211
Building a more private web: A path towards making third party cookies obsolete
In August, we announced a new initiative (known as Privacy Sandbox) to develop a set of open standards to fundamentally enhance privacy on...
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 612 posts.
212
Twitter Direct Message Caching and Firefox
Distinguished engineer Martin Thomson explains how this problem occurred, the implications for people who might be affected, and how problems of this nature might be avoided in future. To get ...
213
Analyzing Analytics (Featuring: The FBI)
Recently while conducting some research, I found myself down the path of Google Analytics ID's as well as other analytics services. I was investigating ways to not only identify varying analytics code in sites, but to correlate them with ot…
214
215
Remote iPhone exploitation part 2: a remote ASLR bypass
Posted by Samuel Groß, Project ZeroThis post is the second in a series about a remote, interactio...
216
Python malware on the rise
The vast majority of serious malware over the past 30 years has been written in Assembly or compiled languages such as C, C++, and Delphi. However,…
217
Big no on Big Sur: Mullvad disallows Apple apps to bypass firewall
Despite Apple’s changes to macOS with the release of Big Sur, we can confirm that the Mullvad app still performs as intended by not allowing Apple’s own apps to bypass our VPN firewall.
218
Better protecting kids’ privacy on YouTube
See how we're working to protect kids' privacy on YouTube. Discover our latest updates and initiatives for a safer platform.
219
Signs you're following a fake Twitter account
The challenge of dealing with fake accounts that spread disinformation is probably one of the greatest challenges facing the large social media companies. Most methods used to detect fake Twitter a…
220
221
A Full Break of the Bitstream Encryption of Xilinx 7-Series FPGAs
Maik Ender and Amir Moradi, Horst Goertz Institute for IT Security, Ruhr University Bochum, Germany; Christof Paar, Max Planck Institute for Cyber Security and Privacy and Horst Goertz Institute for IT Security, Ruhr University Bochum, Germany
222
230, or not 230? That is the EARN IT question
Over the past several weeks, Signal traffic has gone through the roof. New users are signing up at unprecedented rates, and we’ve expanded our server capacity faster than we ever anticipated. It means a lot to us that so many people are relying on Signal during this difficult time. When users che...
223
Tor Browser 9.5
Tor Browser 9.5 is now available from the Tor Browser download page and also from our distribution directory.
224
225
Stealing your SMS messages with iOS 0day
This is a special post because I fully based on another researcher, s1guza’s 0day. All of this story began from the following tweet: Siguza told us that his 0day was patched in the iOS 13.5 beta3. So this is actually a sandbox escape 0day for the newest, non-beta iOS version (13.4.1). In this post, I’ll…
226
You’ve Got 0-Click Mail: Unassisted iOS Attacks RCE via Mobilemail/Maild
October is Cybersecurity Awareness Month! How is your cybersecurity practice going?
227
Attack Matrix for Kubernetes
While Kubernetes has many advantages, it also brings new security challenges.
228
Anatomy of a Scam
There is a lot of material about the not-so-nice VCs who take advantage of young and inexperienced founders. But the reverse also happens, founders that try to get money out of VCs for projects that have zero chance of every coming to fruit. Or worse still, founders that pretend to have something on the go when they…
229
230
231
How many users block Google analytics? (2017)
Comparing Google Analytics with server logs
232
Intercepting Zoom's encrypted data with BPF
How to use Rust and BPF to intercept the data sent and received by programs that use OpenSSL.
233
Why Privacy Matters
MABAR69 merupakan situs judi online yang menawarkan permainan terlengkap seperti slot online, poker online, bola online, tembak ikan, sabung ayam dan casino online.
234
Full third-party cookie blocking and more
This blog post covers several enhancements to Intelligent Tracking Prevention (ITP) in iOS and iPadOS 13.4 and Safari 13.1 on macOS to address our latest discoveries in the industry around tracking.
235
Bitwarden second security audit report
Bitwarden will continue to uphold high cybersecurity standards through annual third-party security audits of the Bitwarden product and service.
236
Analysing the alleged Minneapolis police department “hack”
The situation in Minneapolis at the moment (and many other places in the US) following George Floyd's death [https://en.wikipedia.org/wiki/Death_of_George_Floyd] is, I think it's fair to say, extremely volatile. I wouldn't even know where to begin commentary on that, but
237
Two vulnerabilities in Zoom could lead to code execution
A member of Cisco Talos discovered this vulnerability. Cisco Talos recently discovered two vulnerabilities in the popular Zoom video chatting application that could allow a malicious user to execute arbitrary code on victims’ machines. Video conferencing software has skyrocketed in popularity during the COVID-19…
238
JWT is Awesome
Here’s my take on JWT* and why I think it’s amazing, after having migrated hundreds of applications in JP Morgan from a legacy authentication solution. *JWT = JSON Web Token 1) Pro: JWT…
239
240
