Indiana, Iowa, and Tennessee Pass Comprehensive Privacy Laws(schneier.com)

28 points by mikece 3 years ago | 13 comments

How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos(research.kudelskisecurity.com)

657 points by spiridow 1 year ago | 219 comments

Kudelski Security research post describing how a pull request to CodeRabbit led to remote code execution and write access to about one million repositories.

Passkeys – Under the Hood(research.kudelskisecurity.com)

140 points by paulgerhardt 2 years ago | 69 comments

A Surveillance Treaty in Disguise: Canada Signs UN Cybercrime Convention(michaelgeist.ca)

272 points by iamnothere 2 months ago | 147 comments

CISA tries to contain data leak(krebsonsecurity.com)

251 points by speckx 5 months ago | 55 comments

Mozilla to UK regulators: VPNs are essential privacy and security tools(blog.mozilla.org)

737 points by WithinReason 5 months ago | 318 comments

Mozilla Open Policy & Advocacy blog post urging UK regulators not to undermine VPNs, arguing they are essential privacy and security tools.

Ban the sale of precise geolocation(lawfaremedia.org)

695 points by hn_acker 6 months ago | 176 comments

Lawfare article by Tom Uren, from the Seriously Risky Business newsletter, arguing that the sale of precise geolocation data should be banned.

Court rejects Verizon claim that selling location data without consent is legal(arstechnica.com)

614 points by nobody9999 1 year ago | 75 comments

Ars Technica article on a court rejecting Verizon's claim that selling customer location data without consent was legal, amid a circuit split with AT&T's case.

Private equity is buying everything from vet offices to tech conglomerates(theverge.com)

482 points by Brajeshwar 3 years ago | 312 comments

A Verge Decoder interview with prosecutor Brendan Ballou on how private equity buys companies from vet offices to tech firms, why the system is broken, and fixes.

Court Records Should Be Free(eff.org)

430 points by hn_acker 4 months ago | 99 comments

EFF Deeplinks article by Joe Mullin arguing that federal court records should be freely accessible to the public.

Injunction issued in case about social media pressure from US Government(arstechnica.com)

360 points by cm_silva 3 years ago | 625 comments

Ars Technica article on a federal judge's preliminary injunction finding the White House pressured social networks to suppress speech, in a suit by Missouri and Louisiana.

VPN location claims don't match real traffic exits(ipinfo.io)

431 points by mmaia 10 months ago | 268 comments

IPinfo blog post examining whether VPN providers' advertised server locations match the actual exit locations of their traffic.