kkm

15 ms·

121.
Verizon Media launches privacy-focused search engine, OneSearch(verizon.com)
1 points by kkm 7y ago|0 comments
122.
Chrome extension caught stealing crypto-wallet private keys(zdnet.com)
3 points by kkm 7y ago|0 comments
123.
Promiscuous Cookies and Their Impending Death via the SameSite Policy(troyhunt.com)
4 points by kkm 7y ago|1 comments
124.
Travelex site taken offline after cyber attack(bbc.com)
1 points by kkm 7y ago|0 comments
125.
Brazil fines Facebook $1.6M for improper sharing of user data(reuters.com)
2 points by kkm 7y ago|0 comments
126.
A Twitter app bug was used to match 17M phone numbers to user accounts(techcrunch.com)
301 points by kkm 7y ago|125 comments
127.
Anti-Phishing with Privacy in Mind(0x65.dev)
3 points by kkm 7y ago|0 comments
128.
by kkm 7y ago
Disclaimer: I work for Cliqz. Good to hear that Mozilla changed their mind, when we proposed an open API for extensions to access the search area it was turned down Ref: - https://bugzilla.mozilla.org/show_bug.cgi?id=1361327
129.
German university issues 38k passwords by hand after malware infection(zdnet.com)
137 points by kkm 7y ago|76 comments
130.
by kkm 7y ago
Thank you for taking the time to read the article and sharing your feedback. Noise is added for what is called plausible deniability. Note that messages themselves do not contain any user-identifier. We take extra measures to strip request
131.
Cookie STATUS: Various tracking protection mechanisms in major browsers(cookiestatus.com)
1 points by kkm 7y ago|0 comments
132.
by kkm 7y ago
There is some similar work in the space of checking if the credentials being used by the user are compromised or not. Example: https://arxiv.org/pdf/1905.13737.pdf
133.
XSS in Firefox-iOS QR Code Reader(payatu.com)
1 points by kkm 7y ago|0 comments
134.
Pivoting from conventional search to search-as-you-type: Our story with Mozilla(0x65.dev)
72 points by kkm 7y ago|12 comments
135.
Over 750k applications for US birth certificate copies exposed online(techcrunch.com)
3 points by kkm 7y ago|0 comments
136.
by kkm 7y ago
Hi dessant, Disclaimer: I work for Cliqz. Would be really interesting to know your concerns with FoxyProxy.FoxyProxy is legally bound to not log the IP or share it. From the HPN protocol's perspective, data can be routed via any truste
137.
by kkm 7y ago
Hi, Thank you for bringing this up. Although, this is not relevant in the context of the blog post, we are on that list by mistake. We do NOT collect any personal data in our browser: (more details e.g., here: https://0x65.dev&#x
138.
by kkm 7y ago
First, let's check if you can open another domain on .dev TLD, like web.dev, if not then: Seems like you have some mapping for .dev TLD. Assuming based on your mention of Safari, that you are using Mac. Could you check if you have some
139.
by kkm 7y ago
Hi, Interesting, could you tell what's the error to see. Other ways you can reach the blog: If you use Tor browser can you try opening: http://cliqzdevxo33b4h6.onion/ Or if you use Beaker browser: dat://ee172
140.
Defeating fraudsters and spammers without tracking users(0x65.dev)
15 points by kkm 7y ago|1 comments
141.
by kkm 7y ago
Hi soumyadeb, It is true that there needs to be a way to store the aggregate queries "per user". In the current approach of collection this place happens to be on Server, but aggregation per user can easily be done on client-side
142.
by kkm 7y ago
Hi, Disclaimer: I work for Cliqz. Thank you the questions, we are always looking for constructive feedback on and off HN. 1. These random values are used for grouping partial queries together, and they reset when you press enter or start a
143.
by kkm 7y ago
Hi Aorth, Disclaimer: I work for Cliqz. We are aware of this and it's unfortunate, although the lists are not the main ones from community like Easylist, uBlock Origin etc. Cliqz does need to collect data to build it's search engi
144.
The world needs more search engines(0x65.dev)
795 points by kkm 7y ago|519 comments
145.
by kkm 7y ago
Hi Marcus, Thank you for your questions. Disclaimer: I also work on WTM from time to time, so I hope can answer these questions to some degree :) 1. WhoTracksMe is served via CloudFront, it only get's the IP that CF reports. To get the
146.
by kkm 7y ago
In particular case of liberation.fr, anyone who has access to the value of ‘djazsession’ cookie can log in to the users’ account. This is one of the cookies being sent to Eulerian. Here is a demo video: https://twitter.com/k
147.
by kkm 7y ago
Websites need to really up their game, specially given the amount of third-parties they are using. I've tried highlighting similar issues in the past, where even if there is no active breach, but they are leaking sensitive data to mult
148.
Clean thy URLs: How websites leak sensitive data to FB, Google and more(dev.to)
5 points by kkm 7y ago|0 comments
149.
9461 out of 10000 sites have Google Fonts(whotracks.me)
4 points by kkm 8y ago|0 comments
150.
Indane Leaked Aadhaar Numbers: 6,700,000 Aadhaar Numbers(medium.com)
2 points by kkm 8y ago|0 comments

More ›