61
Malicious code in the purescript NPM installer
I’m a software engineer based in Edinburgh, Scotland. My interests include getting computers to behave, helping other people get computers to behave, open source, maths, and music.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 579 posts.
62
EU Agencies Falsely Report More Than 550 Archive.org URLs as Terrorist Content
CORRECTION: This post previously identified the sender of the 550 falsely identified URLs as Europol's EU Internet Referral Unit (EU IRU). The sender was in fact, the French national Internet Referral Unit, using Europol's application, which sends the email from an @europol.europa.eu address. The EU IRU has informed…
63
The curious case of the Raspberry Pi in the network closet
Personal Blog of Christian Haschek
64
EFF Wins Access to License Plate Reader Data to Study Law Enforcement Use
San Francisco—Electronic Frontier Foundation (EFF) and the American Civil Liberties Union Foundation of Southern California (ACLU SoCal) have reached an agreement with Los Angeles law enforcement agencies under which the police and sheriff’s departments will turn over license plate data they...
65
Open Letter from the OpenID Foundation to Apple Regarding Sign in with Apple
June 27, 2019Mr. Craig Federighi Apple Senior Vice President of Software Engineering One Apple Park Way Cupertino, CA 95014RE: Open Letter from the OpenID Foundation to Apple Regarding Sign In with AppleDear Mr. Federighi,The OpenID Foundation applauds Apple’s efforts to allow users to login to third-party mobile and…
66
67
I got my money back from a scammer by contacting his mom on Facebook (2016)
Personal Blog of Christian Haschek
68
800M Email Addresses Leaked Online by Email Verification Service
Our Biggest Data Breach Discovery of 2019 a massive 800 million emails leaked online. This data breach uncovered how an email verification service uses spam
69
HP printers try to send data back to HP about your devices and what you print
Last week my in-laws politely but firmly asked me to set up their new HP printer. I protested that I’m completely clueless about that sort of thing, despite my tax-return-job-title of “software engineer”. Still remonstrating, I was gently bundled into their study with an instruction pamphlet, a cup of tea, a promise…
70
My application ran away and called home from Redmond
I recently found a surprising leak vector in Windows 10 installations. We were porting our Beacon to Windows and for easy deployment…
71
72
Hey advertisers, track this
If it feels like the ads chasing you across the internet know you a little too well, it’s because they do (unless you’re an avid user of ad blockers, i
73
74
75
A better zip bomb
This article shows how to construct a non-recursive zip bomb that achieves a high compression ratio by overlapping files inside the zip container. "Non-recursive" means that it does not rely on a decompressor's recursively unpacking zip files nested within zip files: it expands fully after a single round of…
76
Vendors must start adding physical on/off switches to devices that can spy on us
Update (May 15, 2019): This post was linked and its author quoted as a source in this Fast Company article on the same subject. Where's my webcam's off switch? Have you ever noticed that your webcam doesn't have an "off" switch? I looked on Amazon, and I couldn't find any webcams for sale that
77
Elliptic Curve Cryptography Explained
Fang-Pen Lin's blog about programming
78
Bypassing GitHub's OAuth Flow with a Head Request
For the past few years, security research has been something I’ve done in my spare time. I know there are people that make a living off of bug bounty programs, but I’ve personally just spent a few hours here and there whenever I feel like it.
79
Superhuman embeds tracking pixels in user emails
Over the past 25 years, email has weaved itself into the daily fabric of life. Our inboxes contain everything from very personal letters, to work correspondence, to unsolicited inbound sales pitches. In many ways, they are an extension of our …
80
Google Chrome Keystone is modifying /var symlink on non SIP Macs causing k-panic
Reports that some AVID Users Macs would no longer boot. It now may be that a Google Chrome Keystone update modifies /var on NON SIP Protected Macs.
81
VPN – Very Precarious Narrative
A very long article about commercial VPNs, their marketing strategies, and the truth behind their privacy and security claims.
82
Google AdWords Exploit Seen in the Wild
See the ad for ebay at the top of the results? Not particularly interesting, right?…
83
When it comes to privacy, default settings matter
What if I told you that on nearly every single website you visit, data about you was transmitted to dozens or even hundreds of companies, all so that the w
84
85
Myequifax.com Bypasses Credit Freeze Pin
Most people who have frozen their credit files with Equifax have been issued a numeric Personal Identification Number (PIN) which is supposed to be required before a freeze can be lifted or thawed. Unfortunately, if you don’t already have an account at the credit bureau’s new myEquifax portal , it may be simple for…
86
773M Password ‘Megabreach’ Is Years Old
My inbox and Twitter messages positively lit up today with people forwarding stories from Wired and other publications about a supposedly new trove of nearly 773 million unique email addresses and 21 million unique passwords that were posted to a hacking forum. A story in The Guardian breathlessly dubbed it “the…
87
88
89
90