1411
Winding down Google Sync and Less Secure Apps support
MDM push of password based IMAP, CalDAV, CardDAV, STMP, POP and Exchange ActiveSync (Google Sync) will no longer work for customers who try to connect to an LSA for the first time.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,767 posts.
1412
Reverse engineering a car key fob signal
I’ve had the curiosity to explore radio communication protocols for a few years now, ever since I’ve started fiddling around with an RTL-SDR dongle. I always had the goal of figuring out how data is transmitted in remote controls (car key fobs particularly), trying replay attacks, and other possible attack vectors.
1413
Scammed out of $130K via fake Google call, spoofed Google email and auth sync
On June 19th, my life changed with a phone call.
1414
Android now stops you sharing your location in photos
My wife and I run OpenBenches. It's a niche little site which lets people share photos of memorial benches and their locations. Most modern phones embed a geolocation within the photo's metadata, so we use that information to put the photos on a map. Google's Android has now broken that. On the web, we used to use…
1415
1416
Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard
Faster, easier and more secure sign-ins will be available to consumers across leading devices and platforms
1417
Infrastructure bill cryptocurrency surveillance provision is a privacy disaster
The forthcoming Senate draft of Biden's infrastructure bill—a 2,000+ page bill designed to update the United States’ roads, highways, and digital infrastructure—contains a poorly crafted provision that could create new surveillance requirements for many within the blockchain ecosystem. This could...
1418
1419
1420
Windows 10 20H2: ChkDsk damages filesystem on SSDs with KB4592438 installed
[German]In Windows 10 20H2 with installed cumulative update KB4592438, chkdsk causes massive issues. It destroys the file system during a disk check on SSDs, so Windows 10 can’t start after a reboot.
1421
1422
Privacy Is a Human Right
Every donation between now and December 31 will be matched, 1:1, by Friends of Tor. Stand up for the human right to privacy and donate to the Tor Project today. Plus… new swag!
1423
SSH over HTTPS
Tl;DR: to pass SSH through HTTPS you need to tweak client and server sides as the following:
1424
Golang SSH Security
Working on a project for a client recently, I needed to speak the SSH protocol in Golang code. So I started with the x/crypto/ssh package, part of the suite of libraries from the Golang developers which is not part of the standard library and not part of their usual compatibility guarantees, but more along the lines…
1425
The State of State Machines
Posted by Natalie Silvanovich, Project ZeroOn January 29, 2019, a serious vulnerability was ...
1426
What’s in a PR statement: LastPass breach explained
The LastPass statement on their latest breach is full of omissions, half-truths and outright lies. I’m providing the necessary context for some of their claims.
1427
The Fully Remote Attack Surface of the iPhone
Posted by Natalie Silvanovich, Project ZeroWhile there have been several rumours and reports of f...
1428
Ofcom concedes defeat in 4chan case
Insofar as a political organization like Ofcom is even capable of admitting defeat, it did so in the 4chan enforcement today. In testimony before the Commons Digital, Culture, Media, and Sport Comm…
1429
Google restricts Android sideloading
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
1430
One in every 600 websites has .git exposed
Deeply technical and hands-on AI and tech leader. Built, scaled and sold my own… · Experience: Cubes · Education: Nanzan University · Location: London Area, United Kingdom · 500+ connections on LinkedIn. View Jamie Brown’s profile on LinkedIn, a professional community of 1 billion members.
1431
AI-Generated GitHub Copilot “Autofix” Allowed Compromise of Snowflake's Jira
Wiz Red Agent finds its way into Snowflake's internal Jira through a flaw in a GitHub Copilot–Assisted PR.
1432
Unauthorized access to cameras in Safari on macOS and iOS
A vulnerability in Safari allowed hackers to access the iPhone and Macbook cameras. (CVE-2020-3852, CVE-2020-3864, CVE-2020-3865, CVE-2020-3885, CVE-2020-3887 & CVE-2020-9784)
1433
Inside the Largest US Voter Data Leak
UpGuard has discovered an open database containing information on what appear to be approximately 198 million American voters left misconfigured by a GOP analytics firm.
1434
How Google Chrome’s ad blocker works
Get the details on how the built-in ad-blocker in Google Chrome works. The ad-blocker only kicks in on websites in violation of the Better Ad Standards policies.
1435
1436
How to increase your chances of finding a hidden camera
Take note of the title of this blog. What you read below will give you some additional knowledge that may help you identify a hidden camera but it certainly won’t guarantee that. We got lucky…
1437
Mullvad: Diskless infrastructure using stboot in beta
Diskless infrastructure using stboot (in beta) is now available on a pair of WireGuard servers in Sweden.
1438
1439
Why I Wrote PGP (1999)
"Whatever you do will be insignificant, but it is very important that you do it." -Mahatma Gandhi
1440
Burner Phone 101
Hosted by the Brooklyn Public Library, this Burner Phone 101 workshop introduced participants to phone-related risk modeling, privacy-protective smartphone practices, the full spectrum of burner phone options, and when to leave phones behind entirely.