Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,767 posts.
How Shamir's Secret Sharing Works
A visual explanation of how threshold secret sharing lets any k of n shares recover a secret.
Period tracking app, Flo, found to be selling user data to Meta
What does this vagueness by-design mean for how we choose to self monitor our biological markers?
Equihax
Trawling the darknet as one does, I came across this little simple page this morning. It claims to be the real EQUIFAX hackers, unlike the last darknet site that was soon taken down by morons. I ha…
FIDO2 security key company releases hardware that's open source and uses Rust
Our Kickstarter campaign for our next generation of Solo products launches on January 26th. To get alerted when the campaign is live, you can sign up here. Update: The campaign is now live! Check it out to see all the details. Humble beginnings I've been working on Solo for almost 3 years now. It started back when I…
Removing Coordinated Inauthentic Behavior from China
We removed seven Pages, three Groups and five Facebook accounts as part of a small network that originated in China and focused on Hong Kong.
Protecting Security Researchers
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
Web Browsers have stopped blocking pop-ups
If you were an Internet user for a few years on either side of the turn of the millennium, you will remember pop-up advertisements.
Tech CEO sentenced to 5 years in IP address scheme
Amir Golestan , the 40-year-old CEO of the Charleston, S.C. based technology company Micfo LLC , has been sentenced to five years in prison for wire fraud. Golestan’s sentencing comes nearly two years after he pleaded guilty to using an elaborate network of phony companies to secure more than 735,000 Internet Protocol…
How Facebook Avoids Ad Blockers
How Facebook hides the word 'Sponsored' from ad blockers using per-character spans and DOM obfuscation, pulled apart piece by piece.
Little League wants all your information
To sign kids up for our city’s Little League baseball …
The SaaS CTO Security Checklist Redux
Learn how to protect your SaaS applications with the SaaS CTO security checklist. Doing the basics goes a long way in keeping your company and product secure.
UK House of Lords attempting to ban use of VPNs by anyone under 16
This is deranged, each nation’s boomers and reactionaries attempting to outdo the others: “Action to prohibit the provision of VPN services to children in the United Kingdom” … th…
Parity Wallet security alert
We tell the story of Parity's technical roadmap with regular blogs. Read on to find out the latest on major upgrades that are delivering scalability for the Polkadot ecosystem.
San Diego Implemented City-Wide Streetlight Surveillance
Civil Rights, Criminal Justice and Homeland Security
DRM Is Toxic to Culture
In pursuit of market control now, deployers of DRM are robbing us of our culture in perpetuity by enclosing the future commons. It’s possible that you think that unauthorised use of copyright…
The future of Flipper Zero development
We've seen the strong reaction from the community over the idea that we've stopped developing the Flipper Zero firmware. We want to address this and let you know that we've heard all your feedback and have decided to rethink our approach to maintaining the project and engaging with the community.
The UK is still trying to backdoor encryption for Apple users
The Financial Times reports that the U.K. is once again demanding that Apple create a backdoor into its encrypted backup services. The only change since the last time they demanded this is that the order is allegedly limited to only apply to British users. That doesn’t make it any better.The demand...
The Tor Project: Building the Next Generation of Onion Services
A few weeks ago, a small group of Tor developers got together in Montreal and worked on onion...
Update: Looking Glass Add-On
We didn’t think hard enough about how our actions would affect the community, and we’re sorry for letting you down. How we got here Over the co
On Password Managers
It has come to my attention that people are Wrong On The Internet about password managers. This matters, because almost everybody should be using one. Herewith background, opinions, and a description of my own setup, which is reasonably secure.
When MFA isn't MFA, or how we got phished
Due to a recent Google change, MFA isn't truly MFA.
Tailscale SSH: Investigation and remediation update
Securely connect to anything on the internet with Tailscale. Built on WireGuard®️, Tailscale enables you to make finely configurable connections, secured end-to-end according to zero trust principles, between any resources on any infrastructure.
Using Zoom? Here are the privacy issues you need to be aware of
If you’re using Zoom while working from home, you should be aware of Zoom's privacy policies, including its “attention tracking” tool.