Top all-time · #22518
Alphabot Security
Company blog · alphabot.com/security/blogsecurityprogramming
Alphabot Security is the company blog at alphabot.com, writing about security and programming. Since 2017, 3 different Hacker News readers have linked it 6 times, most often “How to configure Json.NET to create a vulnerable web API”. The last post was in 2020, but the archive is still widely read.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link this post on .NET serialization security, as the commenter's URL slug suggests a guide on configuring it. One commenter cites it while asking whether C# has the same risks as Java serialization.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Alphabot Security Switzerland supports developers by continuously looking at open-source technologies in order to identify new vulnerabilities.
Most-linked posts?
- How to configure Json.NET to create a vulnerable web API2 people · 2 mentions · first linked 2017-06-14
What Hacker News says?
I was trying to understand if C# has the same issue. From what I can tell, as long as you use the default serialization, it seems to be safe. But I can't really tell. https://www.alphabot.com/security/blog/2017/net/How-to-confi...
Comment linking /security/blog/2017/net/How-to-configure-Json.NET-to-create-a-vulnerable-web-API.html
on “Oracle plans to dump risky Java serialization”Submitted Remote code execution in Elixir-based Paginator as a story · 5 points
HN discussionSubmitted Java builds might break starting January 13th (repos will disable HTTP) as a story · 4 points
HN discussionSubmitted Fastjson: Exceptional Deserialization Vulnerabilities as a story · 2 points
HN discussionSubmitted Apache Tomcat RCE if readonly set to false (CVE-2017-12617) as a story · 2 points
HN discussionSubmitted How to configure Json.NET to create a vulnerable web API as a story · 2 points
HN discussion