6811
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,772 posts.
6812
6813
The case of the recursive resolvers: What happened during Slack’s DNSSEC rollout
On September 30th 2021, Slack had an outage that impacted less than 1% of our online user base, and lasted for 24 hours. This outage was the result of our attempt to enable DNSSEC — an extension intended to secure the DNS protocol, required for FedRAMP Moderate — but which ultimately led to a series of…
6814
FritzFrog: A New Generation of Peer-to-Peer Botnets
A Akamai é a empresa de cibersegurança e computação em nuvem que potencializa e protege negócios online.
6815
6816
6817
The implications of UEFI "Secure Boot" for Linux users
Last month Steven Sinofsky from Microsoft announced new requirements for manufacturers wanting to ship Windows 8 systems, including a feature called “Secure Boot”. Canonical, together with Red Hat, today publishes a white paper highlighting the implications of these requirements for users and manufacturers. The paper…
6818
Feudal Security
It’s a feudal world out there. Some of us have pledged our allegiance to Google: We have Gmail accounts, we use Google Calendar and Google Docs, and we have Android phones. Others have pledged allegiance to Apple: We have Macintosh laptops, iPhones, and iPads; and we let iCloud automatically synchronize and back up…
6819
Post-mortem of this weekend's NPM incident
npm Blog (Archive); updates from the npm team are now published on the GitHub Blog and the GitHub Changelog
6820
UtahFS: Encrypted File Storage
Several months ago, I realized that I had a lot of sensitive files on my computer (my diary, if you must know) that I was afraid of losing, but I didn’t feel comfortable putting them in something like Google Drive or Dropbox. Introducing UtahFS.
6821
Progressive Web Apps (PWAs) Phishing
Providing security research and red team techniques
6822
They Live
Winter Break Of Code, Day Fifteen The 1988 film They Live is one of the last great masterpieces to come out of the Hollywood left. In the film, a drifter named John Nada discovers a box of sunglasses that, when worn, allows the wearer to really see the world around him. For instance, when wearin...
6823
The UK's Proposed Spy Law Would Force Apple to Secretly Hack its Phones Too
The FBI's demand that Apple craft new software to bypass iOS's security protections has ignited a worldwide debate about a government's ability to force tech companies to sabotage their own security. One repeated question has been: will other countries, like China, demand the same powers? You don't...
6824
6825
6826
A proactive approach to more secure code
What if we could eliminate an entire class of vulnerabilities before they ever happened?
6827
6828
Supabase Vault is now in Beta
A Postgres extension to store encrypted secrets and encrypt data.
6829
SendGrid appends a tracking pixel even when disabled
Commenting, venting, or ranting. Usually about entrepreneurship, tech, or self-reflection.
6830
The Insecurity of Secret IT Systems
We now know a lot about the security of the Rapiscan 522 B x-ray system used to scan carry-on baggage in airports worldwide. Billy Rios, director of threat intelligence at Qualys, got himself one and analyzed it. And he presented his results at the Kaspersky Security Analyst Summit this week. It’s worse than you might…
6831
YARA is dead, long live YARA-X
For over 15 years, YARA has been growing and evolving until it became an indispensable tool in every malware researcher’s toolbox.
6832
Google Exploit – Steal Account Login Email Addresses
I found a bug that allowed me to find anyone with a Google+ account's login email address. This could be used to target specific people for spear phishing.
6833
Government Authority Intended for Terrorism is Used for Other Purposes
The Patriot Act continues to wreak its havoc on civil liberties. Section 213 was included in the Patriot Act over the protests of privacy advocates and granted law enforcement the power to conduct a search while delaying notice to the suspect of the search. Known as a “sneak and peek” warrant, law...
6834
6835
Factoring RSA 260
How Devin and a Cognition researcher built the world’s highest-performance GPU lattice siever, to make factoring numbers 10x cheaper than the previous…
6836
Shellcode Injection
Injecting shellcode by overflowing the buffer - Demonstration
6837
Learning with Privacy at Scale
Understanding how people use their devices often helps in improving the user experience. However, accessing the data that provides such…
6838
OSS-Fuzz: Five months later, and rewarding projects
The latest news from Google on open source releases, major projects, events, and outreach programs for early career developers.
6839
How Dirty COW works from the Linux kernel’s perspective
Dirty COW (CVE-2016-5195) is one of the most publicised local privilege escalation vulnerabilities in 2016, courtesy to its catchy name, cute logo, potential damages, and the fact that it was discovered in the wild by a researcher Phil Oester, meaning it was already under active use at the time of discovery.
6840
25 Civil Liberties Orgs Call for Open Hearings on Section 702 Surveillance
The House Judiciary Committee has plans for a “members only” meeting next week to discuss Section 702 of the FISA Amendment Acts, the law the NSA relies on to operate its notorious PRISM surveillance program and to tap into the backbone of the Internet, also known as “upstream” collection. While we...