8551
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,776 posts.
8552
Linux being secure is a common misconception
Linux being secure is a common misconception in the security and privacy realm. Linux is thought to be secure primarily because of its source model, popular usage in servers, small userbase and confusion about its security features. This article is intended to debunk these misunderstandings by demonstrating the lack…
8553
8554
Input type="password" Needs to Grow Up
Thoughts and musings of Dennis Forbes, expert software developer/architect and AI engineer
8555
PDF exploit in iOS 4
Link to: http://www.loopinsight.com/2010/08/01/jailbreakme-returns-offers-jailbreak-for-iphone-4-and-ipad/
8556
8557
Android security model is inadequate, and it needs a firewall
I have an Android phone, and while it’s good that Android does have some sandboxing, permissions and security against rogue apps, I’m not very happy with the security model and how it a…
8558
Detecting and Preventing Distillation Attacks
We identified coordinated distillation attacks using ~24,000 fraudulent accounts to extract Claude's capabilities.
8559
Schneier on UAE to Ban BlackBerrys
The United Arab Emirates—Dubai, etc.—is threatening to ban BlackBerrys because they can’t eavesdrop on them. At the heart of the battle is access to the data transmitted by BlackBerrys. RIM processes the information through a handful of secure Network Operations Centers around the world, meaning that most governments…
8560
Tempest: Transmit Radio Waves via a PC Video Card with No Extra Hardware
the quality of the music is not exactly what you are used to :-) but at least it works!
8561
EFF to Verizon: Etisalat Certificate Authority Threatens Web Security
EFF will soon be launching the SSL Observatory project, an effort to monitor and secure the cryptographic infrastructure of the World Wide Web. There is much work to be done, and we will need the help of many parties to make the HTTPS-encrypted web genuinely trustworthy. To see why, you can read...
8562
Bittorrent over Tor isn't a good idea
An increasing number of people are asking us about the recent paper coming out of Inria in...
8563
Schneier on Filming the Police
In at least three U.S. states, it is illegal to film an active duty policeman: The legal justification for arresting the “shooter” rests on existing wiretapping or eavesdropping laws, with statutes against obstructing law enforcement sometimes cited. Illinois, Massachusetts, and Maryland are among the 12 states in…
8564
Firesheep, a day later
Most importantly, I certainly never expected there would be this much attention all at once, and within the first 24 hours.
8565
Careful when hosting 3rd party apps on subdomains, or how I hacked Facebook
In the past few years it has become common for site owners to run 3rd party tools on their site. A good example would be Wordpress or other ...
8566
8567
EFF vs. Facebook: Part 2: "Facebook's Connections"
"Connections." It's an innocent-sounding word. But it's at the heart of some of the worst of Facebook's recent changes.Facebook first announced Connections a few weeks ago, and EFF quickly wrote at length about the problems they created. Basically, Facebook has transformed substantial personal...
8568
How Claude's text watermarking works
Future Claude models will generate text that contains a watermark to comply with the EU AI Act. We answer questions about how it works and whether it affects outputs.
8569
8570
Mozilla acquires privacy-focused ad tech company Anonym
Mozilla has acquired Anonym, a trailblazer in privacy-preserving digital advertising. This strategic acquisition enables Mozilla to help raise the bar for
8571
Protect Your Site with a Blackhole for Bad Bots
Tutorial shows how to setup a blackhole bot trap using PHP in just a few easy steps.
8572
8573
8574
Due to concerns about malicious applications, GPT2 will not be released (2019)
We’ve trained a large-scale unsupervised language model which generates coherent paragraphs of text, achieves state-of-the-art performance on many language modeling benchmarks, and performs rudimentary reading comprehension, machine translation, question answering, and summarization—all without task-specific training.
8575
Why Rust for safe systems programming
In this series , we have explored the need for proactive measures to eliminate a class of vulnerabilities and walked through some examples of memory safety issues we’ve found in Microsoft code that could have been avoided with a different language. Now we’ll peek at why we think that Rust represents the best…
8576
8577
Bcrypt is now obsolete
I am speaking today at BSDCan'09 about my work on the scrypt key derivation function. In the context of hardware brute-force attacks, scrypt is thousands of times more secure than existing "best practice" solutions such as bcrypt and PBKDF2; in fact, under reasonable assumptions it is provably as strong as possible…
8578
Critical Django security updates released (0day, exploit in the wild)
Posted by James Bennett on Oct. 9, 2009
8579
8580