61
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 578 posts.
62
Guccifer 2.0: DNC's servers hacked by a lone hacker
Worldwide known cyber security company CrowdStrike announced that the Democratic National Committee (DNC) servers had been hacked by “sophisticated” hacker groups. I’m very please…
63
64
With Windows 10, Microsoft Disregards User Choice and Privacy
Microsoft had an ambitious goal with the launch of Windows 10: a billion devices running the software by the end of 2018. In its quest to reach that goal, the company aggressively pushed Windows 10 on its users and went so far as to offer free upgrades for a whole year. However, the company’s...
65
“Should you encrypt or compress first?”
Appcanary makes sure you never run vulnerable software on your servers. Like our blog? Subscribe to our newsletter or podcast . Browse the archive , or follow us on twitter , github or rss .
66
67
Two years spent spamming spammers back
I created a bot to respond to these types of emails…
68
69
Gmail Will Warn If Message Is Not Authenticated/Encrypted
Making email safer for you with two new security features in Gmail on the web.
70
More Than 1M Google Accounts Breached by Gooligan
As a result of a lot of hard work done by our security research teams, we revealed today a new and alarming malware campaign. The attack campaign, named %
71
Kaspersky OS
At last – we’ve done it! I’ve anticipated this day for ages – the day when the first commercially available mass market hardware device based our own secure operating system landed on my desk.
72
Upgrade your SSH keys
Upgrade to faster and more secure SSH keys. I promise a smooth transition to the use of your new keys.
73
How I could have hacked any Facebook account
Note: This is being published with the permission of Facebook under the responsible disclosure policy. The vulnerability is now fixed. ...
74
Let's Encrypt has issued its first million certificates
At 9:04am GMT today, the Let's Encrypt Certificate Authority issued its millionth certificate. This is an amazing success, coming only 3 months and 5 days since a beta version of the service became publicly available. We're very excited to be building a more secure and fully encrypted future for...
75
Microsoft Kills off ISVs by Foisting Its Own Products That Are No Better
Hi Folks! Meet David, the magnificent masterpiece sculpted by Michelangelo at the start of the 16th century. A photo of his face with that curious furrowed brow featured on our very first anti-cyber…
76
Running a Tor Exit Node for Fun and E-mails
The Tor Project is a non-profit organization in the United States that created Tor, The Onion Router, a free software that creates an open network of volunteers which helps people anonymize their traffic by routing it through three or more other computers before it reaches its final destination.
77
“Subject: Urgent Warning”
Back in December I got a desperate email from this person. A woman who said her Instagram had been hacked and since she found my contact info in the app she mailed me and asked for help. I of course replied and said that I have nothing to do with her being hacked but I … Continue reading “Subject: Urgent Warning” →
78
Please scan my towel
My friend Scott pointed out the towels in most hotels now have RFID tags to help with inventory control: I also knew that my RSA Conference badge would have an RFID tag in it so it could be scanne…
79
This is why people fear the Internet of Things
Imagine buying an internet-enabled surveillance camera, network attached storage device, or home automation gizmo, only to find that it secretly and constantly phones home to a vast peer-to-peer (P2P) network run by the Chinese manufacturer of the hardware. Now imagine that the geek gear you bought doesn’t actually…
80
LinkedIn password leak
CES 2015 was a superb event in terms of the amount of new technology per square foot. But, from an information security standpoint, it did not appear all that positive.
81
NoScript is harmful and promotes malware
NoScript proudly calls itself a security extension advertising itself as an extension with “whitelist based pre-emptive script blocking approach prevents exploitation of security vulnerabilities (known and even not known yet!) with no loss of functionality…”
82
83
The Tor Project: Building the Next Generation of Onion Services
A few weeks ago, a small group of Tor developers got together in Montreal and worked on onion...
84
85
Taking Over DigitalOcean Domains via a Lax Domain Import System
A Hacker's Blog of Unintended Use and Insomnia.
86
Sophisticated OS X Backdoor Discovered
Back in January this year we found a new family of cross-platform backdoors for desktop environments. After the discovery of the binaries for Linux and Windows systems, we have now finally come across the OS X version of Mokes.A.
87
How I Could Steal Money from Instagram, Google and Microsoft
TL;DR: Instagram ($2000), Google ($0) and Microsoft ($500) were vulnerable to direct money theft via premium phone number calls. They all offer services to supply users with a token via a computer-voiced phone call, but neglected to properly verify whether supplied phone numbers were legitimate, non-premium numbers…
88
89
There are no secure smartphones
Modern smartphones have a CPU chip, and a baseband chip which handles radio network communications (GSM/UMTS/LTE/etc.) This chip is connected to the CPU via DMA. Thus, unless an IOMMU is used, the baseband has full access to main memory, and can compromise it arbitrarily.
90