Magic Links Have Rough Edges, but Passkeys Can Smooth Them Over(rmondello.com)

38 points by mooreds 1 year ago | 29 comments

Revisiting Textpattern(rubenerd.com)

38 points by Tomte 3 years ago | 14 comments

How to password protect a static HTML page with no JavaScript(shkspr.mobi)

26 points by promiseofbeans 3 years ago | 14 comments

ChatGPT is my static site generator(notes.npilk.com)

6 points by npilk 1 year ago | 0 comments

The Ken Thompson Hack(wiki.c2.com)

98 points by stephc_int13 2 years ago | 27 comments

Tuning async IO in PostgreSQL 18(vondra.me)

86 points by fanf2 1 year ago | 16 comments

Recent 'MFA Bombing' Attacks Targeting Apple Users(krebsonsecurity.com)

379 points by vdddv 2 years ago | 212 comments

KrebsOnSecurity article on phishing attacks that abuse Apple's password reset feature to flood devices with prompts, followed by calls spoofing Apple support.

Two-tier encryption in the UK(macanorak.com)

494 points by ReturnoftheHack 1 month ago | 455 comments

MacAnorak article on how Apple's strongest iCloud protection (Advanced Data Protection) is unavailable to some UK users, creating two-tier encryption.

iMessage with PQ3 Cryptographic Protocol(security.apple.com)

515 points by galad87 2 years ago | 247 comments

Apple Security Research blog post introducing PQ3, a post-quantum cryptographic protocol for iMessage end-to-end encryption.

U.K. orders Apple to let it spy on users’ encrypted accounts(washingtonpost.com)

642 points by Despegar 1 year ago | 925 comments

Washington Post exclusive reporting that the U.K. secretly ordered Apple to provide blanket access to users' encrypted iCloud backups worldwide.

Private Cloud Compute Security Guide(security.apple.com)

382 points by djoldman 1 year ago | 198 comments

Apple Security Research documentation guide describing the security and privacy architecture of Private Cloud Compute for cloud-based AI processing.

What a Hacker Stole from Me(mynoise.net)

355 points by wonger_ 1 year ago | 106 comments

A myNoise blog post by founder Stéphane describing a hacker's attack on the myNoise website, first via code-injection attempts and then a different strategy.