I Hacked McDonald's (Security Contact Was Harder to Find Than Secret Recipe)(bobdahacker.com)

22 points by Improvement 1 year ago | 11 comments

I Could've Rickrolled the FIFA World Cup. All I Needed Was My ID(bobdahacker.com)

169 points by BobDaHacker 4 months ago | 52 comments

Made an app that summarizes recent popular stories from Hacker News(hackerdigest.upstash.app)

16 points by hezarfendd 2 years ago | 6 comments

'We hacked the FBI:' Hackers say they have data on all FBI employees(404media.co)

775 points by spenvo 1 month ago | 561 comments

404 Media article reporting hackers' claims that they breached the FBI and obtained data on all FBI employees.

Tl;dv: Over 180k meetings left wide open(bobdahacker.com)

526 points by colesantiago 2 months ago | 173 comments

Security researcher blog post describing a misconfigured Firestore database at meeting recorder tl;dv that exposed 181,874 meetings, still unfixed six months after reporting.

Hackers can steal cryptographic keys by video-recording power LEDs 60 feet away(arstechnica.com)

60 points by rntn 3 years ago | 20 comments

Exposed DeepSeek database leaking sensitive information, including chat history(wiz.io)

608 points by talhof8 1 year ago | 423 comments

Wiz Research blog post reporting a publicly accessible DeepSeek database exposing over a million log lines, including chat history and other sensitive data.

Mastercard DNS error went unnoticed for years(krebsonsecurity.com)

925 points by todsacerdoti 1 year ago | 228 comments

KrebsOnSecurity article on a MasterCard DNS server misconfiguration, a typo'd nameserver domain that went unnoticed for nearly five years until a researcher registered it.

Hackers Had a Live Feed of Every ID Verification Company Scanned for over a Year(techdirt.com)

481 points by beardyw 1 month ago | 197 comments

Techdirt article reporting that hackers had a live feed of every ID scanned by an identity verification company for over a year, exposing 153 million license scans.

What a Hacker Stole from Me(mynoise.net)

355 points by wonger_ 1 year ago | 106 comments

A myNoise blog post by founder Stéphane describing a hacker's attack on the myNoise website, first via code-injection attempts and then a different strategy.

Hackers obtain counterfeit TLS certificates for Google and other large services(arstechnica.com)

111 points by colinprince 19 days ago | 37 comments

Ars Technica article reporting that hackers compromised three domain registries and obtained unauthorized TLS certificates for Google and other large services.

AI agent bankrupted their operator while trying to scan DN42(lantian.pub)

1348 points by xiaoyu2006 4 months ago | 488 comments

Blog post recounting how an AI agent trying to join the DN42 hobbyist network to scan it ran up a $6531.30 AWS bill for its operator.