1051
How I reverse-engineered Google Docs to play back any document's keystrokes
How James Somers reverse-engineered Google Docs to play back any document's keystrokes
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,762 posts.
1052
NIST’s new password rules – what you need to know
The Sophos Blog
1053
800M Email Addresses Leaked Online by Email Verification Service
Our Biggest Data Breach Discovery of 2019 a massive 800 million emails leaked online. This data breach uncovered how an email verification service uses spam
1054
How a single line of code could brick your iPhone
Gui Rambo writes about his coding and reverse engineering adventures.
1055
1056
The underground world of credit card network exploitation
SaaS companies face rising card testing attacks, with similar card parameters hinting at a possible bank leak. Stripe's Radar and custom rul
1057
When it comes to internet privacy, be afraid, analyst suggests
Cybersecurity expert Bruce Schneier, a fellow with the Berkman Klein Center for Internet & Society, discusses what consumers can do to protect themselves from government and corporate surveillance.
1058
CloudPets teddy bears leaked and ransomed, exposing kids' voice messages
Only a couple of weeks ago, there were a lot of news headlines about how Germany had banned an internet-connected doll called "Cayla" over fears hackers could target children [http://www.telegraph.co.uk/news/2017/02/17/germany-bans-internet-connected-dolls-fears-hackers-could-target/] . One of
1059
The Day the Telnet Died
On January 14, 2026, global telnet traffic observed by GreyNoise sensors fell off a cliff. A 59% sustained reduction, eighteen ASNs going completely silent, five countries vanishing from our data entirely. Six days later, CVE-2026-24061 dropped. Coincidence is one explanation.
1060
Your Phone Is Your Castle
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
1061
Data shows that the EU's CSAM scanning will not have the intended effect
We have analyzed telecommunication surveillance orders. Data shows that the EU's CSAM scanning is completely disproportionate and must be stopped.
1062
Google is making private AI practical with homomorphic encryption
Today we're excited to showcase HEIR, the latest powerful tool added to our Private Computing Toolkit. HEIR is an open source compiler that unlocks cryptographically-sec…
1063
I lost my OpenBSD full-disk encryption password
The other day I set up a new OpenBSD instance with a nice RAID array, encrypted with Full Disk Encryption. And promptly proceeded to forget part of the passphrase.
1064
HP printers try to send data back to HP about your devices and what you print
Last week my in-laws politely but firmly asked me to set up their new HP printer. I protested that I’m completely clueless about that sort of thing, despite my tax-return-job-title of “software engineer”. Still remonstrating, I was gently bundled into their study with an instruction pamphlet, a cup of tea, a promise…
1065
URL shorteners set ad tracking cookies
This Christmas, a family member sent me a URL to a family Zoom call. However, they didn’t send me a direct link to Zoom. Instead, they sent me a
1066
1067
1068
NBC Story about Hacking at Sochi is 100% Fraudulent
Yesterday (Feb 5 2014) On February 4th, NBC News ran a story claiming that if you bring your mobile phone or laptop to the Sochi Olympics...
1069
1070
What happens when the Secret Service uses a NSL on you
Anubis could not load its JavaScript. The server may be overloaded. Please reload the page to try again.
1071
My application ran away and called home from Redmond
I recently found a surprising leak vector in Windows 10 installations. We were porting our Beacon to Windows and for easy deployment…
1072
Uncovering a 24-year-old bug in the Linux Kernel
How a failing rsync run led to the discovery of a long-standing bug in the Linux TCP implementation.
1073
IOHIDeous OS X Local Kernel Vulnerability
Siguza’s Blog
1074
1075
Gone in Six Characters: Short URLs Considered Harmful for Cloud Services
[This is a guest post by Vitaly Shmatikov, professor at Cornell Tech and once upon a time my adviser at the University of Texas at Austin. — Arvind Narayanan.] TL;DR: short URLs produced by bit.ly, goo.gl, and similar services are so short that they can be scanned by brute force. Our scan discovered a large […]
1076
‘Trojan Source’ Bug Threatens the Security of All Code
Virtually all compilers — programs that transform human-readable source code into computer-executable machine code — are vulnerable to an insidious attack in which an adversary can introduce targeted vulnerabilities into any software without being detected, new research released today warns. The vulnerability…
1077
Weaponizing image scaling against production AI systems
In this blog post, we’ll detail how attackers can exploit image scaling on Gemini CLI, Vertex AI Studio, Gemini’s web and API interfaces, Google Assistant, Genspark, and other production AI systems. We’ll also explain how to mitigate and defend against these attacks, and we’ll introduce Anamorpher, our open-source…
1078
Apple and Google deliver support for unwanted tracking alerts in iOS and Android
Apple and Google have teamed up to deliver support for unwanted Bluetooth tracking alerts in iOS and Android.
1079
Hey advertisers, track this
If it feels like the ads chasing you across the internet know you a little too well, it’s because they do (unless you’re an avid user of ad blockers, i
1080
Nx compromised: malware uses Claude code CLI to explore the filesystem
What is s1ngularity-repository? Nx is compromised and the malware steals wallets and API keys using Claude CLI or Gemini.