May 09, 2019

CSS tracking trick can monitor your mouse without JavaScript

A security researcher has demonstrated a new way to track mouse movements even if users block JavaScript.

Naked Security

February 12, 2019

Brave browser explains Facebook whitelist to concerned users

Brave is playing down fears after the revelation of what looked like a whitelist in its code allowing it to communicate with Facebook.

Naked Security

November 02, 2018

Google’s stealthy sign-in sentry can pick up pilfered passwords

The search giant's secret sauce can see when somebody's using your stolen password.

Naked Security

October 19, 2018

“We know you watch porn” (and here’s fake proof…) [PODCAST]

Here's Episode 6 of the Naked Security podcast... enjoy!

Naked Security

August 21, 2018

Serious Security: How to stop dodgy HTTP headers clogging your website

It's been dubbed ReDos, for Regular Expression Denial of Service - where a few rogue HTTP requests could clog your whole site.

Naked Security

June 25, 2018

Brave browser starts feeding ads to willing guinea pigs

Hands up who wants to sign up to receive advertising as they browse the internet? Probably no-one, and yet that's exactly what the new Brave browser is asking its users to do.

Naked Security

March 13, 2018

Cryptomining isn’t going to make you rich

Is cryptomining-with-consent the simple alternative to web advertising that some publishers think it is? Perhaps not.

Naked Security

February 23, 2018

NPM update changes critical Linux filesystem permissions, breaks everything

A recent update to the Node Package Manager introduced a bug that caused it to interfere with the operating system, by locking the system itself out of numerous mission-critical files

Naked Security

February 12, 2018

Cryptomining script poisons government websites – What to do

Reports surfaced over the the weekend of many government websites that were "infected with malware". Here's what we know, and what to do.

Naked Security