Topics /
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
Its not a secret that I've been working on sandboxed desktop applications recently. In fact, I recently gave a talk at devconf.cz about it. However, up until now I've mainly been focusing on the bundling and deployment aspects of the problem. I've been running applications in their own environment, but having pretty…
Firefox 57 not only ships a large amount of performance improvements and a UI refresh, it also contains a number of technological improvemen...
TL;DR: check mail-tester.com or Spam Checker. If you don't get 10/10, read this post. In a previous post, we saw how to configure a Debian mail server with Postfix and Dovecot, but we did not address an important issue: spam. Major e-mail providers are defending their users …
Overzicht van de laatste alerts, nieuwsberichten, publicaties, expertblogs en de meest recente verhalen van ondernemers.
Yesterday the New York Times and ProPublica posted a lengthy investigation based on leaked NSA documents, outlining the extensive surveillance collaboration between AT&T and the U.S. government…
This is a mirror of the original about:intel post, since the about:intel server is sadly sometimes overloaded. Also do read the opposing view from Jan-Jaap Oerlemans and the reflection by Lotte Houwing The Dutch government is proposing adding a lex specialis to its existing intelligence and security services act. This…
Next generation Wi-Fi® security for personal and enterprise networks
Bard IDOR, a GraphQL directive-overloading DoS that hung Google's backend for 109 seconds, and Workspace data exfiltration via markdown images.
Today, a group of 83 prominent Internet inventors and engineers sent an open letter to members of the United States Congress, stating their opposition to the SOPA and PIPA Internet blacklist bills that are under consideration in the House and Senate respectively. We, the undersigned, have played...
Over the past several weeks, Signal traffic has gone through the roof. New users are signing up at unprecedented rates, and we’ve expanded our server capacity faster than we ever anticipated. It means a lot to us that so many people are relying on Signal during this difficult time. When users che...
The latest on the world’s leading enterprise Linux® platform
Tor Browser 9.5 is now available from the Tor Browser download page and also from our distribution directory.
Many spam trends are cyclical: Spammers tend to switch tactics when one method of hijacking your time and attention stops working. But periodically they circle back to old tricks, and few spam trends are as perennial as calendar spam, in which invitations to click on dodgy links show up unbidden in your digital…
A Hacker's Blog of Unintended Use and Insomnia.
Yesterday I covered the OpenAI technical report on the HuggingFace hack. That report had one key new piece of information, and some good prosaic steps OpenAI will be taking to strengthen its alignm…
Spur scanned 6,038 LG and Samsung smart TV apps and found 2,058 with residential proxy SDKs, exposing privacy and home network risks.
I received 3 DMCA takedown emails today, covering 7350 URLs on my hardbin.com IPFS gateway. The URLs were allegedly serving infringing copies of books. The strange part is that of those 7350 URLs, during the time for which I have nginx logs, none of them have ever been accessed , and of the ones that I checked, none…
You no longer need HTTPS Everywhere to set HTTPS by default! Major browsers now offer native support for an HTTPS only mode. Learn how to turn it on.Read more about the sunset of HTTPS Everywhere.Since we started offering HTTPS Everywhere, the battle to encrypt the web has made leaps and bounds....
As seen on Hackaday! TL;DR – The SanDisk High Endurance cards use SanDisk/Toshiba 3D TLC Flash. It took way, way more work than it should have to figure this out (thanks for nothing, SanDisk!…
This is a special post because I fully based on another researcher, s1guza’s 0day. All of this story began from the following tweet: Siguza told us that his 0day was patched in the iOS 13.5 beta3. So this is actually a sandbox escape 0day for the newest, non-beta iOS version (13.4.1). In this post, I’ll…
Finding and exploiting bugs in the Xbox 360 hypervisor to create the "Bad Update" exploit.
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
How to create perfect secret messages that can be decoded using just your eyes.
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
Robert O'Callahan. Christian. Kiwi. Software guy. All content human-authored unless otherwise noted.
