181
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 617 posts.
182
Apple developer boycott of Feedback Assistant
I'm organizing a boycott of Apple's Feedback Assistant , starting immediately, and I encourage all Apple developers to join me. Here's how I propose that each of us can effectively participate in the boycott and let Apple know that we're boycotting Feedback Assistant:
183
FCC Considering Banning Transfer of Online Consent Forms
Editor’s note: this version was updated at 6:00 pm pacific to include a couple of paragraphs that were omitted from the original post. Also–HI to all the thousands of regular people coming to visit today. I get it–we ALL hate unwanted calls and texts. But destroying the infrastructure of connecting consumers with…
184
A child’s privacy is worth more than likes (2022)
The Privacy Whisperer, by Luiza Jarovsky
185
186
A Visual Guide to SSH Tunnels: Local and Remote Port Forwarding
SSH port forwarding explained in a clean and visual way. How to use local and remote port forwarding. What sshd settings may need to be adjusted. How to memorize the right flags.
187
Malicious VSCode extensions with more than 45k installs
Highlights: CloudGuard Spectral detected malicious extensions on the VSCode marketplace Users installing these extensions were enabling attackers to steal %
188
Hackers stole access tokens from Okta's support unit
Okta , a company that provides identity tools like multi-factor authentication and single sign-on to thousands of businesses, has suffered a security breach involving a compromise of its customer support unit, KrebsOnSecurity has learned. Okta says the incident affected a “very small number” of customers, however it…
189
Making it clear when we're on a call with you to protect you from fraud
If someone calls you claiming to be from Monzo, you can now check to see if they’re telling the truth or not in the Monzo app.
190
191
From email to phone number, a new OSINT approach (2019)
How to find out someone's phone number if you just know their email address and how it can be automated using a new OSINT tool: email2phonenumber
192
Fake recruiter lured aerospace employee with trojanized coding challenge
ESET researchers uncover a Lazarus attack against an aerospace company in Spain, where the group deployed several tools, including a publicly undocumented backdoor we named LightlessCan.
193
Blocking Visual Studio Code embedded reverse shell before it's too late
Visual studio code tunnel Introduction Since July 2023, Microsoft is offering the perfect reverse shell, embedded inside Visual Studio Code, a widely used …
194
FISA "reform" bill would greatly expand the entities forced to surveil users
Yesterday the House Permanent Select Committee on Intelligence unanimously approved the FISA Reform and Reauthorization Act of 2023 (FRRA), which would reauthorize Section 702 of the Foreign Intelligence Surveillance Act (FISA 702). The full House is expected to vote on this bill next Tuesday. Like other competing…
195
196
Mullvad becomes highest level of Tor Member (Shallot)
Mullvad has been a Tor Project Vidalia Onion Member since 2021 and has now become a Shallot Onion Member of Tor.
197
CircleCI security alert: Rotate any secrets stored in CircleCI
Read CircleCI’s security alerts from January 2023. Last updated 1/13/2023.
198
We tried to book a train ticket and ended up with a 245k records data breach
Dieser Artikel ist auch auf deutsch erschienen To celebrate Franco-German friendship, German Transport Minister Wissing and his French counterpart Beaune came up with something special: 30,000 free Interrail tickets per country for travel in Germany and France for young adults between 18 and 27. Codename: “Passe…
199
Passkeys are now enabled by default for Google users
Google is making it even easier to get started with passkeys by offering the ability to set them up for all users — by default.
200
Kids Online Safety Act is still a danger to our rights online
Are you a young person fighting back against bad bills like KOSA? Become an EFF member at a new, discounted Neon membership level specifically for you--stickers included! Congress has resurrected the Kids Online Safety Act (KOSA), a bill that would increase surveillance and restrict access to...
201
Meta prohibited from using personal data for advertisement
After almost five years, the Irish DPC decided on a noyb complaint and required Facebook, Instagram and WhatsApp to stop using the personal data of users for advertisement in the EU.
202
Grave flaws in BGP Error handling
Border Gateway Protocol is the de facto protocol that directs routing decisions between different ISP networks, and is generally known as the “glue” that holds the internet together. It’s safe to say that the internet we currently know would not function without working BGP implementations.
203
Removing support for forwarded ports
Today we announce that we no longer support port forwarding. New port forwards will no longer be supported, and existing ports will be removed 2023-07-01.
204
Quantum Resistance and the Signal Protocol
The Signal Protocol is a set of cryptographic specifications that provides end-to-end encryption for private communications exchanged daily by billions of people around the world. After its publication in 2013, the Signal Protocol was adopted not only by Signal but well beyond. Technical informat...
205
Become Ungoogleable
I've removed my website from indexing by Google . The proximate cause is Google's new effort to DRM the web ( archive ) but there is of course so much more.
206
207
Compromised Microsoft key: More impactful than we thought
Our investigation of the security incident disclosed by Microsoft and CISA and attributed to Chinese threat actor Storm-0558, found that this incident seems to have a broader scope than originally assumed. Organizations using Microsoft and Azure services should take steps to assess potential impact.
208
Building end-to-end security for Messenger
We are beginning to upgrade people’s personal conversations on Messenger to use end-to-end encryption (E2EE) by default. Meta is publishing two technical white papers on end-to-end encryption: Our …
209
Desktop Linux Hardening (2022)
Linux is not a secure desktop operating system. However, there are steps you can take to harden it, reduce its attack surface, and improve its privacy. Before we start… Some of the sections will include mentions of unofficial builds of packages like linux‑hardened, akmod, hardened_malloc, and so on. These are not…
210
SMTP Smuggling – Spoofing Emails Worldwide
Introducing a novel technique for e-mail spoofing