1
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 184 posts.
2
Fuck passwords
I’m so tired of passwords. So, so, so tired. Most people don’t understand this. Most people use the same password everywhere. Most people can just mechanically type out password3 in every password box, smirking to themselves at how clever they are, because who would ever guess 3 instead of 1? I don’t do that. Let me…
3
Carnegie Mellon CS Professor challenges Sony by mirroring Geohot's PS3 hacks
Request for materials: I would like to receive tutorial information on: Sony PS3 access protection mechanisms, the Elliptical Curve Digital Signature Algorithm ( ECDSA ), the structure of the PS3 hypervisor, METLDR, signing tools, and any other topics necessary for a person reasonably skilled in computer science to be…
4
My Email Canary
Despite the fact that I use really long passwords and two-factor authentication wherever it's available I still worry that someone might b...
5
LastPass Disclosure Shows Why We Can't Have Nice Things
Response to the media's hysteria surrounding LastPass' responsible security warning.
6
Chinese Infinite Magical Hard-Drive
Chinese Magical Hard-Drive - Thursday, 07 April 2011 - Alex's blog
7
Can we believe our eyes? Misleading people with Unicode.
Access to this page requires authorization. You can try signing in or changing directories .
8
9
10
Google Chrome Hacked?
VUPEN Security provides vulnerability management and intelligence solutions (advisories, analysis, exploits).
11
12
13
Jwz: Google's pseudonym support "obvious bullshit"
In a shamefully credulous statement, they say: Proponents of pseudonymity scored a major victory today, when Google executive Vic Gundotra revealed at the Web 2.0 Summit that social networking service Google+ will begin supporting pseudonyms and other types of identity. According to Mashable, Google+ will be "adding…
14
Why the password "this is fun" is 10 times more secure than "J4fS!2"
Baekdal is your premium site for media reports and trend analysis. Subscribe from €7.55/month
15
How to Force Facebook into Handing Over their Secret Tracking Data
According to European data protection law every individual has the right to get a copy of all personal data a company holds about him (right to access). This law is applicable to Facebook too. Every user with a residence outside of the US and Canada has a contract with “Facebook Ireland Limited”, based in Dublin…
16
17
18
19
20
OAuth Will Murder Your Children
Written pieces, talks, and other bits by Zach Holman.
21
22
DHS asks Mozilla to take down MafiaaFire add-on
From time to time, we receive government requests for information, usually market information and occasionally subpoenas. Recently the US Department of Homeland Security contacted Mozilla and reque…
23
24
German Chaos Computer Club analyzes and releases government malware
The largest European hacker club, "Chaos Computer Club" (CCC), has reverse engineered and analyzed a "lawful interception" malware program used by German police forces. It has been found in the...
25
Xkcd Password Generator
The button below will generate a random phrase consisting of four common words. According to yesterday’s xkcd strip, such phrases are hard to guess (even by brute force), …
26
Facebook doesn't like privacy countermeasures
German tech-news site Heise changed their "Like" buttons to be locally-hosted images that only transform into real Facebook "Like" buttons once you click them -- meaning that if you don't click anything, Facebook can't track you, and that actually "liking" the page requires two clicks. (Also presumably meaning that…
27
28
29
Aaron Swartz v. United States
(echoes of a broken system) UPDATE: Aaron committed suicide on January 11, 2013.(!) More on his life here. Aaron Swartz is a friend and Cambridge-area polymath whose projects focus on access to kno…
30
MySQL.com compromised via (guess what?) SQL injection
MySQL.com (the official site for the MySQL database) was compromised via (shocking!) blind SQL injection. A post was sent today to the full disclosure list…