61
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 642 posts.
62
63
Web hacking techniques of 2021
Welcome to the Top 10 (new) Web Hacking Techniques of 2021, the latest iteration of our annual community-powered effort to identify the most significant web security research released in the last year
64
Windows Defender is enough, if you harden it
This article is not intended to convince you to abandon your current antivirus solutions. In this post I would like to share my observations and ways to improve the effectiveness of Defender. You don’
65
Hackers gaining power of subpoena via fake “emergency data requests”
There is a terrifying and highly effective “method” that criminal hackers are now using to harvest sensitive customer data from Internet service providers, phone companies and social media firms. It involves compromising email accounts and websites tied to police departments and government agencies, and then sending…
66
Internet spring cleaning: How to delete Instagram, Facebook and other accounts
So you’ve washed your sheets and vacuumed under the couch in the name of spring cleaning. But what about your online clutter? Apps that delight, inform a
67
SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri
Gui Rambo writes about his coding and reverse engineering adventures.
68
Git security vulnerability announced
Upgrade your local installation of Git, especially if you are using Git for Windows, or you use Git on a multi-user machine.
69
SOC2: The screenshots will continue until security improves
We got SOC2 certified so now you have to pay us more.
70
Bunny fonts – privacy respecting drop-in replacement for Google Fonts
Strengthen your privacy, improve your performance and give your website a personality by using Bunny Fonts. The only fully GDPR fonts powered by a CDN!
71
We purchased a machine from China and it came with malware preinstalled
Zhengbang ZB3245 review. We bought a Zhengbang Pick & Place machine and this page tells you all about our experience of setting up and using.
72
Brave browser now blocks cookie banners
New versions of Brave will hide—and, where possible, completely block—cookie consent notifications. Brave's approach is distinct and more privacy-preserving than similar systems used in other browsers.
73
Final thoughts on Ubiquiti
Last year, I posted a series of articles about a purported “breach” at Ubiquiti. My sole source for that reporting was the person who has since been indicted by federal prosecutors for his alleged wrongdoing – which includes providing false information to the press.
74
Things not available when someone blocks all cookies
The personal blog of Thomas Steiner
75
“Magic links” can end up in Bing search results, rendering them useless
I recently started verifying user email addresses during signup to prevent bots, mistyped emails, and also to ensure that addresses are…
76
Nintendo Switch prevents downgrades by irreparably blowing its own fuses (2020)
How the Nintendo Switch uses irreversible hardware fuses to prevent firmware downgrades.
77
LastPass user vaults stolen in recent hack
Please refer to the latest article for updated information.nbs[..]
78
Decrypting your own HTTPS traffic with Wireshark
Code level discussion of web scraping, gray hat automation, growth hacking and bounty hunting
79
80
Using HTTP Basic Auth in 2022
Field notes on shipping fast, privacy-first, evergreen web products.
81
Chat control: EU Commission presents mass surveillance plan on May 11
Next week on Wednesday (May 11), the EU Commission will present an EU draft law on mandatory chat control to the public for the first time. Similar to Apple's highly controversial "SpyPhone" plans, the Commission wants to oblige all providers of email, chat and messaging services to search for susp
82
Apple AirTags draining battery of devices close by
If you have AirTags in the vicinity of your iPad it drains its battery for no reason. The past months I’ve been wondering why my iPad Pro always needed to be recharged when I used to use it without charging for weeks. I’m not the only one…
83
GoodWill ransomware forces victims to donate to the poor
Goodwill ransomware group propagates very unusual demands in exchange for the decryption key. The Robin Hood-like group is forcing its Victims to donate to the poor and provides financial assistance to the patients in need.
84
85
Data shows that the EU's CSAM scanning will not have the intended effect
We have analyzed telecommunication surveillance orders. Data shows that the EU's CSAM scanning is completely disproportionate and must be stopped.
86
GDPR enforcer rules that IAB Europe’s consent popups are unlawful
EU data protection authorities find that the consent popups that plagued Europeans for years are illegal. All data collected through them must be deleted. This decision impacts Google’s, Amazon’s and Microsoft’s online advertising businesses.
87
SELinux is unmanageable; just turn it off if it gets in your way
I’ve been an SELinux complexity apologist for years. Lately, I’ve concluded that every implementation with difficult-to-configure policies is just unmanageable.
88
89
Don't use text pixelation to redact sensitive information
See why you should never use pixelation for redacting text and why it is a surefire way to get your data leaked. Learn from security researcher Dan Petro.
90
You don’t want to be on Cloudflare’s naughty list
My home IP ended up on Cloudflare’s naughty list for six days. Most websites and many apps loaded slowly, partially, or not at all. Just had to wait it out.