6781
First modern coreboot server platform
With our expertise we create security solutions which are robust and easy to use, leveraging leading open source technology.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,772 posts.
6782
How I verify data breaches
Let me start with this headline [http://www.reuters.com/article/us-cyber-passwords-idUSKCN0XV1I6]: Other headlines went on to suggest that you need to change your password right now [http://www.iflscience.com/technology/millions-passwords-hotmail-gmail-and-yahoo-have-been-stolen] if you're using the likes
6783
Aadhaar isn’t progress – it’s dystopian and dangerous
Mitchell Baker and Ankit Gadgil: India should pause further roll out of Aadhaar until a law protecting individual security is passed.
6784
Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolver (TRR) Comment Period
We're crowdsourcing ideas and recommendations to help us enhance the privacy and security benefits of DNS-over-HTTPS (DoH) for users around the world
6785
2018 reform of EU data protection rules
Find out what your organisation must do to comply with the GDPR and learn how you can help individuals to exercise their data protection rights.
6786
6787
Gas Theft Gangs Fuel Pump Skimming Scams
Few schemes for monetizing stolen credit cards are as bold as the fuel theft scam: Crooks embed skimming devices inside fuel station pumps to steal credit card data from customers. Thieves then clone the cards and use them to steal hundreds of gallons of gas at multiple filling stations. The gas is pumped into…
6788
Would Rust Secure Curl?
Rewriting programs in Rust has become a bit of a meme and one program that has been discussed a lot is cURL .
6789
SQLite does not do checksums
SQLite does not do checksums by default. Disk corruptions go silently unnoticed.
6790
DNS Security: Threat Modeling DNSSEC, DoT, and DoH
There's been a lot of talk about DNS-over-HTTPS aka DoH lately, primarily due to Mozilla's and Google's respective plans to move forward with enabling it in their browsers. There's also a lot of misunderstanding and conflation of speculated plans for world domination with practical benefits of the technology; it…
6791
Tailscale’s human-scale networks are still controlled by Google and Microsoft
I’m not sure if they realize it yet, but Tailscale seems to work extremely well for polycules. Each user can have their own single-user Tailnet and explicitly share specific machines with other people. Both parties have to consent to sharing a device; either party can revoke this consent. The device owner can further…
6792
The Tapplock IoT padlock has multiple security vulnerabilities
The Sophos Blog
6793
Welcome to the Strip Mining Era of OSS Security
In 2026, LLM-powered code scanners are uncovering security vulnerabilities in open source projects at 10x the historical rate. Here's what OSS maintainers and users need to do about it.
6794
Deprecating password authentication in GitHub API
Get started with one of our guides, or jump straight into the API documentation.
6795
6796
DKIM: Show Your Privates
If you’re like most people, there’s a good chance that it’s been years since you’ve sent an email that wasn’t cryptographically signed. You don’t use PGP, you say? Well, even if you are…
6797
GPT 5.6 Cyber
Meet GPT-5.6-Cyber, OpenAI’s cybersecurity-specific model available through Daybreak Red for authorized vulnerability research, exploit validation, and security testing.
6798
First-ever DNSSEC root key rollover
DNSSEC is a system of digital signatures that prevent DNS spoofing. Using DNSSEC, it does not matter where your DNS answers came from, since the DNS resolver or application can verify the DNSSEC signatures to ensure the DNS data is not tampered with..DNS is hierarchical, which means that the parent zone vouches for…
6799
The browser's biggest TLS mistake
Much like a previous talk of mine at Chaos Computer Congress this blog post is a direct write-up of a talk, if you prefer to consume this kind of content in video form you can watch the video here:
6800
RSA warns developers not to use RSA products
In today’s news of the weird, RSA (a division of EMC) has recommended that developers desist from using the (allegedly) ‘backdoored’ Dual_EC_DRBG random number generator — w…
6801
6802
6803
Study: Effectiveness of Apple's app tracking transparency
Does it stop third-party tracking? Or is it just an illusion of privacy?
6804
6805
Using proxies to hide secrets from Claude Code
How to use HTTP proxies to prevent credential exposure in Claude Code sandboxes.
6806
Abuse of Youtube's copyright infringement claim process for doxxing purposes
UPDATE: it appears that the pathetic cowards who perjured themselves filing these maliciously false copyright infringement claims have chick...
6807
6808
Distrusting New WoSign and StartCom Certificates
Mozilla has discovered that a Certificate Authority (CA) called WoSign has had a number of technical and management failures. Most seriously, we discovered they were backdating SSL certificates in order ...
6809
Analysis and reverse-engineering of the original Starlink router
Honestly, I love the design of this thing. It reminds me of something from the good old sci-fi.
6810
Revisiting Apple Notes (6): The Protobuf
TL;DR : This post explains portions of two protobufs used by Apple, one for the Note format itself and another for embedded objects. More importantly, it explains how you can figure out the structure of protobufs.