1831
Please Stop Attacking MIT's Network
Today, at around 2:30 PM EST, Scripts went down. For most MIT students, this means a few class websites are inaccessible, a few friends' b...
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,767 posts.
1832
Do the math: How we took over ChatGPT accounts
By bypassing ChatGPT's sandbox and content security policy, our research team was able to take over anyone's account simply by sending them a link.
1833
Breaking Free from DRM: Hacking My Air Purifier
I searched the web for a deal on a decent air purifier and the Xiaomi 4 Pro seemed to meet all my requirements. The filter size, scheduler and air volume ticked all the boxes. I set it up and thought nothing of it until last week my room was lit with the ‘ 0% remaining ’ replace filter warning. I had set my unit up to…
1834
1835
Open source security at Astral
Insights and guidance from our engineering team on how Astral secures its tools.
1836
The novel HTTP/2 'Rapid Reset' DDoS attack
Learn how the new DDoS attack technique Rapid Reset works, and how to mitigate it
1837
Humiliating IIS servers for fun and jail time
cybersecurity, tech, and personal annoyance log
1838
Speedrunners are vulnerability researchers, they just don't know it yet
Video game enthusiasts are developing experience in the cybersecurity industry by accident. Discover how gaming skills can translate into intriguing careers.
1839
Why Android SSL was downgraded from AES256-SHA to RC4-MD5 in late 2010
blog about networking, cameras, old gear, and xmpp
1840
Vulnerability Management for Go
Announcing vulnerability management for Go, to help developers learn about known vulnerabilities in their dependencies.
1841
Large-Scale Online Deanonymization with LLMs
We measure the capabilities of LLMs to deanonymize users online.
1842
EARN IT Act undermines the privacy, security, and safety of law-abiding users
Yesterday, TechFreedom sent a letter to the Senate Judiciary Committee raising concerns about the Eliminating Abusive and Rampant Neglect of Interactive Technologies Act of 2023 (EARN IT Act). As it did when introduced in each of the past two sessions of Congress, the EARN IT Act undermines the privacy, security, and…
1843
1844
Zero-days in Cisco Discovery Protocol
Identify which devices of your company are impacted by five vulnerabilities that Armis found out in the Cisco Discovery Protocol (CPD).
1845
How Skype fixes security vulnerabilities
In a nutshell — they don't. This post describes my fruitless effort to convince Microsoft employees that their service is vulnerable, and the humiliation one has to go through should one's account be blocked by a hacker. This is a story of ignorance, pain, and despair.
1846
1847
1.5 TB of Dark Net Market scrapes
Mirrors of ~89 Tor-Bitcoin darknet markets & forums 2011–2015, and related material.
1848
1849
The Ashley Madison Database Was Leaked
Many news sites and blogs are reporting that the data stolen last month from 37 million users of AshleyMadison.com — a site that facilitates cheating and extramarital affairs — has finally been posted online for the world to see. In the past 48 hours, several huge dumps of data claiming to be the actual AshleyMadison…
1850
We are retiring our bug bounty program
For almost a year now, Turso has had a program that pays $1,000 for any bug that can be demonstrated to lead to data corruption. Today, we are retiring this program.
1851
1852
Privacy: Is That iPhone?
A new Mozilla-Ipsos poll reveals that a majority of iPhone users treasure privacy — but aren’t aware of the device's ad tracking
1853
SSH vs. OpenVPN for Tunneling
Update 28.01.16 I found some sites referring to this post. Below are the common complaints I saw, and my replies:
1854
An Update on Firefox Containers
Containers is now available as a Firefox Extension, accessible to all Firefox users. Download Firefox Multi-Account Containers here. Back in June 2016, we started experimenting with “Containers” as a way to explore Contextual Identities on the web. Firefox Containers are a way for users to isolate their online…
1855
SSH Tunneling Explained
SSH tunneling transports data streams within an existing SSH session. This post explains different tunneling techniques and features as supported by OpenSSH.
1856
We didn't encrypt your password, we hashed it
You've possibly just found out you're in a data breach. The organisation involved may have contacted you and advised your password was exposed but fortunately, they encrypted it. But you should change it anyway. Huh? Isn't the whole point of encryption that it protects data when exposed
1857
1858
1859
Backdooring Rust crates for fun and profit
Supply chains attacks are all the rage these days, whether to deliver RATs, cryptocurrencies miners, or credential stealers. In Rust, packages are called crates and are (most of the time) hosted on a central repository: https://crates.io for better discoverability. We are going to study 8 techniques to achieve Remote…
1860
We installed a single turnstile to feel secure
After the acquisition by a much larger company, security became a top priority. Our company occupied three tall buildings, each at least 13 stories high. Key card readers were installed next to every