Being blocked from contributing to lodash(c.ruatta.com)

69 points by crtns 1 year ago | 32 comments

Ripping off professional criminals by fermenting onions(shufflingbytes.com)

76 points by campuscodi 3 years ago | 50 comments

ViHN: Vim for Hacker News(qsantos.fr)

119 points by qsantos 2 years ago | 50 comments

Hackers stole access tokens from Okta's support unit(krebsonsecurity.com)

279 points by todsacerdoti 3 years ago | 137 comments

AI Slop vs. OSS Security(devansh.bearblog.dev)

161 points by mooreds 11 months ago | 95 comments

Rearchitecting: Redis to SQLite(wafris.org)

328 points by thecodemonkey 2 years ago | 111 comments

Wafris blog post explaining why its open-source Rails web application firewall client moved from a Redis datastore to SQLite, with benchmark charts.

Everything authenticated by Microsoft is tainted(graz.social)

653 points by ColinWright 3 years ago | 277 comments

A Mastodon post by Karl Voit arguing that the Microsoft Azure cloud hack, including 60,000 stolen US State Department emails, means everything Microsoft authenticates is tainted.

Microsoft breached antitrust rules by bundling Teams and Office, EU says(apnews.com)

669 points by cbg0 2 years ago | 734 comments

AP News article reporting that the European Union found Microsoft breached antitrust rules by bundling Teams with its Office software.

I could've accessed 17T Microsoft records(blog.faav.net)

287 points by luispa 27 days ago | 120 comments

A security researcher's blog post describing a Microsoft internal analytics service flaw where unchecked token signatures allowed admin access to query 17.3 trillion records.

Stop Microsoft users sending 'reactions' to email by adding a postfix header(neilzone.co.uk)

383 points by wasmitnetzen 2 years ago | 310 comments

A blog post describing how the author added a Postfix header to outgoing mail to try to stop Microsoft Outlook users from sending 'reaction' emails.

Leaking the email of any YouTube user for $10k(brutecat.com)

1548 points by brutecat 1 year ago | 439 comments

A security researcher's write-up of a vulnerability chain that exposed the email address of any YouTube channel owner, earning a $10,000 Google bug bounty.

Flaw has Microsoft Authenticator overwriting MFA accounts, locking users out(csoonline.com)

412 points by miles 2 years ago | 271 comments

CSO Online news article on a Microsoft Authenticator design flaw that overwrites existing MFA accounts when new ones are added, locking users out.