law in 1983
Early in his career, Kevin Mitnick successfully hacked California law. He told me the story when he heard about my new book, which he partially recounts his 2012 book, Ghost in the Wires. The setup is that he just discovered that there’s warrant for his arrest by the California Youth Authority, and he’s trying to…