Topics /
The most popular blog posts about security & privacy on Hacker News. 8,766 posts.
There’s a story in today’s Washington Post “Cybersecurity 202” newsletter that confirms that the Department of Justice is capitalizing on the techlash in order to build up congressional support for the DOJ’s long-desired goal of legislation that will restrict your freedom to encrypt your data and
Upgrade to faster and more secure SSH keys. I promise a smooth transition to the use of your new keys.
This is an interesting demonstration of the capabilities of afl ; I was actually pretty surprised that it worked! $ mkdir in_dir $ echo ' h...
Prisma Cloud is the most complete Cloud Native Application Protection Platform (CNAPP) for code to cloud security in any cloud, multicloud, and hybrid environment.
It turns out that Foreign Intelligence Surveillance Court in 2011 found that the NSA's surveillance under the FISA Amendments Act to be unco...
Photographic memory comes to Windows, and is the biggest security setback in a decade.
"Internal ICE material and testimony from an official obtained by 404 Media provides the clearest link yet between the technological infrastructure Palantir is building for ICE and the agency’s activities on the ground."
Zero-Click Zip TL;DR
Note: This is being published with the permission of Facebook under the responsible disclosure policy. The vulnerability is now fixed. ...
At 9:04am GMT today, the Let's Encrypt Certificate Authority issued its millionth certificate. This is an amazing success, coming only 3 months and 5 days since a beta version of the service became publicly available. We're very excited to be building a more secure and fully encrypted future for...
All internet voting systems are insecure. The insecurity is worse than a well-run conventional paper ballot system, because a very small number of people may have the power to change any (or all) votes that go through the system, without detection.
Wherein I move many of my internet services away from Google Apps.
A 14-year-old eighth grader in Florida, Domanik Green, has been charged with a felony for “hacking” his teacher’s computer. The “hacking” in this instance was using a widely known password to change the desktop background of his teacher’s computer with an image of two men kissing. The outrage of...
Video showing bitwarden. User then sets the pin 2345. The vault is locked and then bitwarden is quit. In the terminal the exploit program is run, which after a short while outputs the PIN 2345.
The full Claude Code transcript from discovering and responding to the litellm 1.82.8 PyPI supply chain attack on March 24, 2026 — from mysterious process explosions to malware identification to public disclosure.
The BeyondCorp security engineering team at Google just announced their fourth research paper.
Search IETF mail list archives
As previously announced, starting on August 13, 2021, at 09:00 PST, we will no longer accept account passwords when authenticating Git operations on GitHub.com. Instead, token-based authentication (for example, personal…
Proton Mail is a private email service takes a radically different approach to security. Find out how Proton Mail security compares to Gmail security.
In the beginning, things were simple: you had two strings (a username and a password) and if someone knew both of them, they could log in. Easy. But the ecosystem in which they were used was simple too, for example in MIT's Time-Sharing Computer [https://www.wired.com/
Early last week, Google released a new stable update for Chrome. The update included a single security fix that was reported by Apple's Security Engineering and Architecture (SEAR) team. The issue, CVE-2023-4863, was a heap buffer overflow in the WebP image library, and it had a familiar
Use HTML5 localStorage to completely fill up Chrome, Safari, and IE users hard disks. Trololo...
Stories about computer security tend to go viral when they bridge the vast divide between geeks and luddites, and this week’s news about a hacker who tried to poison a Florida town’s water supply was understandably front-page material. But for security nerds who’ve been warning about this sort of thing for ages, the…
Vault is a platform for centralized secrets management, encryption as a service, and identity-based access.
Teardown and analysis of electronics. Integrated circuit design analysis.
Posted by Gal Beniamini, Project ZeroIt’s a well understood fact that platform security is ...
