7081
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,772 posts.
7082
Soatok's Informal Guide to Threat Models
After a long day of exhausting conversations about Hybrid Post-Quantum Cryptography, random jackasses trying to play gotcha with endpoint attacks against end-to-end encrypted messaging apps, and me…
7083
Announcing Google Cloud Spanner as a Vault Storage Back End
By using Cloud Spanner as a storage backend for HashiCorp Vault, you get all the benefits of a traditional relational database, the scalability of a globally-distributed data store, and the availability of a fully managed service.
7084
Cypherpunk Desert Bus: My Role in the 2016 Zcash Trusted Setup Ceremony
Update: taking this down for now until some questions about the deterministicbuilds are answered; currently I do not believe the Zcash trusted setup shouldbe...
7085
New AWS Directory Service
Virtually every organization uses a directory service such as Active Directory to allow computers to join domains, list and authenticate users, and to locate and connect to printers, and other network services including SQL Server databases. A centralized directory reduces the amount of administrative work that must…
7086
7087
7088
Security Incident on FreeBSD Infrastructure
From: FreeBSD Security Officer < security-officer@FreeBSD.org > To: FreeBSD Security < FreeBSD-security@FreeBSD.org > Bcc: freebsd-announce@freebsd.org , freebsd-security-notifications@FreeBSD.org Reply-To: secteam@FreeBSD.org Subject: Security Incident on FreeBSD Infrastructure
7089
7090
Fintech Giant Fiserv Used Unclaimed Domain
If you sell Web-based software for a living and ship code that references an unregistered domain name, you are asking for trouble. But when the same mistake is made by a Fortune 500 company, the results can range from costly to disastrous. Here’s the story of one such goof committed by Fiserv [ NASDAQ:FISV ], a $15…
7091
Disassembling the Woolworths Facebook scam
Who wants free stuff? C’mon, everybody wants a free lunch, right? Yes, yes they do and that’s precisely the trigger used in scams like this one. Recently I wrote about the mechanics of another Facebook scam [https://www.troyhunt.com/2012/10/she-did-what-in-school-mechanics-
7092
Open source supply chain security at Google [video]
I was a remote opening keynote speaker at ACM SCORED 2023 , which we decided meant that I sent a video to play and I was on Discord during the talk for attendees to text directly with question as the video played, and then we did some live but still remote Q&A after the talk.
7093
FF Sandbox Escape
By James Forshaw, Project ZeroIn my previous blog post I discussed an issue with the Windows Kern...
7094
7095
Infiltrating a Botnet - A Conversation With a Botmaster
Overview Defending a Customer from a Botmaster An Unsuspecting Customer Stopping the Bot Conversations with a Botmaster You Can Find Anything on the Internet One-Stop Botnet Shopping Pretense to Avoid Pwning Conclusion References Acknowledgments
7096
2019 Guide to Cryptographic Key Sizes and Algorithm Recommendations
A simple, accessible recommendation for key sizes and recommended algorithms for various cryptographic algorithms.
7097
The Crime of Speech
New EFF Report Maps Legal Threats to Free Expression in the Arab WorldFreedom of expression is a universal right, but the specific threats to it vary widely from country to country and region to region. As activists fighting for free speech worldwide, it is essential that we better understand the...
7098
Modeling Adversaries with TLA+
A common question I get about specs is how to model bad actors. Usually this is one of two contexts: The spec involves several interacting agents sharing a protocol, but some of the nodes are faulty or malicious: they will intentionally try to subvert the system. The spec involves an agent subject to outside forces…
7099
Top Secret: Automatically filter sensitive information
Automatically filter sensitive information before sending it to external services or APIs, such as chatbots and LLMs.
7100
7101
I switched to Brave
I've been using Brave for a couple months now after using Firefox for around 25 years. I think Brave will be a permanent change.
7102
7103
An Intern's Experience with Rust
Over the course of my internship at the Microsoft Security Response Center (MSRC), I worked on the safe systems programming languages (SSPL) team to promote safer languages for systems programming where runtime overhead is important, as outlined in this blog . My job was to port a security critical network processing…
7104
Symantec CA Response to Google Proposal and Community Feedback
Broadcom Community - VMTN, Mainframe, Symantec, Carbon Black
7105
7106
Google to Encrypt All Keyword Searches
Boost organic search traffic with content strategy tools that help you build an SEO strategy, optimize your content, and track performance in one place.
7107
The Car That Watches You Back: The Advertising Infrastructure of Modern Cars
How the connected car became an advertising surface. From Stellantis startup pop-ups to GSTV pumps to Gulp Radio aisles, and the consent infrastructure the automobile never developed.
7108
The low, low cost of committing cybercrime
The low, low cost of (committing) cybercrime, Author: Jan Kopriva
7109
DNS servers that offer privacy and filtering
If you’re a programmer, a systems administrator, or really any type of IT worker, you probably have your favorite go-to IP addresses for troubleshooting.
7110
Moving Towards a More Secure Web
To help users browse the web safely, Chrome indicates connection security with an icon in the address bar. Historically, Chrome has not exp...