Topics /
The most popular blog posts about security & privacy on Hacker News. 8,762 posts.
The European Commission is currently in the process of enacting a law called Chat control. If the law goes into effect, it will mean that all EU citizens' communications will be monitored and listened to.
THIS POST MOVED TO MY NEW BLOG AT https://blog.phor.net/how-to-zero-day-a-bank
IP, technology & commercial law
ICE is using a Palantir tool that uses Medicaid and other government data to stalk people for arrest. This is exactly the kind of data privacy abuse that EFF has been warning about.
In order to store less data we will no longer accept NEW PayPal and Credit card subscriptions (recurring payments). One-time payments are not affected.
gaining access to anyones browser without them even visiting a website
An AI agent tried to join the DN42 hobbyist network to perform a network scan, and bankrupted its operator with a $6531.30 AWS bill, to the extent that they are begging for donations from the DN42 community.
How Google actively breaks Immich deployments, an open-source Google Photos alternative.
Between the period of July 6th to October 6th myself, Brett Buerhaus, Ben Sadeghipour, Samuel Erb, and Tanner Barnes worked together and hacked on the Apple bug bounty program.
Learn about the EU Chat Control proposal and contact your representatives to protect digital privacy and encryption.
As a security conscious user who follows the best practices like: using unique passwords, 2FA, only using a secure computer and being able…
Citizen Lab found an actively exploited zero-click vulnerability being used to deliver NSO Group’s Pegasus mercenary spyware while checking the device of an individual employed by a Washington DC-based civil society organization with international offices. We refer to the exploit chain as BLASTPASS. The exploit chain…
Bespoke cyber investigations and dark web intelligence — threat actor attribution, asset tracing, digital forensics, and ransomware negotiation.
After almost twenty years on the platform, EFF is logging off of X. This isn’t a decision we made lightly, but it might be overdue.
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
Signal’s mission and sole focus is private communication. For years, Signal has kept your messages private, your profile information (like your name and profile photo) private, your contacts private, and your groups private – among much else. Now we’re taking that one step further, by making your...
WeChat communications conducted entirely among non-China-registered accounts are subject to pervasive content surveillance that was previously thought to be exclusively reserved for China-registered accounts.
A Hacker's Blog of Unintended Use and Insomnia.
The very short version: it is madness to continue transferring the running of European societies and governments to American clouds. Not only is it a terrible idea given the kind of things the “King of America” keeps saying, the legal sophistry used to justify such transfers, like the nonsense letter the Dutch cabinet…
Anthropic accidentally shipped a source map in their npm package, exposing the full Claude Code source. Here's what I found inside.
The popular packages debug and chalk on npm have been compromised with malicious code
We are working hard to make the official product, the Mozilla VPN, available in selected regions this year. We will continue to offer the Mozilla VPN at the current pricing model for a limited time, which allows you to protect up to five devices on Windows, Android, and iOS at $4.99/month.
This is the latest entry in my lengthy archive of writing, talks, and interviews about the EARN IT Act: * Blog posts at the CIS blog: part 1, part 2, part 3, part 4, part 5, part 6, part 7, part 8 * Articles for Brookings TechStream: part 1, part 2 * Talks
News and insights on the Android platform, developer tools, and events.
This weekend I wanted to create a new App in Azure so I could help a local nonprofit automate one of their donor relations processes via email through Office 365. So I tried registering an app by visiting the App Registration Portal. I signed in to my personal Microsoft account, clicked 'New registration', then was…
