7861
Google Wallet launches new age and identity verification features (ZK proofs)
Learn more about new Google Wallet updates, including new ways to use your digital ID for age and identity verification.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,773 posts.
7862
7863
Private Home Directories for Ubuntu 21.04
Ubuntu has evolved a lot since its early beginnings as an easier-to-use derivative of Debian that catered primarily to the nascent Linux desktop market. Today Ubuntu is deployed beyond just your laptops at home and in the office. Nowadays you are more likely to find Ubuntu in the cloud, powering some of the world’s…
7864
Apple's desensitisation of people to fundamental security practices
My son turned 7 earlier this month. I've been getting him into coding [https://www.troyhunt.com/kids-and-code-simple-programming-on/] and teaching him the fundamentals of using a PC which I reckon is a pretty essential life skill these days. Part of that is helping him
7865
How to earn money by hacking a “walking for money” app
Or how to reverse engineer React Native apps, and abuse API.
7866
7867
7868
SynthID – A tool to watermark and identify content generated through AI
SynthID is a tool to watermark and identify AI-generated content, helping to foster transparency and trust in generative AI.
7869
Don’t Hash Secrets
Building secure systems is difficult. It would be nice if we had a bunch of well-designed crypto building blocks that we could assemble in all sorts of ways and be certain that they would, no matte…
7870
Mozilla shouldn't copy Chrome's permission prompt for extensions
As Mozilla’s Web Extensions project is getting closer towards being usable, quite a few people seem to expect some variant of Chrome’s permission prompt to be implemented in Firefox. So instead of just asking you whether you want to trust an add-on Firefox should list exactly what kind of permissions an add-on needs…
7871
7872
Quantum is unimportant to post-quantum
You might be hearing a lot about post-quantum (PQ) cryptography lately, and it’s easy to wonder why it’s such a big deal when nobody has actually seen a quantum computer. But even if a quantum computer is never built, new PQ standards are safer, more resilient, and more flexible than their classical […]
7873
Yet Another "People Plug in Strange USB Sticks" Story
I’m really getting tired of stories like this: Computer disks and USB sticks were dropped in parking lots of government buildings and private contractors, and 60% of the people who picked them up plugged the devices into office computers. And if the drive or CD had an official logo on it, 90% were installed. Of course…
7874
Memory safety for the world’s largest software project
Rust for Linux and Prossimo The Rust for Linux project aims to bring a new system programming language into the Linux kernel. Rust has a key property that makes it very interesting to consider as the second language in the kernel: it guarantees no undefined behavior takes place (as long as unsafe code is sound)…
7875
I Built an Ld_preload Worm
Teenagers' hands are the devil's playthings.
7876
7877
How Underground Groups Use Stolen Identities and Deepfakes
The growing appearance of deepfake attacks is significantly reshaping the threat landscape. These fakes brings attacks such as business email compromise (BEC) and identity verification bypassing to new levels.
7878
We reproduced Anthropic's Mythos findings with public models
Anthropic framed Mythos and Project Glasswing as proof that frontier AI vulnerability research now needs gated access. We tested the public, patched cases with GPT-5.4 and Claude Opus 4.6 and found that the key building blocks are already accessible outside Glasswing, while reliable operationalization remains the real…
7879
DAG Rosenstein’s “Responsible Encryption” Demand Is Bad
Deputy Attorney General Rod Rosenstein delivered a speech on Tuesday about what he calls “responsible encryption” today. It misses the mark, by far. Rosenstein starts with a fallacy, attempting to convince you that encryption is unprecedented: Our society has never had a system where evidence of...
7880
SendGrid employee’s account was compromised and used to access internal systems
Explore the latest company news, product updates, technical tutorials, and best practices from Twilio, the industry-leading customer engagement platform.
7881
Keeping Passwords in Source Control
I learned a neat tip from my co-worker, Craig Silverstein ( more on Craig joining Khan Academy ), recently and I thought others might find it to be useful.
7882
Security for the people
The latest news from Google on open source releases, major projects, events, and outreach programs for early career developers.
7883
Poisonous MD5 – Wolves Among the Sheep
Because we can!
7884
Limiting Private API Availability in Chromium
During a recent audit, we discovered that some third-party Chromium based browsers were able to integrate Google features, such as Chrome sy...
7885
7886
The spies in your home: How WiFi companies monitor your private life
Data harvesters are reaching into virtually every part of your digital life through the little-known surveillance hardware industry.
7887
Introduction to WebKit Content Blockers
Describing content blocking rules in a structured format ahead-of-time, rather than running extension-provided code.
7888
Authorize, don't authenticate
Hold on to your data by keeping it in your own database
7889
7890
Block web scanners with ipset and iptables
Anybody who runs an internet-facing webserver has seen their fair share of spammy scanners in the logs. It varies server to server, but some of mine get up to 15,000 scans per day. Almost all of these are harmless network mappers, but they still annoy me. Many are compromised hosts or belong to hackers & organized…