151
Important PostgreSQL 14 update to avoid silent corruption of indexes
Join thousands of people who own a premium domain. Affordable financing available.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 642 posts.
152
Threeuk is blocking Tutanota
ISPs must not have the power to decide which online services users can or can not access.
153
154
155
Norway to track all supermarket purchases?
Statistics Norway wants to receive several million daily receipts from food stores, signalling a new era in state data collection. Privacy advocates and the supermarkets themselves are unhappy. People living in Norway are used to
156
Dark Web – Justice League
Uncover the hidden world of Dark Web justice as cybercriminals settle disputes in underground courts. Explore verdicts, high-profile cases, and more.
157
Mystery GPS Tracker on a Supporter’s Car
Being able to accurately determine your location anywhere on the planet is a useful technological trick. But when tracking isn’t done by you, but to you—without your knowledge or consent—it’s a violation of your privacy. That’s why at EFF we’ve long fought against dragnet surveillance, mobile...
158
159
820GB Database Dump of Roskomnadzor (Russian Government Censorship Organization)
In the Cyberwar category, we are listing 364,000 files from the Roskomnadzor, the Russian federal agency responsible for censorship of Russian media, specifically from the republic of Bashkortostan.
160
161
LogJ4 Security Inquiry – Response Required
On Friday January 21, 2022 I received this email. I tweeted about it and it took off like crazy. The email comes from a fortune-500 multi-billion dollar company that apparently might be using a product that contains my code, or maybe they have customers who do. Who knows? My guess is that they do this … Continue…
162
Automate Public Certificates Lifecycle Management via RFC 8555 (ACME)
ACME API lets our users automate their Public Certificate Lifecycle Management.
163
164
DEV-0537 targeting organizations for data exfiltration and destruction
The activity we have observed has been attributed to a threat group that Microsoft tracks as DEV-0537, also known as LAPSUS$. DEV-0537 is known for using a pure extortion and destruction model without deploying ransomware payloads.
165
PayPal phishing scam uses invoices sent via PayPal
Scammers are using invoices sent through PayPal.com to trick recipients into calling a number to dispute a pending charge. The missives — which come from Paypal.com and include a link at Paypal.com that displays an invoice for the supposed transaction — state that the user’s account is about to be charged hundreds of…
166
RaidForums gets raided, alleged admin arrested
The U.S. Department of Justice (DOJ) said today it seized the website and user database for RaidForums , an extremely popular English-language cybercrime forum that sold access to more than 10 billion consumer records stolen in some of the world’s largest data breaches since 2015. The DOJ also charged the alleged…
167
168
169
GitHub’s database of security advisories is now open source
Anyone can now provide additional information and context to further the community’s understanding and awareness of security advisories.
170
LastPass: Notice of Security Incident
Please refer to the latest article for updated information.nbs[..]
171
IRS Will Soon Require Selfies for Online Access
If you created an online account to manage your tax records with the U.S. Internal Revenue Service (IRS), those login credentials will cease to work later this year. The agency says that by the summer of 2022, the only way to log in to irs.gov will be through ID.me , an online identity verification service that…
172
“Invalid Username or Password”: a useless security measure (2014)
Login attempts fail because computer users can't remember their email or didn't input the right password. Most websites on the Internet won't tell you which one is actually incorrect.
173
The optimal amount of fraud is non-zero
Counterintuitively, businesses, customers, and society prefer having fraud to what they'd need to do to not have it.
174
French court: refusing to disclose mobile passcode to law enforcement is a crime
The French Court of Cassation has ruled that people who are suspected or accused of a crime are obliged to reveal the passcode of their mobile phone to the investigative authorities.
175
NPM package compromised by author: erases files on RU / BY computers on install
Vue.js users using the dependency “node-ipc” are experiencing a supply chain attack protesting the invasion of Ukraine, from a package named “peacenotwar”.
176
177
On-device browser translations with Firefox Translations
Firefox can now do offline and privacy-preserving translation of eight languages with more on the way. Powered by open-source and machine-learning.
178
How Go mitigates supply chain attacks
Go tooling and design help mitigate supply chain attacks at various stages.
179
180
Portmaster 1.0 – Open-Source Network Monitor and Privacy Firewall
Portmaster is a free and open-source application that puts you back in charge over all your computer's network connections. Increase your privacy and security. Get peace of mind.