7591
Was jquery.com compromised?
jQuery: The Write Less, Do More, JavaScript Library
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,773 posts.
7592
PuTTY 0.66 fixes security vulnerability
Home | FAQ | Feedback | Licence | Updates | Mirrors | Keys | Links | Team Download: Stable · Snapshot | Docs | Privacy | Changes | Wishlist
7593
7594
7595
Getting Superfish Out of Firefox
First things first: If you are reading this post on a recent Lenovo laptop, please click the lock icon in the URL bar, then click “More Information…”. If you see ...
7596
7597
7598
7599
7600
Securing Services with Rootless Containers
Some tips to improve security in applications deployed as containers.
7601
Entering and Breaking the Avast Antivirus Sandbox Part 2
SAFA details the full exploitation of CVE-2025-13032, turning a double-fetch vulnerability in Avast's kernel driver into a local privilege escalation to SYSTEM on Windows 11.
7602
Safe-Linking – Eliminating a 20 year-old malloc() exploit primitive
Research by: Eyal Itkin Overview One of our goals for every research project we work on in Check Point Research is to get an intimate understanding of how software work: What components do they contain? Are they vulnerable? How can attackers exploit these vulnerabilities? And more importantly, how can we protect…
7603
The dark side of big data
Everybody (1, 2, 3) is talking about big data and the chances that are not to be missed. So it would be fatal to miss this opportunity, for instance, by impo...
7604
7605
Using Twitter to Build a Password Cracking List - 1978 passwords out of 4400
This is going to be a quick one. We're going to show how to use twitter to build a word list for cracking passwords. We'll use John the Rip...
7606
De-Anonymization via Clickjacking in 2019
This blog post is about my journey to understand the current practice of de-anonymization via the clickjacking technique whereby a malicious website is able to uncover the identity of a visitor, including his full name and possibly other personal information. I don’t present any new information here that isn’t already…
7607
7608
Doodles, stickers, and censorship circumvention for Signal Android
The latest Signal for Android release includes support for adding doodles, stickers, and text to images. This release also includes support for censorship circumvention in Egypt and the United Arab Emirates.
7609
Introducing Semgrep and r2c
An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.
7610
7611
7612
Exposing Russian EFF Impersonators: The Inside Story on Stealc and Pyramid C2
Discover how an open directory exposed a threat actor impersonating EFF to target gamers and how we mapped their infrastructure to Stealc & Pyramid C2.
7613
Fuzzing Java in OSS-Fuzz
Posted by Jonathan Metzman, Google Open Source Security Team OSS-Fuzz , Google’s open source fuzzing service, now supports fuzzing applicat...
7614
7615
Incident report on memory leak caused by Cloudflare parser bug
Last Friday, Tavis Ormandy from Google’s Project Zero contacted Cloudflare to report a security problem with our edge servers. He was seeing corrupted web pages being returned by some HTTP requests run through Cloudflare.
7616
How the Government Deceived Congress in the Debate over Surveillance Powers (2013)
ANDREA MITCHELL: “Why do you need every telephone number? Why is it such a broad vacuum cleaner approach?” JAMES CLAPPER: “Well, you have to start someplace.”—NBC Meet the Press, this past Sunday Concerned about the surveillance of millions of ordinary Americans, last year Senator Ron Wyden asked...
7617
How to design an elliptic-curve signature system
Earlier this month a new paper by Naomi Benger, Joop van de Pol, Nigel Smart, and Yuval Yarom hit the news . The paper explains how to recover secret keys from OpenSSL's implementation of ECDSA-secp256k1 using timing information from "as little as 200 signatures"; ECDSA-secp256k1 is the signature system used by…
7618
EFF: Some Facts About Carrier IQ
There has been a rolling scandal about the Carrier IQ software installed by cell phone companies on 150 million phones, mostly within the United States. Subjects of outright disagreement have included the nature of the program, what information it actually collects, and under what circumstances....
7619
API Security Best Practices
Learn how to secure your API. Best practices for OAuth, REST, DDoS, Attack Mitigation and Design.
7620
Italy Blocks Reproductive Health Websites Women on Web and Women Help Women
This report documents the blocking of Women on Web (WoW) and Women Help Women (WHW) domains in Italy based on OONI data.