7981
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,773 posts.
7982
Beware of strncpy and strncat
Most C programmers also know to avoid the legacy strcpy() and strcat() functions, as these commonly introduce buffer-overflow problems. Instead, C programmers should use the newer strncpy() and strncat() functions, which check the size of the buffer they're copying data into.
7983
Our continuing commitment to your privacy with Windows 10
At Microsoft, we are deeply committed to protecting our customers’ privacy. This includes providing clear choices and easy-to-use tools that put you in control of how your information is collected and used. Trust is a core pillar of our More Personal Computing vision, and we are working hard to make sure Windows 10 is…
7984
How we fought bad ads in 2015
Here are some of the top areas we focused on in our fight against bad ads in 2015.
7985
7986
Arduino Terms of Service and Privacy Policy update: setting the record straight
We’ve heard some questions and concerns following our recent Terms of Service and Privacy Policy updates. We are thankful our community cares enough to
7987
7988
How to break a smart home, again
This time, we’ve chosen a smart hub designed to control sensors and devices installed at home. It can be used for different purposes, such as energy and water management, monitoring and even security systems.
7989
Prove you are a robot: CAPTCHAs for agents
How we built a reverse-CAPTCHA for agents, and what we learned.
7990
7991
WanaCrypt0r Ransomworm
Written by Sergei Shevchenko and Adrian Nish BACKGROUND Since the release of the ETERNALBLUE exploit by ‘The Shadow Brokers’ last month se...
7992
7993
Security for Elasticsearch is now free
We are thrilled to announce that the core security features of the Elastic Stack -- like TLS encryption, RBAC, and both file and native authentication -- are now free.
7994
7995
7996
About rel=noopener (2016)
2021 update: Browsers now implicitly set rel=noopener for any target=_blank link, following a spec change . If the demo on this page no longer seems scary, congratulations — you’re using a modern browser!
7997
Looking at how many sites use vulnerable JavaScript libraries
Last week, we released our first annual State of Open Source Security report. One of the discoveries the report mentions is that an analysis of around 433,000 sites found that 77% of them use at least one front-end JavaScript library with a known security vulnerability. In this post, we take a deep dive into that…
7998
AuthZ: Scalable permissions system
How we built an authorization system based on Google Zanzibar
7999
8000
The Most Incompetent TSA Story Yet?
The storyline: TSA screener finds two pipes in passenger’s bags. Screener determines that they’re not a threat. Screener confiscates them anyway, because of their “material and appearance.” Because they’re not actually a threat, screener leaves them at the checkpoint. Everyone forgets about them. Six hours later, the…
8001
BGP and RPKI
We have been receiving occasional notifications, primarily via twitter from concerned customers who have visited 'isbgpsafeyet.com' and been told by the site's operator, Cloudflare, that their ISP is, apparently unsafe.
8002
8003
8004
8005
Protecting Your Anonymity: A How-to for Sex Workers
Just as you take steps to protect your personal safety and health while engaging in real-life encounters, a sex worker should also be mindful of the dangers of the online world. As we wrote in a separate blog post today, the sex worker forum MyRedBook, along with its companion sites, have been...
8006
Encrypting Postgres Data at Rest in Kubernetes
An example of how you can encrypt Postgres data at rest using PGO, the open source Postgres Operator from Crunchy Data using AWS EBS gp2 volumes.
8007
Implementing fast TCP fingerprinting with eBPF
In this article I want to document my journey implementing fast TCP fingerprinting in a golang webserver, using eBPF.
8008
Snapchat - GibSec Full Disclosure
A series of nicely formatted documents about Snapchat by GibSec.
8009
8010
Do not upgrade to PHP 5.3.7 due to a bug in crypt()
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.