2251
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
2252
Stripe is friendly to “friendly fraud”
Update: this post generated some interesting discussion on Hacker News. Friendly fraud is the laundered name for something that the payment system is not really able to prevent. Even though I’m pretty sure they can do way better. Particularly big and sophisticated payment providers like Stripe, with a mountain of…
2253
Lotusbail npm package found to be harvesting WhatsApp messages and contacts
Secure the modern software stack with Koi. Gain visibility, context, and real-time protection over extensions, MCPs, and autonomous AI agent endpoints.
2254
Npm operational incident, 6 Jan 2018
npm Blog (Archive); updates from the npm team are now published on the GitHub Blog and the GitHub Changelog
2255
The Trouble with Tor
The Tor Project makes a browser that allows anyone to surf the Internet anonymously. Tor stands for "the onion router" and that describes how the service works. Traffic is routed through a number of relays where each relay only knows the next hop, not the ultimate destination.
2256
Firefox expands fingerprint protections
With Firefox 145, we’re rolling out major privacy upgrades that take on browser fingerprinting — a pervasive and hidden tracking technique that lets we
2257
The foundation of a more secure web: Google Trust Services
Posted by Ryan Hurst, Security and Privacy Engineering In support of our work to implement HTTPS across all of our products ( https://www.g...
2258
LogJ4 Security Inquiry – Response Required
On Friday January 21, 2022 I received this email. I tweeted about it and it took off like crazy. The email comes from a fortune-500 multi-billion dollar company that apparently might be using a product that contains my code, or maybe they have customers who do. Who knows? My guess is that they do this … Continue…
2259
Mozilla Recognized as Most Trusted Internet Company for Privacy
I’m very happy to share that Mozilla has been named the Most Trusted Internet Company for Privacy in 2012, according to a study performed by the Ponemon
2260
Pwned passwords, open source in the .NET foundation and working with the FBI
I've got 2 massive things to announce today that have been a long time in the works and by pure coincidence, have aligned such that I can share them together here today. One you would have been waiting for and one totally out of left field. Both these announcements
2261
FBI Breaks into iPhone. We Have Some Questions
The FBI has successfully accessed data on an iPhone that has been the subject of a legal battle between the Justice Department and Apple, according to a court filing. EFF is pleased that the Justice Department has retreated from its dangerous and unconstitutional attempt to force Apple to subvert...
2262
2263
FCC Considering Banning Transfer of Online Consent Forms
Editor’s note: this version was updated at 6:00 pm pacific to include a couple of paragraphs that were omitted from the original post. Also–HI to all the thousands of regular people coming to visit today. I get it–we ALL hate unwanted calls and texts. But destroying the infrastructure of connecting consumers with…
2264
X Just Accidentally Exposed a Covert Influence Network Targeting Americans
How a new X feature led to the most sweeping public exposure of covert foreign activity on a major platform since 2016.
2265
Never run ‘python’ in your downloads folder
Python can execute code. Make sure it executes only the code you want it to.
2266
Denuvo Analysis
This post is intended for educational purposes only. Denuvo is arguably the most successful digital rights management solution to have ever existed, and is therefore an interest to many. This blog contains a large amount of my personal notes and correspondence with other reverse engineers (see kudos ) which contains…
2267
Purism Librem Laptops Completely Disable Intel’s Management Engine
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
2268
Using a single AWS account is a serious risk
Your AWS account is one of the most valuable things you own if you run a business on AWS. If you only own a single AWS accoun...
2269
Black Hat USA 2015: The full story of how that Jeep was hacked
Recently we wrote about Jeep Cherokee hack incident. At Black Hat security researchers Charlie Miller and Chris Valasek finally explained, how exactly that hack was done
2270
2271
The RCE that AMD wouldn't fix
Following backlash, AMD agreed to fix an MITM RCE I discovered in Ryzen Master. All in all, it took them over four months to roll out the fix.
2272
Swift Homomorphic Encryption
We’re excited to announce a new open source Swift package for homomorphic encryption in Swift: swift-homomorphic-encryption.
2273
Introducing ProtonMail's Tor hidden service
As part of our efforts to continue protecting user privacy, we are launching a Tor hidden service to combat censorship and surveillance of Proton Mail users.
2274
2275
Bogus story: no Chinese backdoor in military chip
Today's big news is that researchers have found proof of Chinese manufacturers putting backdoors in American chips that the military uses. T...
2276
Saved by Alice
In Alice v. CLS Bank, the Supreme Court ruled that an abstract idea does not become eligible for a patent simply by being implemented on a generic computer. This 2014 decision has significantly reduced the harm caused by vague and overbroad software patents. Before Alice, patent owners who had...
2277
Automate Public Certificates Lifecycle Management via RFC 8555 (ACME)
ACME API lets our users automate their Public Certificate Lifecycle Management.
2278
A child’s privacy is worth more than likes (2022)
The Privacy Whisperer, by Luiza Jarovsky
2279
2280
DNS-Persist-01: A New Model for DNS-Based Challenge Validation
When you request a certificate from Let’s Encrypt, our servers validate that you control the hostnames in that certificate using ACME challenges. For subscribers who need wildcard certificates or who prefer not to expose infrastructure to the public Internet, the DNS-01 challenge type has long been the only choice…