← all episodes

Security & Privacy

33 stories across the archive · newest first

1. EU extends “Chat Control” scanning fight to 2028▲ 1601 · 831 comments▶ Jul 11, 13:30 UTC · 4:34
2. Apple accuses OpenAI of stealing its hardware playbook▲ 1228 · 650 comments▶ Jul 11, 13:30 UTC · 6:23
3. New EU cars now need driver-monitoring cameras, and HN hates the beeps▲ 787 · 1059 comments▶ Jul 8, 12:04 UTC · 6:36
4. GitHub’s AI workflow leaks private repo data in a prompt-injection demo▲ 538 · 204 comments▶ Jul 8, 12:04 UTC · 8:08
5. Tenda routers caught with a hidden admin login path▲ 355 · 123 comments▶ Jul 8, 12:04 UTC · 8:34
6. Windows device ID in FBI case raises tracking questions▲ 352 · 161 comments▶ Jul 8, 00:05 UTC · 6:51
7. Cloudflare dominates the front door of European company websites▲ 252 · 187 comments▶ Jul 8, 00:05 UTC · 7:42
8. F-Droid blasts Google’s Android developer verification plan▲ 1730 · 742 commentsin 11 episodes:▶ Jul 6, 00:03 UTC · 7:36▶ Jul 5, 12:03 UTC · 8:42▶ Jul 5, 00:03 UTC · 7:15▶ Jul 4, 20:11 UTC · 12:39▶ Jul 4, 16:07 UTC · 7:48▶ Jul 4, 00:02 UTC · 6:01▶ Jul 3, 20:43 UTC · 5:22▶ Jul 3, 16:37 UTC · 5:06▶ Jul 3, 16:15 UTC · 6:33▶ Jul 3, 12:05 UTC · 6:33▶ Jul 3, 00:11 UTC · 5:56
9. YouTube comments can prompt-inject Ask Studio▲ 691 · 396 commentsin 4 episodes:▶ Jul 6, 00:03 UTC · 8:55▶ Jul 5, 12:03 UTC · 10:05▶ Jul 5, 00:03 UTC · 8:49▶ Jul 4, 20:11 UTC · 15:29
10. Anna’s Archive puts a $200K bounty on Google Books scans▲ 529 · 350 commentsin 3 episodes:▶ Jul 6, 00:03 UTC · 10:05▶ Jul 5, 12:03 UTC · 11:22▶ Jul 5, 00:03 UTC · 9:35
11. Claude Code Minecraft detour raises session-leak fears▲ 313 · 135 commentsin 4 episodes:▶ Jul 6, 00:03 UTC · 10:24▶ Jul 5, 12:03 UTC · 12:05▶ Jul 5, 00:03 UTC · 10:02▶ Jul 4, 20:11 UTC · 17:00
12. Flipper Zero commits to maintained firmware after community pushback▲ 393 · 180 comments▶ Jul 6, 00:03 UTC · 10:49
13. Pegasus Hit the Pegasus Investigators▲ 428 · 132 commentsin 5 episodes:▶ Jul 5, 12:03 UTC · 11:42▶ Jul 5, 00:03 UTC · 9:12▶ Jul 4, 20:11 UTC · 15:10▶ Jul 4, 16:07 UTC · 9:40▶ Jul 4, 00:02 UTC · 9:30
14. SearXNG keeps privacy-minded metasearch alive▲ 280 · 78 commentsin 2 episodes:▶ Jul 4, 20:11 UTC · 16:14▶ Jul 4, 16:07 UTC · 10:11
15. A Linux refactor left some LUKS suspend keys in RAM▲ 538 · 227 commentsin 6 episodes:▶ Jul 4, 16:07 UTC · 9:17▶ Jul 4, 00:02 UTC · 8:43▶ Jul 3, 20:43 UTC · 9:00▶ Jul 3, 16:37 UTC · 8:31▶ Jul 3, 16:15 UTC · 10:06▶ Jul 3, 12:05 UTC · 9:10
16. Spain reportedly blacklists Palantir over data-sovereignty fears▲ 742 · 308 commentsin 5 episodes:▶ Jul 4, 00:02 UTC · 7:19▶ Jul 3, 20:43 UTC · 7:14▶ Jul 3, 16:37 UTC · 6:39▶ Jul 3, 16:15 UTC · 8:22▶ Jul 3, 12:05 UTC · 7:57
17. Reuters: Alibaba bans Claude Code amid AI backdoor fears▲ 336 · 279 commentsin 4 episodes:▶ Jul 4, 00:02 UTC · 9:07▶ Jul 3, 20:43 UTC · 9:20▶ Jul 3, 16:37 UTC · 8:55▶ Jul 3, 16:15 UTC · 10:27
18. Claude Code accused of hiding anti-proxy markers in prompts▲ 2438 · 746 commentsin 3 episodes:▶ Jul 3, 00:11 UTC · 4:12▶ Jul 2, 00:12 UTC · 9:47▶ Jul 1, 12:06 UTC · 10:06
19. Apple’s Hide My Email may not be hiding enough▲ 301 · 88 comments▶ Jul 2, 00:12 UTC · 11:24
20. Open-weight GLM 5.2 surprises Semgrep on AI bug hunting▲ 1108 · 514 comments▶ Jun 29, 23:00 UTC · 6:21
21. GitHub repo dumps AI-assisted exploit PoCs, and HN is not convinced they’re all 0-days▲ 949 · 386 commentsin 8 episodes:▶ Jun 28, 18:35 UTC · 8:38▶ Jun 28, 16:22 UTC · 8:03▶ Jun 28, 14:06 UTC · 8:24▶ Jun 28, 12:16 UTC · 8:21▶ Jun 28, 12:02 UTC · 7:14▶ Jun 28, 10:25 UTC · 7:38▶ Jun 28, 00:03 UTC · 8:24▶ Jun 27, 19:16 UTC · 10:35
22. A searchable atlas of open webcams puts IoT privacy back in the spotlight▲ 335 · 179 commentsin 7 episodes:▶ Jun 28, 18:35 UTC · 9:44▶ Jun 28, 16:22 UTC · 9:19▶ Jun 28, 14:06 UTC · 9:43▶ Jun 28, 12:16 UTC · 9:27▶ Jun 28, 12:02 UTC · 8:25▶ Jun 28, 10:25 UTC · 9:03▶ Jun 28, 00:03 UTC · 10:11
23. How to pick a public DNS resolver without kidding yourself▲ 283 · 135 commentsin 3 episodes:▶ Jun 28, 18:35 UTC · 10:04▶ Jun 28, 16:22 UTC · 9:47▶ Jun 28, 14:06 UTC · 10:10
24. Big Tech launches Akrites to coordinate open-source security fixes▲ 466 · 233 commentsin 2 episodes:▶ Jun 28, 00:03 UTC · 9:45▶ Jun 27, 19:16 UTC · 10:08
25. CVE-2026-LGTM satirizes AI security eating itself▲ 594 · 92 comments▶ Jun 27, 19:16 UTC · 9:02
26. Two Thousand People Tried to Break One AI Email Agent▲ 375 · 160 comments▶ Jun 27, 19:16 UTC · 11:09
27. Vulnerability reports hit the LLM spam era▲ 386 · 220 commentsin 2 episodes:▶ Jun 24, 12:03 UTC · 12:03▶ Jun 24, 10:04 UTC · 10:28
28. Meta pauses employee-tracking tool after internal data exposure▲ 340 · 268 commentsin 2 episodes:▶ Jun 24, 12:03 UTC · 12:48▶ Jun 24, 10:04 UTC · 11:18
29. OpenAI launches GPT-5.5-Cyber, but HN wants to know who gets access▲ 221 · 174 commentsin 2 episodes:▶ Jun 24, 12:03 UTC · 13:11▶ Jun 24, 10:04 UTC · 11:40
30. Loupe shows what iPhone apps can quietly fingerprint▲ 547 · 243 commentsin 7 episodes:▶ Jun 22, 14:42 UTC · 9:54▶ Jun 22, 12:06 UTC · 9:57▶ Jun 22, 06:08 UTC · 9:20▶ Jun 22, 00:05 UTC · 8:49▶ Jun 21, 19:07 UTC · 6:59▶ Jun 21, 18:03 UTC · 7:06▶ Jun 21, 16:35 UTC · 8:28
31. 10,000 Trojan-Infested GitHub Repos Exposed▲ 985 · 248 commentsin 7 episodes:▶ Jun 21, 18:03 UTC · 6:07▶ Jun 21, 16:35 UTC · 7:22▶ Jun 21, 14:51 UTC · 10:48▶ Jun 21, 12:05 UTC · 11:21▶ Jun 21, 06:05 UTC · 10:54▶ Jun 21, 00:05 UTC · 9:57▶ Jun 20, 19:01 UTC · 8:41
32. LinkedIn Job Offer Scam Hides Backdoor in GitHub Repo▲ 1614 · 304 commentsin 5 episodes:▶ Jun 21, 14:51 UTC · 9:21▶ Jun 21, 12:05 UTC · 9:30▶ Jun 21, 06:05 UTC · 9:27▶ Jun 21, 00:05 UTC · 8:35▶ Jun 20, 19:01 UTC · 7:31
33. GrapheneOS Now Running on Android 17, Official Release Imminent▲ 1021 · 618 commentsin 5 episodes:▶ Jun 21, 14:51 UTC · 10:13▶ Jun 21, 12:05 UTC · 10:31▶ Jun 21, 06:05 UTC · 10:14▶ Jun 21, 00:05 UTC · 9:21▶ Jun 20, 19:01 UTC · 8:15