News for hackers. Stuff that matters.

ffpip

I've seen the popups too on Firefox Nightly on Android. It seems to be a firefox issue since I have seen this on other sites too
Play services is how Google delivers many Android updates now so that all users can get security updates without waiting for the device vendor to publish it for each device.
> CNAME-uncloaking is up to each DNR implementation; no DNR implementation supports this capability at the time of writing.

https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-as...

Re:Go 1.23 Released on Thursday August 22, 2024 @02:58PM (#41323376)
Thanks
Re:Go 1.23 Released on Tuesday August 13, 2024 @03:14PM (#41238630)
Any good resources on learning go?

Has anyone had any luck with the YT videos or courses way?

Re:Ente Auth: open-source Authy alternative for 2FA on Friday July 05, 2024 @02:45PM (#40885057)
Storing passwords and 2FA in one place only protects you against password reuse, password leaks, and some more common threats that the large majority of people should be looking out for.

It is still a lot better than no 2FA, and more than sufficient for the average person.

For someone looking to improve their security a bit more and for someone with a "don't trust anyone" model, having a separate 2FA app has it's advantages. It protects them against unencrypted password DB leaks, security vulnerabilities in the password manager, or any intentional security threat induced by the developer of the password manager

Re:Sei pays out $2M bug bounty on Tuesday June 18, 2024 @08:07AM (#40716814)
Yes, there would be no liquidity.
Re:Sei pays out $2M bug bounty on Tuesday June 18, 2024 @07:03AM (#40716275)
Yeah I understood the mechanism, just wanted to know the companies that enable such things.
Re:Sei pays out $2M bug bounty on Tuesday June 18, 2024 @05:29AM (#40715663)
Do you have examples? People can avoid them
Re:Progressive Web Apps (PWAs) Phishing on Thursday June 13, 2024 @04:18PM (#40674213)
A PWA can have the familiar "Sign in with google" button now, which pops up a similar page as shown in the article, but with accounts.google.com in the fake URL bar.
Re:Progressive Web Apps (PWAs) Phishing on Thursday June 13, 2024 @04:16PM (#40674192)
This looks a lot like a Oauth request, where you are redirected to sign-in. You check the URL and enter the creds, with the assumption that you are using "Sign in with Microsoft" to login to the site since this is how that login flow works
Re:Firefox 127 on Tuesday June 11, 2024 @11:32AM (#40647458)
Try

Type about:config in URL bar -> click proceed -> Search "browser.startup.homepage_override.mstone" in the shown search bar -> change value to "ignore"

https://kb.mozillazine.org/Startup.homepage_override_url

Re:Firefox 127 on Tuesday June 11, 2024 @11:26AM (#40647351)
They don't show a full padlock. They show one with a warning icon
It's progressive. 1 user flagging it doesn't mark it [flagged] but probably contributes to the ranking
Re:What Happened to DuckDuckGo? on Thursday May 23, 2024 @02:50AM (#40451318)
What a coincidence!

I used it after 3-4 months and it didn't show any search results. Thought I had forgotten how to use their !bangs feature. Turns out it is down

Re:Stripe increasing "instant payout" fees by 50% on Monday May 20, 2024 @11:59PM (#40423959)
Uber can easily just have 2 days of revenue ready in cash (or even a loan will be much cheaper than 1.5%) to not pay 1.5% every time.
Re:Stripe increasing "instant payout" fees by 50% on Monday May 20, 2024 @11:42PM (#40423849)
Won't they have a rolling period, since a lot of customers just add funds and might not use it?

So you can use the balances from the people who added money 2 days ago, today.

Re:Tell HN: Twitter Domain Redirecting to X on Friday May 17, 2024 @12:47AM (#40386479)
They are forcing Firefox users to turn off tracking protection.

"Firefox’s Enhanced Tracking Protection (Strict Mode) is known to cause issues on x.com"

It worked perfectly fine on Twitter.com. I think x.com has to be added as a "twitter" domain in Firefox config.

Re:2024 Verizon Data Breach Investigation Report [pdf] on Monday May 13, 2024 @06:46AM (#40341692)
It's working now!
In the end, they hold the keys irrespective of how many algorithms they wrap on top.

I do not feel it is any different from Google Chat, Twitter DMs, etc. They do have a lot of censorship resistant and anti-MITM attack features in between, but they hold the keys by default

I use it for convenience and amazing features, not for security!

You can easily block network access for an app on Windows using Windows Firewall. Same on a few Android skins such as MIUI by Xiaomi
Cloud encryption is just HTTPs + encryption at rest (only claimed, not verified).

They hold the keys, irrespective of how many proprietary protocols they wrap over the message.

A great product tho! I used saved messages extensively!

Re:2024 Verizon Data Breach Investigation Report [pdf] on Sunday May 05, 2024 @01:04PM (#40266357)
Yeah it's working now, very weird indeed.

DCMA would not work here since they are hosting a copy of it for archival purposes, and not claiming copyright. The original public URL is included.

Archive.org does respect robots.txt tho. It is possible to completely delete a site's history on Archive.org by modifying the robots.txt (at least in the past, not sure if that is the case now)

Re:2024 Verizon Data Breach Investigation Report [pdf] on Saturday May 04, 2024 @02:19PM (#40259339)
Link not working. They are doing something weird with the PDF
Re:2024 Verizon Data Breach Investigation Report [pdf] on Thursday May 02, 2024 @12:56AM (#40232836)
Apologies, did not know verizon was incapable of correctly hosting a PDF. Should have archived it to wayback machine
Re:2024 Verizon Data Breach Investigation Report [pdf] on Wednesday May 01, 2024 @02:30PM (#40227267)
Direct link - https://www.verizon.com/business/resources/T5d2/reports/2024...

From the title, it seemed that Verizon had published a postmortem of a recent data breach incident they had

Older »