1861
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,767 posts.
1862
1863
1864
Group sex app leaks locations, pics and personal details
We’ve seen some pretty poor security in dating apps over recent years; breaches of personal data, leaking users locations and more. But this one really takes the biscuit: probably the worst security for any dating app we’ve ever seen And it’s used for arranging threesomes. It’s 3fun. It exposes the near real time…
1865
Elsevier threatens others for linking to Sci-Hub but does so itself
Sci-Hub is a copyright-violating site that provides infringing access to scholarly publications that are behind paywalls. Its ethics are problematic but it’s...
1866
Americans' Access to Strong Encryption Is at Risk, an Open Letter to Congress
When sophisticated adversaries want to hack a network, they ultimately win. A government mandated encryption backdoor would make Americans less safe.
1867
1868
1869
Cookie Bomb or Let's Break the Internet
TL;DR I can craft a page "polluting" CDNs, blogging platforms and other major networks with my cookies. Your browser will keep sendin...
1870
1871
How to lose a fortune with one bad click
Adam Griffin is still in disbelief over how quickly he was robbed of nearly $500,000 in cryptocurrencies. A scammer called using a real Google phone number to warn his Gmail account was being hacked, sent email security alerts directly from google.com, and ultimately seized control over the account by convincing him…
1872
How to Find Hidden Cameras in Your Airbnb
How to Find Hidden Cameras in your AirBNB, Author: Johannes Ullrich
1873
EFF Makes Formal Objection to DRM in HTML5
San Francisco - Today the Electronic Frontier Foundation (EFF) filed a formal objection to the inclusion of digital rights management (DRM) in HTML5, arguing that a draft proposal from the World Wide Web Consortium (W3C) could stymie Web innovation and block access to content for people across the...
1874
1875
Mass cellphone surveillance experiment in Spain
Spanish Statistics Institute will track all cellphones for eight days (2 min, link in Spanish, via) A few facts first: Carriers geotrack all users by default, using cell tower triangulation. They also store logs of your calls and sms, but that is
1876
EU Age Control: The trojan horse for digital IDs
A technical look at the EU age verification reference app — the gap between marketed and shipped cryptography, relay attacks the protocol can't stop, and why the 'privacy-preserving' system is a trojan horse for digital ID infrastructure.
1877
1878
1879
1880
Catalina is checking notarization of unsigned executables
This is a follow-up to Allan Odgaard's excellent article macOS 10.15: Slow by Design . I want to talk specifically about the first section "Spawning a new Process", because there has been widespread misunderstanding of this. Odgaard provides a simple test to show that the first run of an executable is delayed while…
1881
Banning facial recognition is missing the point
Spanish translation Communities across the United States are starting to ban facial recognition technologies. In May of last year, San Francisco banned facial recognition; the neighboring city of Oakland soon followed, as did Somerville and Brookline in Massachusetts (a statewide ban may follow). In December, San…
1882
1883
Facebook Plans on Backdooring WhatsApp?
This article points out that Facebook’s planned content moderation scheme will result in an encryption backdoor into WhatsApp: In Facebook’s vision, the actual end-to-end encryption client itself such as WhatsApp will include embedded content moderation and blacklist filtering algorithms. These algorithms will be…
1884
Best of show – abuse of libc
printf machine. 2020 IOCCC entry carlini - Best of Show - abuse of libc
1885
True Goodbye: ‘Using TrueCrypt Is Not Secure’
The anonymous developers responsible for building and maintaining the free whole-disk encryption suite TrueCrypt apparently threw in the towel this week, shuttering the TrueCrypt site and warning users that the product is no longer secure now that Microsoft has ended support for Windows XP .
1886
We have successfully completed our migration to RAM-only VPN infrastructure
Today we announce that we have completely removed all traces of disks being used by our VPN infrastructure!
1887
It is not possible to detect and block Chrome headless
An updated example of techniques to avoid detection.
1888
A Safer Container Ecosystem with Docker: Free Docker Hardened Images
Security for everyone. Docker Hardened Images are now free to use, share, and build on with no licensing surprises.
1889
Announcing Project Zero
Posted by Chris Evans, Researcher Herder Security is a top priority for Google. We've invested a lot in making our products secure, incl...
1890
German Chaos Computer Club analyzes and releases government malware
The largest European hacker club, "Chaos Computer Club" (CCC), has reverse engineered and analyzed a "lawful interception" malware program used by German police forces. It has been found in the...