Topics /
The most popular blog posts about security & privacy on Hacker News. 8,762 posts.
We are introducing PQ3, a groundbreaking cryptographic protocol for iMessage that advances the state of the art of end-to-end secure messaging. With compromise-resilient encryption and extensive defenses against even highly sophisticated quantum attacks, PQ3 provides protocol protections that surpass those in all…
We’ve begun rolling out support for passkeys across Google Accounts on all major platforms as an additional option that people can use to sign in.
Today, out of curiosity, I googled for php mysql email register . This returns tutorials, how-tos, code snippets. Most results include flawed DB statements. This usually means something like
I recently bought a cheap Tapo indoor camera to see what my dog gets up to when I am out of the house.
Years ago, I was active in the iOS tweak development scene. I made many products and tools, distributed on Cydia, that modified iOS system behavior and added new functionality to SpringBoard. This was a really fun time, and gave me valuable early career exposure to reverse engineering closed-source binaries…
There is a terrifying and highly effective “method” that criminal hackers are now using to harvest sensitive customer data from Internet service providers, phone companies and social media firms. It involves compromising email accounts and websites tied to police departments and government agencies, and then sending…
Today we’re making the Signal Desktop beta available. Signal Desktop brings the trusted private messaging experience of Signal to the desktop, with a simplicity that allows you to seamlessly continue conversations back and forth between your mobile device and your desktop computer.
The French government is considering a law that would require web browsers – like Mozilla's Firefox – to block websites chosen by the government.
All GitHub Pages sites served from the github.io domain will now have a Permissions-Policy: interest-cohort=() header set. Pages sites using a custom domain will not be impacted. Learn more about…
exploit NAT/firewalls to access TCP/UDP services bound to any system behind victim's NAT
The Containers Feature in Firefox Nightly enables users to login to multiple accounts on the same site simultaneously and gives users the ability to segregate site data for improved privacy and security. We all portray different characteristics of ourselves in different situations. The way I speak with my son is much…
A compromised release of the popular Rust crate arrayref pulled in a typosquatted proc-macro1 whose build script downloads and runs a remote binary at compile…
tl;dr: A vandal deleted NewsBlur’s MongoDB database during a migration. No data was stolen or lost.
The leaked draft text suggests that the Commission significantly caved in to US’s excessive demands for unfettered information access.
So you’ve washed your sheets and vacuumed under the couch in the name of spring cleaning. But what about your online clutter? Apps that delight, inform a
Legal intern Raj Gambhir was the principal author of this post.Update: On April 15, 2026 the FAA rescinded the TFR (FDC 6/4375) and instead issued an advisory (FDC 6/2824), which states: [Drone] operators are advised to avoid flying in proximity to: Department of War (DOW), Department of Energy (...
There is more than enough written on the mechanics of and mitigations for the recent severe RCE in log4j . On prevention, this is the most interesting widely-reshared insight I have seen:
You would think less than a month after a very popular HackerNews article on how Dropbox hacks your Mac, the file sharing company would be careful about their software distribution. They just distributed an update that hacks your UI and presents a Yahoo-like banner from 2004.
Posted by Tavis Ormandy.Symantec is a popular vendor in the enterprise security market, their fla...
Details of the Manifest V2 phase-out and end of life.
Google has created a new tracking mechanism called FLoC, put it in Chrome, and automatically turned it on for millions of users. It's bad for privacy, which is why we're now blocking it in the DuckDuckGo extension.
I am frequently away from home (whether on family vacation, a business trip, or out around town), but I have a number of important resources on my home network—as any homelabber does. There are services I like to access remotely like my NAS with my giant media library, my edit server with all my active projects, and…
As one of the managers of the Digital Dissident Devroom , I invite you to be part of a conversation we cannot afford to ignore.
The risk that cryptographically-relevant quantum computers materialize within the next few years is now high enough to be dispositive, unfortunately.
