Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 473 posts.
Tor Messenger Beta: Chat Over Tor, Easily
WARNING STARTS As of March 2018, Tor Messenger is no longer maintained and you should NOT use...
Public Beta: December 3, 2015
Let’s Encrypt will enter Public Beta on December 3, 2015. Once we’ve entered Public Beta our systems will be open to anyone who would like to request a certificate. There will no longer be a requirement to sign up and wait for an invitation. Our Limited Beta started on September 12, 2015. We’ve issued over 11,000…
Why it’s harder to forge a SHA-1 certificate than to find a SHA-1 collision
It’s well known that SHA-1 is no longer considered a secure cryptographic hash function. Researchers now believe that finding a hash collision (two values that result in the same value when SHA-1 is applied) is inevitable and likely to happen.
Google listening in to your room shows importance of privacy defense in depth
Does it always feel like Google’s listening in? Learn how to manage voice recordings, adjust privacy settings, and stop voice activation on Android and iPhone.
How Tor Works: Part One
Security and Programming Blog
Copy-Pasting URLs from Google Search Can Leak Previous Searches
Note: This information has been disclosed to Google appropriately, they have chosen to not fix this behavior.
CSS Based Attack fontface
In this post, I would like to share about new CSS based attack with unicode-range descriptor of @font-face rule . Using this technique, an...
Another update on the Truecrypt audit
There’s a story on Hacker News asking what the hell is going on with the Truecrypt audit. I think that’s a fair question, since we have been awfully quiet lately. To everyone who donate…
Secure yourself, Part 1: Air-gapped computer, GPG and smartcards
This blog entry is part of a series covering: Logging into your laptop and decrypting it automatically Encrypting and decrypting any passwords or secure info you have Sending and receiving encrypted mails Providing 2-step authentication codes for your web logins Doing all of the above on your mobile phone…
Hacking Team and a case of BGP hijacking
After just a few hours the Hacking Team emails archive has already provided many tasty leaks. I want to focus on a routing security issue since this is my main research activity for this year.
Hundreds of Thousands of Google Apps Domains’ Private WHOIS Leaked
This post was authored by Nick Biasini, Alex Chiu, Jaeson Schultz, and Craig Williams. Special thanks to William McVey for his contributions to this post.
Popular Google Chrome extensions are constantly tracking you by default
Popular Google Chrome extensions are constantly tracking you per default, making it very difficult or impossible for you to opt-out.
The Missing Mt. Gox Bitcoins
The official blog of WizSec, a group of bitcoin security specialists, and their investigation into MtGox.
Flash-Free Clipboard for the Web
As part of our effort to grow the Web platform and make it accessible to new devices, we are trying to reduce the Web's dependence on Flash. As part of ...