News for hackers. Stuff that matters.

JackGreyhat

Valid concern, yet a potentially solved problem. For code signing at least. Chexk out Time Stamping.

More info: https://sslinsights.com/code-signing-time-stamping/

Re:Google, I Dump Your Ass on Tuesday May 26, 2026 @04:13PM (#48285361)
They have a solution for that, called privacy pass. It uses tokens to show the system you are a paid user, but supposedly does not reveal who you are.

I haven't tried it myself, so I have no idea if it works as it should. I'm still deciding to subscribe or not.

More info: https://help.kagi.com/kagi/privacy/privacy-pass.html

Re:CISA Admin Leaked AWS GovCloud Keys on GitHub on Tuesday May 19, 2026 @03:18PM (#48198065)
Machine Head - Struck A Nerve

The more things change, the more they stay the same.

Wise words, lovely song.

Re:Stop Using Face ID on Monday February 09, 2026 @03:14PM (#46950525)
Thats why some PIN screen implementations have PIN screen scrambling. It can defeat shoulder surfing.
Re:Crowdstrike Outage Causing Widespread Issues on Friday July 19, 2024 @07:05PM (#41012370)
It's the attack path.
How did you know f-droid's certificate was about to expire? Do you keep track?
"Autoruns" is the sysinternals tool you're talking about ;)
An AP or wlan router that supports vlan to ssid mapping.
Re:iPhone seemingly sends iOS keyboard data to an iCloud server on Wednesday January 17, 2024 @05:07PM (#39034216)
At least GrapheneOS devs are transparant about it, as it should:

https://grapheneos.org/faq#default-connections

Re:iPhone seemingly sends iOS keyboard data to an iCloud server on Wednesday January 17, 2024 @05:00PM (#39034134)
Would you be willing to share your full list?
Re:EU tells Apple to open everything up to its rivals on Thursday September 28, 2023 @01:53AM (#37685762)
So you mean an alternative such as Mastodon?
Re:Running one’s own root Certificate Authority in 2023 on Saturday September 16, 2023 @04:47PM (#37538529)
Easy-rsa to the rescue. Been using it for a while, works great and makes life easier :)

Link: https://github.com/OpenVPN/easy-rsa

Summary from that page:

easy-rsa is a CLI utility to build and manage a PKI CA. In laymen's terms, this means to create a root certificate authority, and request and sign certificates, including intermediate CAs and certificate revocation lists (CRL).

Do you use this approach?

If so, are you willing to share an example robots.txt file? What bots would be allowed? Google, Bing, ...? Those?

Re:Pirate Site Not Impressed by Global DNS Blocking Order on Saturday August 05, 2023 @05:29PM (#37016468)
I just checked and cannot reach RT from Germany, using the ISP provided DNS server. I think that is key.
Re:How Nat Traversal Works on Thursday August 03, 2023 @05:53PM (#36992527)
Check this:

https://www.paloaltonetworks.com/cyberpedia/what-is-dns-tunn...

See the "Preventing DNS Tunneling" chapter.

Unrelated to the software itself, but it is amazing how this website runs http without redirecting to https. You don't see that very often any more. It's probably an oversight, I guess :)
Re:Apple Vision Pro: Apple’s first spatial computer on Monday June 05, 2023 @05:55PM (#36204460)
The human eye has an approximate pixel resolution of 120 million pixels per eye. On top of that, our brain constantly processes and integrates the output of our eyes. This creates an even higher perceived pixel resolution of about 480 million pixels per eye. Some estimates are even higher.

I'm not saying Apple created a bad product...but I wouldn't expect a mere 23 million pixels to be indistinguishable from reality.

Re:Daniel Micay publicly steps down from GrapheneOS on Friday May 26, 2023 @05:46PM (#36089882)
For those of you that want to stay on HN, and not visit twitter:

From @DanielMicay:

"I've stepped down as lead developer of GrapheneOS and will be replaced as a GrapheneOS Foundation director. I'll be ending my use of public social media. I'm unable to handle the escalating level of harassment including recent swatting attacks. There will be a smooth migration."

"I'm confident the project will be in good hands with the rest of the development team. I'll be training them to handle everything I used to do myself. I haven't been a particularly active developer for a while now and there will be little impact on ongoing feature development."

"One of our veteran developers will be taking over administration of the server infrastructure. Local infrastructure for official builds, signing and testing will be replicated in multiple locations and verified against each other to reduce trust in any particular location."

"I'm going to focus on recovery from everything that has transpired since 2018. I have not been doing well, particularly in the past few weeks, but there has been no break from it since 2018. The police know about the swatting situation and are preventing it happening again."

Re:Anonymous Tor Phone on Tuesday May 02, 2023 @04:39PM (#35793861)
In your opinion, what browser would be better than Bromite? Vanadium?
Re:Ask HN: Why is WebAuthn so slow to take off? on Sunday April 23, 2023 @05:21PM (#35680751)
Your password cannot leak, because it does not exist. Passkeys can also not be phished.
No...But it creates pressure in the form of soundwaves, which could be picked up by ears and brains to translate it into sound ;) Everything required to make sound is there.

Was that your point?

Re:Why 111-1111111 is a valid Windows 95 key on Sunday February 26, 2023 @04:13PM (#34949508)
Oh...my...god...

That CD key. I remember that one as well. Good times :) Thanks for bringing up these memories.

Re:Windows 11: a spyware machine out of users' control on Wednesday February 08, 2023 @05:02PM (#34715998)
If you use ninite, you might want to give chocolatey a shot ;) https://community.chocolatey.org/
"be the change you want to see in the world"

~Not Gandhi

Re:I Landed a (Model) Rocket Like SpaceX. It Took 7 Years on Monday August 08, 2022 @05:26PM (#32391239)
I find that the guy in the video kinda looks a bit like he could be Musk's son. Funny stuff..

Older »