Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,767 posts.
Chainalysis CTO said blockchain is easier to trace than paper money
Contrary to his original intentions, cryptocurrencies and DeFi platforms are now more vulnerable to privacy breaches and hacking than…
Element is one of fourteen messaging apps blocked by Central Indian Government
Element is one of 14 messaging apps blocked by the Central Indian Government which - we believe from media reports - relates to Section 69A of the Information Technology Act, 2000.
No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability
A look at the messy reality of iOS vulnerabilities: which bugs get patched, which quietly linger, and the challenges of tracking real device risk over time.
I ran the worlds largest DDoS-for-Hire empire and Cloudflare helped
The perils of remaining neutral on a global scale: fanning the flames and selling the extinguisher.
EU Commissioner as double agent of foreign interference
Research published yesterday by several European media outlets has revealed that an international campaign in support of the EU's proposed child sexual abuse regulation has been largely orchestrated and financed by a network of organisations with links to the tech industry and security services. The
I asked Meta’s Muse for its filesystem and it sent me 6.8GB
I asked Muse to archive the files it could see and send them to my Google Drive. It did.
Disable Google Chrome Sign In and Sync
As you might have heard , Chrome 69 automatically logs you into the browser when you log into any Google property . As much as I might like Chrome (and Google), I was quite displeased by this particular change: I assume it was in the release notes (that probably a vanishingly small number of Chrome users read), but…
Notepad++: Help us to take down the parasite website
I’ve received numerous complaints via email, social media, and forums regarding a website that poses a significant threat to our community. The copycat site in question is https://notepad.plus/ which appears prominently when users google for “download Notepad++”.
An update on AirTag and unwanted tracking
Apple announced it has identified even more ways to update AirTag safety warnings and help guard against unwanted tracking of people and property.
Why OpenBSD Is Important to Me
The freedom to speak in private is essential to democracy. The less private your conversations, the more careful you are about what you say. And being careful leads to less candor, less criticism, and less innovation. Thought and private speech are the breeding ground for new, sometimes controversial ideas. They are…
Improved Process Isolation in Firefox 100
Firefox uses a multi-process model for additional security and stability while browsing. Web Content is rendered in separate processes.
Self-Hosting on the Dark Web
This site is now reachable over Tor as a hidden service, at a .onion address that resolves only inside the Tor network. Tor relays and encrypts your traffic as …
SSH Bastion Host Best Practices
Learn 14 best practices to build and deploy a security-hardened SSH bastion host based on OpenSSH server.
Firefox 115 can remotely disable any extension on any site
Firefox version 115.0 was released on July 4, but I'm not celebrating. I'm concerned about a new "feature" in the release notes .
I ruined my vacation by reverse engineering WSC
describing my wsc adventure
Google announces Android for Work
Posted by Rajen Sheth, Director of Product Management, Android and Chrome for Work (Cross-posted on the Android Blog .) Over a billi...
AWS now supports U2F/Yubikeys
April 25, 2023: We’ve updated this blog post to include more security learning resources. Update on October 8, 2018: After we launched support for security devices manufactured by Yubico on September 25, 2018, we received feedback from customers to support other U2F security key providers, as well. Starting October 8…
Fighting spam with Haskell
Visit the post for more.
HTML attributes to improve your users' two factor authentication experience
Learn how to use the HTML autocomplete, inputmode and pattern attributes to improve the user experience of logging in.
SATCOM terminals under attack in Europe: a plausible analysis
------ Update 03/12/2022 Reuters has published new information on this incident, which initially matches the proposed scenario. You can find...
UK anti-encryption law
There was some surprise in the comments of yesterday's post over the fact that the United Kingdom has effectively outlawed encryption: the UK will...
Gmail confidential mode is not secure or private
Privacy experts say Gmail confidential mode is neither secure nor private because it does not use end-to-end encryption.
Abusing Entra OAuth for fun and access to internal Microsoft applications
The Eye Security Research team has uncovered a new critical misconfiguration that exposed sensitive data at internal Microsoft applications.
Why Everyone Should be Concerned By the Seizure of MyRedBook.com
Last week, an online community for sex workers disappeared from the Internet. Visit SFRedbook.com, MyPinkBook.com, or MyRedBook.com right now, and you’ll only find the seals of the law enforcement agencies—the FBI, the DOJ, and the IRS—that seized the sites as part of a prostitution and money...
Congress Is Trying to Roll Back Internet Privacy Protections
Call congress now! Back in 2014 over 3 million Internet users told the U.S. government loudly and clearly: we value our online security, we value our online privacy, and we value net neutrality. Our voices helped convince the FCC to enact smart net neutrality regulations—including long-needed...