121
Tor Browser 12.0
Tor Browser 12.0 is now available. This new release updates Tor Browser to Firefox Extended Support Release 102.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 642 posts.
122
WireGuard multihop available in the Mullvad app
To further increase your privacy and make your traffic harder to analyze, you can now route all your traffic through two servers instead of just one, directly in our desktop app, version 2022.1 and newer.
123
124
Hacking the Apple Webcam (Again)
$100,500 Apple Bug Bounty for hacking the webcam via a Safari Universal Cross-Site Scripting (UXSS) bug. CVE-2021-30861, CVE-2021-30975
125
Ad blocking is under attack (2017)
Well, this is huge, so I'd like to draw your attention to what's happening right now. This is a very alarming case, and it concerns every ad blocker user.
126
CatalanGate: Spyware operation against Catalans using Pegasus and Candiru
The Citizen Lab, in collaboration with Catalan civil society groups, has identified at least 65 individuals targeted or infected with mercenary spyware, including members of the European Parliament, Catalan Presidents, legislators, jurists, and members of civil society organisations.
127
Vulnerability Management for Go
Announcing vulnerability management for Go, to help developers learn about known vulnerabilities in their dependencies.
128
129
130
Chainalysis CTO said blockchain is easier to trace than paper money
Contrary to his original intentions, cryptocurrencies and DeFi platforms are now more vulnerable to privacy breaches and hacking than…
131
I ran the worlds largest DDoS-for-Hire empire and Cloudflare helped
The perils of remaining neutral on a global scale: fanning the flames and selling the extinguisher.
132
An update on AirTag and unwanted tracking
Apple announced it has identified even more ways to update AirTag safety warnings and help guard against unwanted tracking of people and property.
133
Improved Process Isolation in Firefox 100
Firefox uses a multi-process model for additional security and stability while browsing. Web Content is rendered in separate processes.
134
SSH Bastion Host Best Practices
Learn 14 best practices to build and deploy a security-hardened SSH bastion host based on OpenSSH server.
135
SATCOM terminals under attack in Europe: a plausible analysis
------ Update 03/12/2022 Reuters has published new information on this incident, which initially matches the proposed scenario. You can find...
136
Google to Acquire Mandiant
Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.
137
DuckDuckGo email protection beta now open
DuckDuckGo Email Protection is a free email forwarding service that removes multiple kinds of trackers and lets you create unique private email addresses.
138
A Kernel Hacker Meets Fuchsia OS
Fuchsia is a general-purpose open-source operating system created by Google. It is based on the Zircon microkernel written in C++ and is currently under active development. The developers say that Fuchsia is designed with a focus on security, updatability, and performance. As a Linux kernel hacker, I decided to take a…
139
Sending spammers to password purgatory
How best to punish spammers? I give this topic a lot of thought because I spend a lot of time sifting through the endless rubbish they send me. And that's when it dawned on me: the punishment should fit the crime - robbing me of my time - which means that
140
Countering threats from North Korea
On February 10, Threat Analysis Group discovered two distinct North Korean government-backed attacker groups exploiting a remote code execution vulnerability in Chrome, …
141
Zero-Day Exploitation of Atlassian Confluence
UPDATE: On June 3, 2022, Atlassian updated its security advisory with new information regarding a fix for Confluence Server and Data Center to address CVE-2022-26134. Users are encouraged to update immediately to […]
142
143
AdGuard publishes the first ad blocker built on Manifest V3
We put a lot of effort into developing an experimental browser extension that could meet all the requirements of Manifest V3 (Chrome's new extension API) and block ads properly within its tight confines. Read the article to find out what we went through and what we achieved.
144
Turkish Magician Built a $600M Nasdaq-Listed Scam Based on Lies
Initial Disclosure: After extensive research, we have taken a short position in shares of Enochian Biosciences, Inc. (NASDAQ:ENOB). This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.
145
Stranger Strings: An exploitable flaw in SQLite
Trail of Bits is publicly disclosing CVE-2022-35737, which affects applications that use the SQLite library API. CVE-2022-35737 was introduced in SQLite version 1.0.12 (released on October 17, 2000) and fixed in release 3.39.2 (released on July 21, 2022). CVE-2022-35737 is exploitable on 64-bit systems, and…
146
Oh, the Places Your Apple ID Will Go
Here is a short and curious Twitter thread from app developers and security researchers Tommy Mysk and Talal Haj Bakry: Apple’s analytics data include an ID called “dsId”. We were able to verify that “dsId” is the “Directory Services Identifier”, an ID that uniquely identifies an iCloud account. Meaning, Apple’s…
147
The bait-and-switch hidden in today’s cookie announcement
T oday is going to be the day that you read a lot about the UK’s intention to kill cookie pop-ups as part of its post-Brexit Data Reform Bill. By now you should have somehow realised that there’s a bit more to it than that, and that your work is not set to get any easier.
148
Disposable Root Servers
Unlimited, free and dedicated Kali Linux Root Shells - readily set up for hackers. Traffic via VPNs. Accessible directly or via TOR. NO LOGZ.
149
Arti – An implementation of Tor in Rust
Arti 0.1.0 is released, and available for download.
150
Apple has a bug in its disk I/O throttling code that affects raw disk copies
Matt Jacobson, recovering software engineer.