GitHub will require 2FA for all developers who commit by September 2, 2026.
End of a transition started in 2022 - the real passive remains the automation workflows still relying on non-2FA tokens.
Jul 20, 2026 at 16:39 17 12
TP-Link Kasa cameras leaked home GPS for six years via unauthenticated UDP
A vulnerability researcher documents six years of unauthenticated UDP replies from TP-Link Kasa EC71 cameras that returned the device's GPS coordinates on request - a textbook IoT trust-boundary failure.
Jul 18, 2026 at 11:11 34 8
Age verification EU: the "wallet" requires Android or iOS - a political rail disguised as a spec
The EU wallet age verification spec de facto requires an official mobile OS. Cryptographic security versus interoperability - but the European identity rail is being set in concrete with a foreign OS duopoly as a dependency.
Jul 14, 2026 at 15:44 31 8
Modern authentication: passkeys, OIDC, sessions - the real short list
A popular HN thread reignites the question: how should we authenticate an app in 2026? The answer is no longer "JWT + refresh token". A clear overview.
Jul 11, 2026 at 17:19 29 6