7411
CertiKOS: A breakthrough toward hacker-resistant operating systems
A team of Yale researchers has unveiled CertiKOS, the world’s first operating system that runs on multi-core processors and shields against cyber attacks.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,773 posts.
7412
The Strange Case of John Dillinger and the Fraudulent Apple ID
Programming Zen is a blog about programming and emerging technologies, authored by Antonio Cangiano, a Software Development Manager and AI Evangelist at IBM.
7413
Application-Layer DDoS Attack Protection with HAProxy
This blog post describes techniques that utilize ACLs, maps, and stick tables.
7414
Our suite of Ethereum security tools
Two years ago, when we began taking on blockchain security engagements, there were no tools engineered for the work. No static analyzers, fuzzers, or reverse engineering tools for Ethereum. So, we invested significant time and expertise to create what we needed, adapt what we already had, and refine the work…
7415
Linux kernel heap quarantine versus use-after-free exploits
It's 2020. Quarantines are everywhere – and here I'm writing about one, too. But this quarantine is of a different kind. In this article I'll describe the Linux Kernel Heap Quarantine that I developed for mitigating kernel use-after-free exploitation.
7416
Default HTTPS access for Gmail
Posted by Sam Schillace, Gmail Engineering Director In 2008, we rolled out the option to always use https — encrypting your mail as it trav...
7417
EFF to Supreme Court: Violating Terms of Service Isn’t a Crime Under the CFAA
Washington, D.C.—The Electronic Frontier Foundation (EFF) and leading cybersecurity experts today urged the Supreme Court to rein in the scope of the Computer Fraud and Abuse Act (CFAA)—and protect the security research we all rely on to keep us safe—by holding that accessing computers in ways that...
7418
7419
Race conditions on the web
I enjoy breaking websites.
7420
Robust and efficient quantum-safe HTTPS
Today we're announcing a new program in Chrome to make HTTPS certificates secure against quantum computers. The Internet Engineering Task Force (IETF) recently created a…
7421
7422
HAProxy vulnerability enables HTTP request smuggling attacks
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
7423
7424
Deceiving Windows Defender: The Big Stack Bypass
Defeating Windows Defender detection on Windows 10 by creating a large (>2MB) payload allocated on the stack
7425
Google Zanzibar Through Our Eyes
Understanding Google's Zanzibar paper the way the Authzed team does.
7426
California Legislature Sells Out Our Data to ISPs
In the dead of night, the California Legislature shelved legislation that would have protected every Internet user in the state from having their data collected and sold by ISPs without their permission. By failing to pass A.B. 375, the legislature demonstrated that they put the profits of Verizon...
7427
Obama Administration Supports Privacy-Invasive “Cybersecurity” Bill
Right before Congress left for its annual summer vacation the Obama Administration endorsed the Senate Intelligence Committee's Cybersecurity Information Sharing Act (CISA). EFF opposes the bill because its vague definitions, broad legal immunity, and new spying powers allow for a tremendous amount...
7428
MitM-ing Postgres
I recently had to set up a new postgres instance at work. While we’re already using Heroku Postgres for production loads, we had some requirements for this one that couldn’t be solved without being database admin, and thus had to go self-hosted. That...
7429
Process behaviour anomaly detection using eBPF and unsupervised learning
Hello everybody, I hope you’ve been enjoying this summer after two years of Covid and lockdowns :D In this post I’m going to describe how to use eBPF syscall t…
7430
Statement concerning the arrest of Dmitry Bogatov
[09 Dec 2017] Updated Debian 8: 8.10 released [09 Dec 2017] Updated Debian 9: 9.3 released [07 Oct 2017] Updated Debian 9: 9.2 released [12 Aug 2017] DebConf17 closes in Montreal and DebConf18 dates announced [22 Jul 2017] Updated Debian 9: 9.1 released [22 Jul 2017] Updated Debian 8: 8.9 released [18 Jun 2017] Debian…
7431
Automatically inferring file syntax with afl-analyze
The nice thing about the control flow instrumentation used by American Fuzzy Lop is that it allows you to do much more than just, well, f...
7432
Would you have spotted the fraud?
Pictured below is what’s known as a skimmer, or a device made to be affixed to the mouth of an ATM and secretly swipe credit and debit card information when bank customers slip their cards into the machines to pull out money. Skimmers have been around for years, of course, but thieves are constantly improving them…
7433
7434
AI models may be capable of self-replicating without access to a datacenter
Small AI models may be only months away from being able to self-replicate across cheap IoT devices like Android TV boxes, with no datacenter needed.
7435
Ubuntu Pro Shenanigans
10/18/2026: Drive Specifications Matter (Complete) 10/09/2026: Gear Review: XTEINK X4 Pro 10/09/2026: Gear Review: OLYVUE V78 Dash Cam 10/01/2026: UNREDACTED Magazine Issue 013 09/21/2026: Updated OSINT Scripts 09/20/2026: New Socials 08/29/2026: Blog Archive 08/20/2026: Free PDF Self-Publishing Guide 08/19/2026: OS…
7436
7437
7438
7439
Self-Signed JWTs
An auth scheme where you let yourself in.
7440