IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay(mysk.blog)

153 points by lapcat 2 months ago | 24 comments

Trusted URLs via Cryptographic Signatures(blog.certisfy.com)

20 points by Edmond 2 months ago | 12 comments

Google’s nightmare “Web Integrity API” wants a DRM gatekeeper for the web(arstechnica.com)

891 points by jakobdabo 3 years ago | 359 comments

Ars Technica article on Google's proposed Web Integrity API, being prototyped in Chrome, which critics say would act as a DRM-style gatekeeper for the web.

Extracting a UART Password via SPI Flash Instruction Tracing(zuernerd.github.io)

54 points by Eduard 9 months ago | 11 comments

Encrypted traffic interception on Hetzner and Linode targeting Jabber service(notes.valdikss.org.ru)

637 points by f311a 3 years ago | 257 comments

Blog post detailing discovery of a TLS man-in-the-middle interception of jabber.ru XMPP servers hosted on Hetzner and Linode using Let's Encrypt certificates.

Signing TLS handshakes inside a TPM(bschaatsbergen.com)

32 points by bschaatsbergen 1 month ago | 39 comments

Recent 'MFA Bombing' Attacks Targeting Apple Users(krebsonsecurity.com)

379 points by vdddv 2 years ago | 212 comments

KrebsOnSecurity article on phishing attacks that abuse Apple's password reset feature to flood devices with prompts, followed by calls spoofing Apple support.

Apple ordered by UK to create global iCloud encryption backdoor(macrumors.com)

1105 points by throw0101d 1 year ago | 574 comments

MacRumors article reporting that the UK government secretly ordered Apple to provide backdoor access to encrypted iCloud content worldwide, citing The Washington Post.

Apple is about to make Hide My Email useless(arseniyshestakov.com)

478 points by SXX 4 months ago | 289 comments

Blog post arguing that Apple's new domain for Sign in with Apple and iCloud+ Hide My Email aliases will make the privacy feature ineffective.

Hackers obtain counterfeit TLS certificates for Google and other large services(arstechnica.com)

111 points by colinprince 19 days ago | 37 comments

Ars Technica article reporting that hackers compromised three domain registries and obtained unauthorized TLS certificates for Google and other large services.

Apple announces ability to download apps directly from websites in EU(macrumors.com)

698 points by Hamuko 2 years ago | 1265 comments

MacRumors article reporting Apple's announcement that EU developers can distribute iOS apps directly from websites, plus other DMA-related changes.

Two-tier encryption in the UK(macanorak.com)

494 points by ReturnoftheHack 1 month ago | 455 comments

MacAnorak article on how Apple's strongest iCloud protection (Advanced Data Protection) is unavailable to some UK users, creating two-tier encryption.