Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,773 posts.
Demonstrably Secure Software Supply Chains with Nix
Discover how Nix can revolutionize your software supply chain security, enabling verifiable integrity and offline rebuilds from source.
How to stop advertisers from tracking your teen across the internet
When children turn 13, they age out of the data protections provided by the Children’s Online Privacy Protection Act (COPPA). Then, they become targets for data collection from data brokers that collect their information from social media apps, shopping history, location tracking services, and more.
Baiting the bot
LLM chatbots can be engaged in endless "conversations" by considerably simpler text generation bots. This has some interesting implications.
Cloudflare Attack Post Mortem; Apparent Google Apps/Gmail Vulnerability
This morning a hacker was able to access a customer's account on CloudFlare and change that customer's DNS records. The attack was the result of a compromise of Google's account security procedures.
VLC threatens to sue Secunia over full disclosure
Protect your technology from cyber threats and vulnerabilities…
Germany is pressuring Neocities to censor a disclosure of their censorship
The German government is pressuring Neocities to censor a disclosure of their censorship list.
France's tax agency got hacked (in French)
Après l'ANTS, le piratage de la DGFiP marque un nouveau palier. Experts de l'État numérique, de la cybersécurité et du politique décryptent cet incident.
Blocking Top-Level Navigations to Data URLs for Firefox 58
End users rely on the address bar of a web browser to identify what web page they are on. However, most end users are not aware of the concept of ...
Applied Cryptography Engineering
Applied Cryptography taught two generations of developers what they know about crypto, and it is a dreadful instruction manual. The book to replace it with, and what you still have to learn after.
HTTP GZIP Compression remote date and time leak
Tor is a service run by a network of volunteers to allow people to use internet anonymously. Normally tor is used to browse the web without being tracked or identified.
Mac app launches slowed by malware scan (2024)
I've always attributed slow Xcode launches to Xcode simply sucking, but I've noticed that the FileMerge app frequently launches slowly too. When this happens, the app can take a dozen bounces in the Dock before finally opening. FileMerge resides in the folder Xcode.app/Contents/Applications/ within the Xcode bundle…
Linux Capabilities in a nutshell (2019)
Linux capabilities can be difficult to understand so let's go through them quickly
Surveillance Evangelist Arrested in California
FBI agents arrested a Mexican tycoon named Jose Susumo Azano Matsura at his Coronado, Calif. home on Wednesday as part of a political bribery investigation based on captured emails, seized banking records, and covertly recorded conversations. The unfolding scandal is soaked in irony: Azano is a...
Decompiling Hyper-V Manager to rebuild it from source
This post guides through decompiling Hyper-V Manager to rebuild it from source, aiming to assess its value for potential open-sourcing. It explores manual and automated decompilation processes, including troubleshooting and enhancing the tool, advocating for community-led improvements to this widely-used but neglected…
Investigating the 900GB “Collection #1-5” password leaks with R
This post shows how to process gigabytes of unstructured data with the Spark framework and using the R language.
CWI cryptanalist discovers new cryptographic attack in Flame spy malware
Cryptanalyst Marc Stevens from the Centrum Wiskunde & Informatica (CWI) in Amsterdam, known for breaking the https security in 2008 using a cryptanalytic attack on MD5, analyzed the recent Flame virus this week.
Detecting VPN (and its configuration) and proxy users on the server side
A lot of people use VPN every day. Somebody use it in always-on mode to circumvent government or corporative internet censorship, while…
MySQL.com currently Hacked (and serving javascript malware)
It looks like the MySQL.com website is currently hacked and compromised with a JavaScript malware (and serving malware to anyone visiting it). Our scanner identified…
Multiple banking IP addresses hijacked
BGP multiple banking addresses hijacked, Author: Adrien de Beaupre
How I got tech support scammers infected with Locky
There’s been this debate for a while now, about AI being either the greatest or the worst or maybe the least interesting thing to happen to humanity so far. I have to say I’m not 100% sure where I land on this one myself. AI has empowered me to do things I had been putting off forever, multiplied my productivity and…