1261
I'm being cyberattacked by Tesla, Inc
A bungled Assetnote scan
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,766 posts.
1262
1263
Stopping phishing campaigns with Bash
Personal Blog of Christian Haschek
1264
Palo Alto Networks sends cease-and-desist letter to take down review videos
In response to our Cloud Security Punch-Out! videos, Palo Alto Networks sent this cease and desist letter, demanding the comparison be removed. Here is my response.
1265
Two years spent spamming spammers back
I created a bot to respond to these types of emails…
1266
Apple defeats liability for not scanning iCloud for CSAM
This case involves Apple’s handling of user-uploaded files hosted in private iCloud storage. Instead of adopting PhotoDNA to scan hosted files for CSAM, Apple created its own proprietary alternative, NeuralHash, which apparently wasn’t as good. So Apple U-turned on its...
1267
Privacy matters even if “you have nothing to hide”
Self-hosted and privacy-respecting blog software that puts the domain, data, and reader relationship back in your hands. Private alternatives to Medium, vetted since 2015.
1268
Civic Hygiene – avoid building technologies that could be used by a police state (2013)
Imagine, just for a moment, that the Government wanted to keep a record of everyone's sexuality. They need to know this detailed demographic data because it will be highly useful in civic planning. It will help them work out what provision needs to be made for sexual health services, how many children are likely to be…
1269
PHP2Shell: AI uncovers critical RCE in PHP
Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.
1270
My Scammer Girlfriend: Baiting a Romance Fraudster
Romance fraud has been growing as an issue for years. It's not uncommon to see news stories with bewildered victims explaining just how deeply they'd been sucked in. After receiving a number of opener
1271
Cloudflare is turning off the internet for me
A classically trained sysadmin shouting into the void.
1272
Introducing Anonymous Login and an Updated Facebook Login
Improved privacy options put better controls in your hands.
1273
Cursor 0day: When Full Disclosure Becomes the Only Protection Left
A seven-month-old arbitrary code execution vulnerability remains present in Cursor, leaving 1 million daily users to rely on public disclosure after months of unsuccessful attempts to obtain remediation updates.
1274
New study: The advertising industry is systematically breaking EU law
The online advertising industry is behind comprehensive illegal collection and indiscriminate use of personal data, research from the Norwegian Consumer Council shows.
1275
When it comes to privacy, default settings matter
What if I told you that on nearly every single website you visit, data about you was transmitted to dozens or even hundreds of companies, all so that the w
1276
Google has most of my email because it has all of yours (2014)
Republished by Slate. Translations available in French (Français), Spanish (Español), Chinese (中文) For almost 15 years, I have run my own email server which I use for all of my non-work corresponde…
1277
Over the edge: The use of design tactics to undermine browser choice
In order to be able to choose their own browser, people must be free to download it, easily set it to default and to continue using it - all without ...
1278
1279
1280
Reverse engineering my e-scooter and rewriting the firmware in Rust
I reverse engineered the hardware and firmware of my Egret GT E-Scooter. I describe how I got in, analysed communication between components, and reverse engineered firmware. I speak about writing custom firmware for the display unit.
1281
1282
In the Wake of Aaron Swartz's Death, Let's Fix Draconian Computer Crime Law
Outpourings of grief and calls for change continue to flood the Internet after the suicide of Aaron Swartz, only 26 years old. Aaron was one of our community's best and brightest, and he acheived great things in his short life. He was a coder, a political activist, an entrepreneur, a contributor to...
1283
Parental controls aren't for parents
I found a stranger texting my 12-year-old on a 'kid-safe' Gabb phone. Parental controls are broken.
1284
Companies embracing SMS for account logins should be blamed for SIM-swap attacks
[UPDATE Since this was posted in 2024 : Major US telcos like AT&T, T-Mobile, and Verizon have suffered a months-long breach (the ongoing Salt Typhoon attack). These companies, of course, pass along the unencrypted SMSes vital to countless log in flows, account re-activations, and password resets. They are now known to…
1285
1286
GitHub RCE Vulnerability: CVE-2026-3854 Breakdown
A CVSS 8.7 vulnerability in GitHub Enterprise Server allows remote code execution. Read the threat brief and find vulnerable GHES instances from Wiz.
1287
Belgium legalises ethical hacking
On 15 February 2023, Belgium saw the entering into force of a new ‘whistleblower’ law, which legalised ‘ethical hacking’ even for cases where the hacked entity did not consent to it. In order to benefit from such decriminalisation, the law poses a number of conditions for ethical hacking, that have to be fulfilled in…
1288
1289
Google Chrome Hacked?
VUPEN Security provides vulnerability management and intelligence solutions (advisories, analysis, exploits).
1290
Gmail Will Warn If Message Is Not Authenticated/Encrypted
Making email safer for you with two new security features in Gmail on the web.