181
BusKill: A kill cord for your laptop
BusKill is a Kill Cord for your laptop implementing a Dead Man Switch using $20 in USB hardware + udev rule to trigger your laptop self-destruct if stolen.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 612 posts.
182
Adding Encrypted Group Calls to Signal
2020 has seen its fair number of challenges and changes. We’ve all adapted to new ways of staying in touch, getting work done, celebrating birthdays and weddings, and even exercising. As more and more of our critical and personal moments move online, we want to continue to provide you with new wa...
183
GDPR Violation: Scribd acquires PII on 500M users in a deal with LinkedIn
TL;DR: If you have a LinkedIn account, you were signed up to SlideShare automatically without your knowledge or consent. Your account including all your personal information will be sold to ScribD …
184
Never run ‘python’ in your downloads folder
Python can execute code. Make sure it executes only the code you want it to.
185
Does GPT-2 Know Your Phone Number?
The BAIR Blog
186
Learn Authentication the Hard Way: Part Three
This is the final installment of a three part series in which we dive into modern application authentication solutions - the hard way. Part One: The Hard Way Part Two: The Hard Way, Continued Part Three: The Hard Way: Return Of The Specification The Hard Way: Return Of The Specification We are continuing our quest to…
187
Yet another macOS privacy protections bypass
Today I'm disclosing a macOS privacy protections bypass. I discovered that an application can use the venerable Unix command-line tool "ls" (list directory contents) to bypass both TCC (Transparency, Consent, and Control) and the sandbox, enabling unauthorized access to file metadata in directories that are supposed…
188
189
Microsoft Defender SmartScreen is hurting independent developers
Download Image wallpapers and background images for FREE! 200 Image wallpapers in 1080P, 2K, 4K, 5K HD that fit all your devices!
190
The ProtonMail Android app is now open source
Our Proton Mail Android app is open source. We are committed to transparency and contributing to the open source and privacy tech community.
191
Uninstall Nano Defender
Straight talk on Canadian online privacy, open-source software, PIPEDA, browser extension security, and practical tools to protect your personal data.
192
The joys of owning an ‘OG’ email account
When you own a short email address at a popular email provider, you are bound to get gobs of spam, and more than a few alerts about random people trying to seize control over the account. If your account name is short and desirable enough, this kind of activity can make the account less reliable for day-to-day…
193
Linux under WSL2 can be leaking
We have found that you could be leaking your Internet traffic when running Linux under WSL2 (Windows Subsystem for Linux 2).
194
Google's Abandoned Android Authenticator App
The news has just broken that Google's Authenticator App can have its codes stolen by malware. I doubt Google will ever release a fix for this issue - their 2FA app hasn't been updated since September 2017. Update! 3 months after I published this post, Google updated their app For two-and-a-half years, Google hasn't…
195
Formal GDPR complaint against Google’s internal data free-for-all
Brave filed a GDPR complaint v Google for infringing the GDPR “purpose limitation” principle. Enforcement would be tantamount to a functional separation of Google’s business.
196
Let's Reverse Engineer Discord
How we reverse engineered Discord’s call protocol and found it being MITM-ed by Discord.
197
Discord Desktop App RCE
A few months ago, I discovered a remote code execution issue in the Discord desktop application and I reported it via their Bug Bounty Prog...
198
The unattributable “db8151dd” data breach
I was reticent to write this blog post because it leaves a lot of questions unanswered, questions that we should be able to answer. It's about a data breach with almost 90GB of personal information in it across tens of millions of records - including mine. Here's what I
199
200
How Popular Is “Sign in with Apple”?
Link to: https://benpackard.github.io/blog/2020-01-28-sign-in-with-apple/
201
I asked an online tracking company for all of my data (2018)
It’s 15:10 pm on April 18, 2018. I’m in the Privacy International office, reading a news story on the use of facial recognition in Thailand. On April 20, at 21:10, I clicked on a CNN Money Exclusive on my phone.
202
De-Googling: My Progress
I wrote a bit about my reasoning to De-Google here . Now I want to write a bit about my progress, the struggles and what I ended up with.
203
The Linux Backdoor Attempt of 2003 (2013)
Josh wrote recently about a serious security bug that appeared in Debian Linux back in 2006, and whether it was really a backdoor inserted by the NSA. (He concluded that it probably was not.) Today I want to write about another incident, in 2003, in which someone tried to backdoor the Linux kernel. This one […]
204
Code scanning for security vulnerabilities now available
Now available, code scanning is a developer-first, GitHub-native approach to easily find security vulnerabilities before they reach production.
205
Don’t try to sanitize input – escape output
Why you should escape output correctly, but generally not sanitize user input.
206
TSA tries out another biometric system
Today the Transportation Security Administration (TSA) announced that it has launched a “pilot” at Washington National Airport (DCA) of yet another scheme for biometric identification and tracking of domestic air travelers.
207
Dark Web Price Index 2020
To see just how prevalent items of personal data are being listed on the dark web, and at what price, we sent our researchers on a data-gathering mission.
208
209
Sonos is spying on me (and you)
I recently decided to get a wireless speaker for our Kitchen. Sonos seems like an obvious choice these days. The sound quality and aesthetics were very appealing. So I ordered a Sonos One SL speaker. In terms of sound quality and looks, I was very pleased. I’m not an audiophile but the sound quality seemed…
210
FCC Proposes to Fine Wireless Carriers $200M for Selling Customer Location Data
The U.S. Federal Communications Commission (FCC) today proposed fines of more than $200 million against the nation’s four largest wireless carriers for selling access to their customers’ location information without taking adequate precautions to prevent unauthorized access to that data. While the fines would be among…