2821
The Vercel plugin on Claude Code wants to read your prompts
09 Apr 2026 The Vercel Plugin on Claude Code wants to read all your prompts!
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
2822
Task_t considered harmful
Posted by Ian Beer, Project ZeroThis post discusses a design issue at the core of the XNU kernel ...
2823
Apple curl security incident 12604
tldr: Apple thinks it is fine. I do not. On December 28 2023, bugreport 12604 was filed in the curl issue tracker. We get a lot issues filed most days so this fact alone was hardly anything out of the ordinary. We read the reports, investigate, ask follow-up questions to see what we can learn … Continue reading the…
2824
Drilling down on Uncle Sam's proposed TP-Link ban
The U.S. government is reportedly preparing to ban the sale of wireless routers and other networking gear from TP-Link Systems , a tech company that currently enjoys an estimated 50% market share among home users and small businesses. Experts say while the proposed ban may have more to do with TP-Link’s ties to China…
2825
The Mirai Botnet Is Proof the Security Industry Is Broken
Appcanary makes sure you never run vulnerable software on your servers. Like our blog? Subscribe to our newsletter or podcast . Browse the archive , or follow us on twitter , github or rss .
2826
More Mac malware from Google search
Follow a sponsored result in Google to a page in Medium that provides a Terminal command that you will live to regret. And what is Marek’s disease?
2827
Understanding and avoiding visually ambiguous characters in IDs
Designing a dictionary of visually unambiguous characters for IDs.
2828
SHA-1 'fully and practically broken' by new collision (2020)
Independent security journalism: news and analysis on intrusions, vulnerabilities, AI, policy and the software supply chain, plus video and podcasts.
2829
An unwanted update to your Google Account
Google sent me an email informing me that they will change the country associated with my account in 30 days. I wanted to know why.
2830
PSA: SQLite WAL checksums fail silently and may lose data
SQLite WAL has checksums, but on corruption it drops all the data and does not raise error
2831
Passwordless authentication: Secure, simple, and fast to deploy
Passwordless is an authentication middleware for Node.js that improves security for your users while being fast and easy to deploy. The last months were very exciting for everyone interested in ...
2832
The V8 Sandbox
V8 features a lightweight, in-process sandbox to limit the impact of memory corruption bugs
2833
Police Documents on License Plate Scanners Reveal Mass Tracking
Automatic license plate readers are the most widespread location tracking technology you’ve probably never heard of. Mounted on patrol cars or stationary objects like bridges, they snap photos of every passing car, recording their plate numbers, times, and locations. At first the captured plate data was used just to…
2834
The Many Possibilities of iMessage File Vulnerability
Posted by Natalie Silvanovich, Project ZeroCVE-2019-8646 is a somewhat unusual vulnerability I re...
2835
2836
Why the Tor attack matters
Earlier today, Motherboard posted a court document filed in a prosecution against a Silk Road 2.0 user, indicating that the user had been de-anonymized on the Tor network thanks to research conduct…
2837
EFF to Congress: Stop the Cybersurveillance Bills
EFF joined over 50 privacy and civil society organizations that sent two letters to Congress demanding it vote against the Senate Intelligence Committee's cybersecurity "information sharing" bill, the Cybersecurity Information Sharing Act of 2015 (CISA, S. 754) and the House Intelligence Committee’...
2838
OS X sudoers exploit found in the wild
Last month's discovery of a zero-day vulnerability in OS X led to today's revelation of the first known exploit.
2839
2840
"<ESC>[31M"? ANSI Terminal security in 2023 and finding 10 CVEs
This paper reflects work done in late 2022 and 2023 to audit for vulnerabilities in terminal emulators, with a focus on open source software. The results of this work were 10 CVEs against terminal emulators that could result in Remote Code Execution (RCE), in addition various other bugs and hardening opportunities…
2841
Even the LastPass Will Be Stolen
How to obtain encryption keys to decrypt the LastPass vault in different scenarios
2842
Dumping and extracting the SpaceX Starlink user terminal firmware
COSIC - Dumping and extracting the SpaceX Starlink User Terminal firmware ( )
2843
Entrust Certificate Distrust
Posted by Chrome Root Program, Chrome Security Team Update (09/10/2024): In support of more closely aligning Chrome’s planned compliance ...
2844
Breaking Spotify DRM with PANDA
Disclaimer : Although I think DRM is both stupid and evil, I don't advocate pirating music. Therefore, this post will stop short of providi...
2845
Meet Jack. Or, What The Government Could Do With All That Location Data
We now know that the NSA is collecting location information en masse. As we’ve long said, location data is an extremely powerful set of information about people.
2846
My cat alerted me to a DDoS attack
A few years ago, my cat gave me my most memorable middle of the night software engineering incident. I was working at a startup, and we didn’t have a formal on-call rotation yet. That was a deliberate decision, since being on-call is painful, and the team was good about just collectively keeping an eye out for urgent…
2847
Zero-Touch OAuth for MCP
The Enterprise-Managed Authorization extension to the Model Context Protocol is now stable, enabling organizations to centrally provision MCP server access through their identity provider so users get connected servers on first login without per-app OAuth.
2848
System76's coreboot open firmware manages to disable Intel ME for Raptor Lake
Read about the latest performance boosts, disabling Intel ME, Windows 11 support, and more!
2849
Tor Browser 11.0
Tor Browser 11.0 is now available from the Tor Browser download page and our distribution directory. This is the first stable release based on Firefox ESR 91, and includes an important update to Tor 0.4.6.8.
2850
Digital signatures and how to avoid them
Wikipedia’s definition of a digital signature is: A digital signature is a mathematical scheme for verifying the authenticity of digital messages or documents. A valid digital signature on a messag…