8371
Implementing Open Source Container Security, Part 1: Runtime Security
Expert insight, best practices, and advice on Secure DevOps, security for containers, Kubernetes, and cloud services. Review Sysdig blog posts today!
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,775 posts.
8372
GPG and Me (2015)
I receive a fair amount of email from strangers. My email address is public, which doesn’t seemto be a popular choice these days, but I’ve received enough inspiring correspondence over the yearsto leave it be.When I receive a GPG encrypted email from a stranger, though, I immediately get the fee...
8373
One way to fix your rubbish password database
Suppose for a moment that you are running a web site that has a poorly implemented password database that stores password hashes using some...
8374
Hidden Cam Above Bluetooth Pump Skimmer
Tiny hidden spy cameras are a common sight at ATMs that have been tampered with by crooks who specialize in retrofitting the machines with card skimmers. But until this past week I’d never heard of hidden cameras being used at gas pumps in tandem with Bluetooth-based card skimming devices.
8375
Agentic Misalignment: How LLMs could be insider threats
New research on simulated blackmail, industrial espionage, and other misaligned behaviors in LLMs.
8376
Nordstrom Finds Cash Register Skimmers
Scam artists who deploy credit and debit card skimmers most often target ATMs, yet thieves can also use inexpensive, store-bought skimming devices to compromise modern-day cash registers. Just this past weekend, for instance, department store chain Nordstrom said it found a half-dozen of these skimmers affixed to…
8377
A Memory Safe Implementation of the Network Time Protocol
Folkert and the team at Tweede golf are helping us to build a memory safe NTP implementation. We asked them to share their experience in this blog post. Thank you for your partnership and contributions, Tweede golf team! Josh Aas, Head of ISRG’s Prossimo project For the last few months we at Tweede golf have been…
8378
Evolving Chrome's security indicators
Previously, we posted a proposal to mark all HTTP pages as definitively “not secure” and remove secure indicators for HTTPS pages. HTTPS us...
8379
8380
AppleTV 6.0 requires Fairplay-DRM Airplay Sources
Visit the Rogue Amoeba blog to read more.
8381
8382
Google banned almost 120k spam developer accounts in 2020 for the play store
Posted by Krish Vitaldevara, Director of Product Management Trust & Safety, Google Play Providing safe experiences to billions of users a...
8383
Apple and Google Monitor Notifications. We Need Push Notification Alternatives
We're here to stop surveillance by corporations like Google and Apple. That's why we replaced Google's FCM with our own notification system and keep Apple Notification Data at a minimum. Learn here why this is important.
8384
Passwordless Logins with Yubikey
Yubikey is currently the de facto device for U2F authentication. It enables adding an extra layer of security on top of SSH, system login, signing GPG keys,...
8385
Investigating a malware sample which sometimes fails to behave maliciously
SentinelOne's blog offers the latest news around cybersecurity, risk reduction, threat intelligence, and more. Sign up for our weekly digest to stay updated.
8386
8387
Why Security Backdoors are Bad (2016)
Recently, there has been a bit of controversy over the concept of the government or security agencies adding backdoors to services and…
8388
Notes on Analytics and Tracking in Onavo Protect for iOS
Recent media coverage of Onavo Protect encouraged me to investigate the code for the iOS version of their app. I wanted to determine what…
8389
Canada's awful new proposals on “harmful” content
Canada's government is poised to pass a "harmful content" regulation. It's a worst-in-class mutation of a dangerous idea that's swept the globe, in which governments demand that hamfisted tech giants remove broad categories of speech – too swiftly for meaningful analysis.
8390
What Is the PCI of Bank Payments?
Credit card users today can transact online with peace of mind because card-accepting merchants are subject to Payment Card Industry Data Security Standard (PCI DSS).
8391
If AI can read, then plain text can be weaponized (2019)
Advances in AI have helped automate many tasks that involve processing text. However, text-processing AI algorithms have their own unique vulnerabilities, researchers at IBM, Amazon and University of Texas have found.
8392
AWS Identity service handles 400M API calls every second
Amazon S3 turned 15 earlier this year, and Amazon EC2 will do the same in a couple of months. Today we are celebrating the tenth birthday of AWS Identity and Access Management (IAM). The First Decade Let’s take a walk through the last decade and revisit some of the most significant IAM launches: May 2011 […]
8393
UK intelligence censored report on global warming and homeland security
Series: I read it so you don't have to
8394
8395
A DoS Attack Against the C# Compiler
Generics in C# are certainly very useful and I find it amazing that we almost didn’t get them:
8396
8397
SQL Injection as a Feature
Looking at old applications, we always wonder who in their right mind thought of building them so badly. But every repository has its story and every effort has noble origins. I encountered such an ap
8398
8399
Security Vulnerability in Browser Interface Allows Computer Access via GPU
Researchers at TU Graz were successful with three different side-channel attacks on graphics cards via the ... » Computer science and IT » Read more ▸
8400
