1171
Claude Code can debug low-level cryptography
Surprisingly (to me) Claude Code debugged my new ML-DSA implementation faster than I would have, finding the non-obvious low-level issue that was making Verify fail.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,762 posts.
1172
Site Isolation in Firefox
With Site Isolation enabled on Firefox for Desktop, Mozilla takes its security guarantees to the next level.
1173
Chaos Computer Club files criminal complaint against the German Government
On Monday, the Chaos Computer Club (CCC) and the International League for Human Rights (ILMR), have filed a criminal complaint with the Federal Prosecutor General's office. The complaint is...
1174
How the US defense secretary circumvents official DoD communications equipment
A weblog about Signals Intelligence, Communications Security and top level telecommunications equipment
1175
Firefox 57 delays requests to tracking domains
Firefox Quantum - version 57 - introduced number of changes to the network requests scheduler. One of them is using data of the Tracking Protection database to delay load of scripts from tracking domains when possible during the time a page is actively loading and rendering - I call it tailing. This has a positive […]
1176
Technology preview: Private contact discovery for Signal
At Signal, we’ve been thinking about the difficulty of private contact discovery for a long time. We’ve been working on strategies to improve our current design, and today we’ve published a new private contact discovery service. Using this service, Signal clients will be able to efficiently and s...
1177
Google pulling China CNNIC CA from its products
Posted by Adam Langley, Security Engineer On Friday, March 20th, we became aware of unauthorized digital certificates for several Google ...
1178
Hard drive hack provides root access, even after reinstall
Apart from this article, I also gave a talk at OHM2013 about this subject. The video of that talk (minus the first few minutes) is now online .
1179
How mobile apps illegally share personal data
Some mobile apps share your personal data immediately after they're opened. This isn't compliant with EU privacy laws
1180
Block: Inflated user metrics and “frictionless” fraud facilitation
Initial Disclosure: After extensive research, we have taken a short position in shares of Block, Inc. (NYSE: SQ). This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.
1181
Get your loved ones off Facebook
I originally wrote this for my friends and family in 2015, to explain why the latest Facebook privacy policy is really harmful. It’s since been read b
1182
Statement on EU-US Cooperation on Turning Public Opinion Against Encryption
The members of the Global Encryption Coalition’s Steering Committee issued a statement on the EU-US collaboration against encryption.
1183
Apple Exclaves
Enhancing kernel isolation, one step at a time.
1184
Google shared my phone number
When people started calling my personal mobile number with questions about a voluntary organisation I'm involved with, I was confused: we weren't sharing that number. It turns out that Google had decided to take the number I used to verify my identity for Google Business some years prior and start putting it in Google…
1185
Section 215 Expires For Now
Senate to Vote on USA FREEDOM Act Later in the WeekSection 215 has expired. At least for now.The law that the NSA used to authorize its collection of vast amounts of information about the telephone calls of ordinary Americans is no more. Even though it’s likely temporary, it’s a good thing and we...
1186
ARRIS Cable Modem Has a Backdoor in the Backdoor
A couple of months ago, some friends invited me to give a talk at NullByte Security Conference . I started to study about some embedded devi...
1187
1188
Elliptic Curve Cryptography Explained
Fang-Pen Lin's blog about programming
1189
Remote code execution via MIDI messages
Blog post about a reverse engineering project
1190
When your classmates threaten you with felony charges
A few weeks ago, I was part of a talk at DEF CON 31 called The Hackers, The Lawyers, and the Defense Fund. I was asked to share my experience receiving a legal…
1191
Want anonymity? Make a persona not a mystery
Derek Sivers official site. Thoughts on philosophy, culture, self-improvement. Author of Useful Not True, How to Live, Hell Yeah or No, Anything You Want.
1192
What happens when you swipe a credit card
Ninety percent of Americans have used a credit card, but far fewer understand the underlying systems enabling their payments. So let’s dive…
1193
Flock Credibility Lost as It Repeatedly Lies to City Councils, Police, & Public
ACLU documents how surveillance camera company Flock has lied to local officials about its operations
1194
Bypassing GitHub's OAuth Flow with a Head Request
For the past few years, security research has been something I’ve done in my spare time. I know there are people that make a living off of bug bounty programs, but I’ve personally just spent a few hours here and there whenever I feel like it.
1195
Encrypting private data and private communications is now an ethical duty
We have come to a point where end-to-end encrypting all your private data and private communications
1196
EFF's Fight to End Warrantless Device Searches at the Border
EFF has been working on multiple fronts to end a widespread violation of digital liberty—warrantless searches of travelers’ electronic devices at the border. Government policies allow border agents to search and confiscate our cell phones, tablets, and laptops at airports and border crossings for...
1197
LG to ban residential proxies from smart TV apps
The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG’s…
1198
Google Authenticator now supports Google Account synchronization
Christiaan Brand, Group Product Manager We are excited to announce an update to Google Authenticator , across both iOS and Android, which a...
1199
A case against security nihilism
This week a group of global newspapers is running a series of articles detailing abuses of NSO Group’s Pegasus spyware. If you haven’t seen any of these articles, they’re worth re…
1200
Debunking NIST's calculation of the Kyber-512 security level
[Sidney Harris cartoon used with permission. Copyright holder: ScienceCartoonsPlus.com .]