8161
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,774 posts.
8162
8163
iOS Single App Mode Escape
This blogpost, written by WithSecure’s STINGR Group, presents the analysis of a security incident that happened in February 2026 and was investigated by the WithSecure Incident Response team.
8164
Database containing personal info of 106M visitors to Thailand exposed online
Just how safe is your personal information? With more than thousand reported data breaches since 2004, the odds are not in your favor.
8165
Telegram secret chat geolocation leak
UPD: I've just received confirmation from Telegram, that a patched version was released a few hours ago. Here is the patch on github....
8166
Pakistani firm shipped fentanyl analogs, scams to us
A Texas firm recently charged with conspiring to distribute synthetic opioids in the United States is at the center of a vast network of companies in the U.S. and Pakistan whose employees are accused of using online ads to scam westerners seeking help with trademarks, book writing, mobile app development and logo…
8167
Turning my ESP32 into a DNS sinkhole to fight doomscrolling
A fun project that I learned a lot from.
8168
8169
Root Cause of Reboot Issue Identified; Updated Guidance
Intel Newsroom delivers the latest news, announcements, and updates. Stay informed on Intel innovations.
8170
When Myanmar needs ProtonVPN the most, Apple stands in the way of human rights
Myanmar citizens have used Proton tools to communicate securely and access the truth. But Apple has blocked us from sending out important app updates.
8171
Restic Cryptography
tl;dr: this is not an audit and I take no responsibility for your backups, but I had a quick look at the crypto and I think I’m going to use restic for my personal backups.
8172
8173
Homeland Security Spying on Reddit Users
Leak show feds tracking anti-ICE Reddit users like "Budget-Chicken-2425"
8174
Non-official MtGox investigation update and preliminary release
The official blog of WizSec, a group of bitcoin security specialists, and their investigation into MtGox.
8175
Authentication for Single Page Apps
Wow! This takes me back! Please check the date this post was authored, as it may no longer be relevant in a modern context.
8176
F-Secure Anti-Virus: Remote Code Execution via Solid RAR Unpacking
Blog about anti-virus software vulnerabilities.
8177
Narrative Jailbreaking for Fun and Profit
Posted on Monday 23 Dec 2024. 1,634 words, 1 link. By Matt Webb.
8178
Unravelling Konami's Arcade DRM
It’s well known that Konami doesn’t have complex protection on its arcade systems. Programmed World was a fan-made network replacement and update service for Konami arcade games with no support outside of Japan. Nothing of its scale and quality had been seen before, and nothing has been seen since, despite other…
8179
An Armful of CHERIs
Today, Arm announced that the first silicon supporting the Morello prototype architecture, a research project led by Arm, Microsoft, University of Cambridge and others, is now available on a limited run of demonstration boards, which are being shipped from today to industry partners for testing. Morello is the first…
8180
Deobfuscating World of Warships' Python Scripts
An in-depth analysis of how World of Warships obfuscates its game scripts and how to mostly deobfuscate them automatically.
8181
Remote code execution affecting most iOS/macOS apps
CVE-2017-2416 Remote code execution triggered by malformed GIF in ImageIO framework, affecting most iOS/macOS apps ImageIO Available for: iPhone 5 and later, iPad 4th generation and later, iPod tou…
8182
LaTeX TikZ for Cryptographers
LaTeX Code for Cryptographic Images.
8183
Seized Genesis Market data is now searchable in Have I Been Pwned
A quick summary first before the details: This week, the FBI in cooperation with international law enforcement partners took down a notorious marketplace trading in stolen identity data in an effort they've named "Operation Cookie Monster". They've provided millions of impacted email addresses and passwords to Have I
8184
Reproducible Signal builds for Android
As of our latest Android release, Signal builds are reproducible. Reproducible builds help to verify that the source code in our GitHub repository is the exact source code used to build the compiled Signal APK being distributed through Google Play.
8185
8186
Detecting Spectre and Meltdown Using Hardware Performance Counters
Security pros have been working on a new hardware attack type that exploits cache side-effects and speculative execution to perform privileged memory disclosure.
8187
Police Must Respect the Right of Citizens to Record Them
“I’m asking all the citizens of North Charleston to continue taping.” That is what Councilwoman Dorothy Williams said in response to the shooting death of Walter Scott. She and others recognize that the story would have been very different without the video showing that a white police officer shot...
8188
8189
Beyond public key encryption
One of the saddest and most fascinating things about applied cryptography is how little cryptography we actually use. This is not to say that cryptography isn’t widely used in industry —…
8190