Topics /
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
In Part 1, we used Dolphin’s debugger to find the location of Player 1’s score in RAM . In this article, our goal is to hack the score calculation routine so that the bonus goals do not award so many points.
Today I want to share a great story about why many NVIDIA products are now running formally verified SPARK code. This blog post is in part a teaser for…
Alston & Bird’s Dan Felz and Peter Swire look at the recent Wiesbaden Administrative Cou
I hate to write a piece just saying Someone Is Wrong On The Internet. But Reid Blackman’s The Signal App and the Danger of Privacy at All Costs (in the NYTimes , forsooth) is not just wrong but dangerously misleading. I haven’t seen a compact explainer on why, so here goes.
Learn how and why the Chrome team has replaced FreeType with Skrifa.
Android 12 makes interest-based advertising obsolete to set off an irreversible collapse in Facebook’s ad ecosystem
Atlassian AI ‘Rovo’ is susceptible to zero-click data exfiltration via indirect prompt injection, bypassing organization-level web search controls.
I’m thrilled to report that the OpenID Connect specifications have now been published as ISO/IEC standards. They are:
We’ve read so many sad stories about communities that were fatally compromised or destroyed due to security exploits. We took that lesson to heart when we founded the Discourse project; we endeavor to build open source software that is secure and safe for communities by default, even if there
*If you’re the owner of this website and have questions, reach out to Bluehost. We’re happy to help.
Why we use isolated VMs as a hard security boundary.
A continuously updating analysis of bot vs. human traffic, AI training, fetching, search indexing, browsing, robots.txt compliance, and AI chat referrals across 5,000+ websites.
“Your name was brought up.”
Posted by Neel Mehta and Billy Leonard, Threat Analysis Group On Friday, October 21st, we reported 0-day vulnerabilities — previously publi...
It’s 15:10 pm on April 18, 2018. I’m in the Privacy International office, reading a news story on the use of facial recognition in Thailand. On April 20, at 21:10, I clicked on a CNN Money Exclusive on my phone.
What3Words is a widely promoted system that is used for sharing a location using just three words. For example, ///wedge.drill.mess is located in Hyde Park.The globe is divided into 3m squares, eac…
For the past week, the website "GitHub" has been under attack by China. In this post, I pin-point where the attack is coming from by doing a...
Learn how a Google spoof used a DKIM replay attack to bypass email security and trick users with a fake subpoena in this real-world phishing case.
During the months I worked in Let's Encrypt's operations team I got fairly used to being the go-to man for any question that a database query could solve.…
The Avast extensions which were spying on their users are no longer available from Mozilla and Opera add-on stores. Google still has to take action.
Mullvad has been a Tor Project Vidalia Onion Member since 2021 and has now become a Shallot Onion Member of Tor.
Explain like I’m 5 years old: Kerberos – what is Kerberos, and why should I care?
This post is extremely long and detailed and is on quite a dense subject. Here is the short version.
Near the end of 2022, Trail of Bits was hired by the Open Source Technology Improvement Fund (OSTIF) to perform a security assessment of the cURL file transfer command-line utility and its library, libcurl. The scope of our engagement included a code review, a threat model, and the subject of this blog […]
