Topics /
The most popular blog posts about security & privacy on Hacker News. 8,775 posts.
The first post introduced the IPIngressFilterPath and IPEgressFilterPath feature for the upcoming systemd release 243 to support custom BPF programs as firewall for services. There was a simple example for a minimal BPF program written in C and how to load it for a systemd service. Then there was a standalone program…
Users can now block poorly behaving third-party DLLs in Firefox to improve stability and performance.
A backdoor in our code that can perform OS injection is a considerable threat.
One of the great things about having rack-space in our new office is that we can now support open source projects using our equipment such as FFmpeg and Libav. They are critical parts of our software as well as underpin much of multimedia processing in the world today.
Viking Horde Android malware conducts ad fraud, but can also be used for other attack purposes such as DDoS attacks, spam messages, and more.
Yes, I do—and probably more than I should admit. But a few things led to this situation. For one, I’d gotten too used to relying on Touch ID. As a result, if my muscle memory failed me, I was stuck. On top of that, I kept entering my office Active Directory (AD) password instead of my Mac password—again, muscle memory…
Practical development throughout the evolution of Windows.
As of the time of writing, there is no real sandboxing technique available to NetBSD. There is chroot , which can be considered a weak sandbox because it modifies the root directory of the process, effectively restricting the process' view of the file system, but it doesn't isolate anything else, so all networking…
The firmware of microcontrollers usually contains valuable data such as intellectual property and, in some cases, even cryptographic material. In order to protect the confidentiality of these assets,
The stakes are incredibly high, and Apple knows it. Whatever you think of Apple’s decision to implement these features, they’re not doing so lightly.
sysclean(8) is a system tool designed for help system administrator to keep their OpenBSD clean after upgrade.
Yesterday the OpenSSL Project released an update to address the CVE-2014-0160 vulnerability, nicknamed “Heartbleed.” This serious vulnerability affects a..
( These are notes that I wrote up from a talk that I gave at the National Academies Forum on Cyber Resilience . You can tell that it was in Washington, DC because of the “cyber”.
The Tor Project exists to provide privacy and anonymity for millions of people, including human...
A vulnerability in Broadcom’s proprietary WPS implementation enables unauthenticated attackers within WiFi range to leak memory and achieve unauthenticated remote code execution on millions of routers. This post covers its discovery through agentic vulnerability research, exploitation across eCos and Linux platforms…
If you’ve perused the ActivityPub feed of certificates whose keys are known to be compromised , and clicked on the “Show More” button to see the name of the certificate issuer, you may have noticed that some issuers seem to come up again and again. This might make sense – after all, if a CA is issuing a large volume…
Simak Live Draw SDY Tercepat Hari Ini, Hasil Live SDY, Live Result Sidney, Dan Rekap Togel SDY Lengkap Dan Akurat Hanya Di Sini.
Back in the summer I was lucky enough to finagle my boss into letting me take Dmitry Nedospasov ( @nedos )’s hardware hacking training . In it I cut my teeth on using an FPGA to interface with target hardware. After implementing a UART we implemented a module that could parse part of Apple’s OneWire, used to negotiate…
As well as the collection and distribution of compromised keys , the pwnedkeys project also matches those pwned keys against issued SSL certificates. I’m excited to announce that, as of the beginning of 2024, all matched certificates are now being published on the Fediverse , thanks to the botsin.space Mastodon server.
Additional Perspectives from Mozilla: Mitchell Baker’s post, “Total Surveillance” Ben Adida’s post, “No User is an IslandR
Threats to your IT infrastructure (AWS accounts & credentials, AWS resources, guest operating systems, and applications) come in all shapes and sizes! The online world can be a treacherous place and we want to make sure that you have the tools, knowledge, and perspective to keep your IT infrastructure safe & sound…
EnclaveDB: A secure database using SGX Priebe et al., IEEE Security & Privacy 2018 This is a really interesting paper (if you’re into this kind of thing I guess!) bringing together the security…
Posted by Seth Jenkins, Google Project ZeroIntroduction Android's open-source ecosystem has ...
The following is a summary of an internal research project conducted by Hudson H. and Andrew G.
Mental models frame how we think about the world. This article describes how they work and why we need more of them in information security.
Recently I was reverse-engineering an Android app [ a ] . The relevant details are as follows:
Posted by Ian Beer of Google Project ZeroThe OS X and iOS kernel code responsible for loading a s...
