8431
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,776 posts.
8432
AMD products are not susceptible to SPOILER exploit
Download drivers and software for AMD products — includes Windows and Linux support, auto-detect tools & detailed guides for installation.
8433
Apple Fight Could Lead to “Virtually Limitless” Surveillance Powers, Judge Warns
At stake in Apple's fight against government orders to break open locked iPhones could be the legal authorization for “virtually limitless” surveillance under the Internet of Things, according to a federal judge's order rejecting a government request in a New York drug case yesterday. Midway...
8434
Put your SSH keys in your TPM chip
Published: 10-04-2026 19:37 | Author: Remy van Elst | Text only version of this article
8435
Critiques of the DHS and FBI’s Grizzly Steppe Report
On December 29 th , 2016 the White House released a statement from the President of the United States (POTUS) that formally accused Russia of interfering with the US elections, amongst other activities. This statement laid out the beginning of the US’ response including sanctions against Russian military and…
8436
8437
Increasing Google and Alphabet VRP rewards
The reward amounts on offer by the Google VRP have undergone a major overhaul: We're increasing reward amounts by up to 5x (with maximum rewards of up to $151,515)!
8438
My gym forced a social media down my throat. So I reverse-engineered its app
Extracting my gym’s QR check-in from its Flutter app, with a rooted phone and a lot of ripgrep.
8439
How Dropbox sacrifices user privacy for cost savings
Note: This flaw is different than the authentication flaw in Dropbox that Derek Newton recently published . Summary Dropbox , the popular cl...
8440
Why DRM is such a fucking stupid idea
Digital comics publisher JManga is collapsing . Two weeks from now you will no longer be able to "purchase" anything from them. Two months from now, anything that was "purchased" from them will cease to exist. If you spent hundreds of pounds in their store then, well, that's bad luck for you. This…
8441
8442
8443
8444
Better slow than sorry – VirtualBox 3D acceleration considered harmful
The 3 - d acceleration feature of VirtualBox has had a bit of a rough time this year . One could argue that technically this component might not be considered attack surface in VirtualBox, due to the big warning put out in the documentation recommending against its use (emphasis mine):
8445
Coalfire Comments on Penetration Tests for Iowa Judicial Branch
Coalfire is a cybersecurity and compliance services company that works with enterprises and tech businesses in FedRAMP, cloud migration, AI Risk, pen…
8446
WhatsApp Security Vulnerability
Back in March, Rolf Weber wrote about a potential vulnerability in the WhatsApp protocol that would allow Facebook to defeat perfect forward secrecy by forcibly change users’ keys, allowing it—or more likely, the government—to eavesdrop on encrypted messages. It seems that this vulnerability is real: WhatsApp has the…
8447
Why you should delete WhatsApp and install Signal
WhatsApp is not private or secure. Please consider using Signal instead.
8448
New and improved Linux Random Number Generator ready for testing
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
8449
Why to use Twitter, Facebook and Google Plus share links and not buttons
Use share buttons for Facebook, Twitter and Google Plus in your blog, that does not expose your users to tracking, or violate their privacy. Use share links to do this
8450
Jump Servers
Today we're going to talk about how jump servers work and how hoop can be a great alternative to them. Jump Servers are nodes that will grant access to your underline infra-structure services. Imagine that someone from your company need to access a database or an application inside your internal infra-structure…
8451
Bank of America Telephone Access Security Hole
"I can assure you that they would not be able to do that with the Bank of America security." The words of the Bank of America supervisor echoed in our
8452
Most TOR servers are vulnerable (NSA crackable)
After more revelations, and expert analysis, we still aren't precisely sure what crypto the NSA can break. But everyone seems to agree that...
8453
A dive into the world of MS-DOS viruses
This post is a textual version of a talk I gave at The 35th Chaos Computer Congress at the end of 2018. You can watch the talk that was recorded by the wonderful C3VOC team below if that’s your preferred medium:
8454
8455
Systemd's DynamicUser feature is currently dangerous
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
8456
Probably check on your smart appliances
TL;DR: is your refrigerator running malware? If so, you better catch it!
8457
; Echo “Shell Injection”
This is an introductory article about shell injection, a security vulnerability allowing an attacker to execute arbitrary code on the user's machine. This is a well-studied problem, and there are simple and efficient solutions to it. It's relatively easy to design library API in such a way as to shield the application…
8458
Port forwarding
At AzireVPN, we are dedicated to providing our users with advanced features that enhance their online experience. We are thrilled to announce the launch of our latest addition: Port forwarding. In this blog post, we will delve into what Port forwarding is and how it can be leveraged to open
8459
EFF Statement on Assange Indictment and Arrest
While the indictment of Julian Assange centers on an alleged attempt to break a password—an attempt that was not apparently successful—it is still, at root, an attack on the publication of leaked material and the most recent act in an almost decade-long effort to punish a whistleblower and the...
8460
