How I discovered a hidden microphone on a Chinese NanoKVM

CharlotteOS – An Experimental Modern Operating System

A Flaw with the Security Level Slider in Tor Browser

Ask HN: Is archive.today/is/md/etc. compromised?

A deep dive into Cellebrite: Android support as of February 2025

Reversing Samsung's H-Arx Hypervisor Framework (Part 1)

OpenPaX – open-source alternative to GrSecurity Kernel Patch

Secureblue: A Security-Focused Desktop and Server Linux Operating System

Practical HTTPS Interception: 20 Years of SSL/TLS Interception

Trivalent – A Hardened Chromium for Desktop Linux inspired by Vanadium

IVPN acquires Safing, operator of Portmaster and the SPN network

Secureblue Goes Sudoless

State of the Web App: Current Woes and Promising Futures

Hardened-Chromium: A hardened Chromium for desktop Linux inspired by Vanadium

Stagex – container-native, full-source bootstrapped, and reproducible toolchain

Law enforcement agencies undermine Tor anonymisation

You Can't Spell WebRTC Without RCE – Part 1

The secret TrueCrypt security audit [pdf] (2019)

Collision Attacks on Galois/Counter Mode (GCM)

Not So Secret: Analysis of KakaoTalk's Chat E2EE Feature

Avoid ISP Routers

The Snowden files: where are they and where should they end up?

Windows API that lets you disable Defender

Practical Attack on Steghide

Deanonymization of the Dero Network

SimpleX: Redefining Privacy by Making Hard Choices

Haveno – Decentralized crypto-fiat exchange built on Tor and Monero

All Linux distros using fwupd package open web server on 0.0.0.0:27500

XZ Utils Made Me Paranoid

Novel attack against virtually all VPN apps neuters their entire purpose

DNS traffic can leak outside the VPN tunnel on Android

Full-Chain Membership Proofs (FCMP) – The Next Generation of Monero's Privacy

Research paper tests how many Arch Linux packages are reproducible

ShredOS – Secure Disk Erasure/Wipe

How did Facebook Spy on Encrypted Traffic from a Mobile VPN App?

Personal VPN services are snake oil

You shouldn't use a commercial VPN: Amateur hour with Windscribe

Breaking E2EE in Nextcloud [pdf]

Why do Group Policy settings require me to have a degree in philosophy? (2011)

Identifying Secure Software

Flatpak builds are not reproducible and why that's a practical problem (2022)

Verifpal: New Software for Verifying the Security of Cryptographic Protocols

Mostr: A bridge between Nostr and the Fediverse