Top all-time · #3307
armis.com
Company blog · armis.com/researchsecurity
armis.com is the company blog at armis.com, writing about security. Since 2017, 23 different Hacker News readers have linked it 27 times, most often “Nat Slipstreaming v2.0”. No feed was found, so read it on the site itself.
Too few sampled comments (10) to say how often HN recommends it.?
Why HN links it
HN readers link Armis security research pages, mainly the NAT Slipstreaming write-ups plus BlueBorne and Urgent11, as sources on router, NAT and device vulnerabilities.
Summarised by Claude from a sample of 10 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Nat Slipstreaming v2.04 people · 4 mentions · first linked 2021-01-26
- Urgent/11 – Zero Day Vulnerabilities Impacting VxWorks3 people · 3 mentions · first linked 2019-07-29
- Blueborne – A new attack vector endangering major operating systems3 people · 3 mentions · first linked 2017-09-12
- /research/nat-slipstreaming-v2-0/3 people · 3 mentions · first linked 2023-12-22
- /research/nat-slipstreaming-v20/3 people · 3 mentions · first linked 2021-07-24
- Three critical 0-days allow RCE and even physical ignition in APC UPS2 people · 2 mentions · first linked 2022-03-08
- BleedingBit: two critical vulnerabilities in Bluetooth Low Energy (BLE) chips2 people · 2 mentions · first linked 2018-11-06
What Hacker News says?
I've dealt with this before. It's a pain. Look at this security research about bypassing NATs: https://www.armis.com/research/nat-slipstreaming-v20/ Look at the section "Creating NAT pinholes to any internal IP using the H.323 ALG" for example. This is using a bug ("feature") that your CGNAT may have implemented (depending on the brand of CGNAT used). Fairly likely that one of those NAT slipstreaming vectors will al…
Comment linking /research/nat-slipstreaming-v20/
on “Self hosting is important”Submitted Zero-days in Cisco Discovery Protocol as a story · 364 points
HN discussionDid you know a website can scan your lan through a browser now? https://developer.chrome.com/blog/local-network-access Did you know that a lot of current home router NAT implementations are currently broken, in particular for UDP traffic handling, and you can therefore spoof your way into the network? https://www.armis.com/research/nat-slipstreaming-v2-0/ A lot of router vulnerabilities floating around out there. Ev…
Comment linking /research/nat-slipstreaming-v2-0/
on “Gaming on Linux has never been more approachable”Submitted Blueborne – A new attack vector endangering major operating systems as a story · 131 points
HN discussionYou can't easily connect to devices behind NAT but that's more of a restriction than a security measure. Once you can trick a device into making an outgoing connection, you can bypass a lot of security in most NAT implementations [0], allowing an attacker access to any port of the victim computer. A variant was also discovered and later hot-patched [1] that could even expose other devices in the internal network. NA…
Comment linking /research/nat-slipstreaming-v20/
on “IPv4 pricing”Submitted Urgent/11 – Zero Day Vulnerabilities Impacting VxWorks as a story · 125 points
HN discussionWell, here's a recent one, for example: https://www.armis.com/blueborne/#/devices
Comment linking /blueborne/
on “Privacy”Submitted EtherOops – packet-in-packet attacks on Ethernet cables to bypass firewalls as a story · 39 points
HN discussionDo Apple keep security updates over the old versions? That could be an easy way to be forced to update. Theses 2 relatively recents vulnerabilities are pretty good reason to have to update. https://www.krackattacks.com/ https://www.armis.com/blueborne/
Comment linking /blueborne/
on “Apple’s repair kill switch hasn’t been activated yet”Submitted Three critical 0-days allow RCE and even physical ignition in APC UPS as a story · 31 points
HN discussion> But I'm still struggling to come up with a way to accidentally expose that on the internet. See, e.g., https://www.armis.com/research/nat-slipstreaming-v20/ and https://samy.pl/slipstream/
Comment linking /research/nat-slipstreaming-v20/
on “Over 20k servers have their iLO interfaces exposed to the internet”Submitted Nat Slipstreaming v2.0 as a story · 6 points
HN discussionFor me it's both about the privacy and vulnerabilities in the Bluetooth stack such as https://www.armis.com/blueborne/ According to the article, you need Sep 9 2017 security patch level, but my 5 year old phone is on Sep 1 2017 level. No way I'm going to have Bluetooth turned on in untrusted areas. While I'm unlikely to get hacked on the street or in a store, it gets more likely in places like a bus or a train (whil…
Comment linking /blueborne/
on “Me on Covid-19 contact tracing apps”Submitted RCE Vulnerabilities in the TCP/IP Stack of the VxWorks Realtime OS as a story · 5 points
HN discussionYou don't need to be a firewall expert to use a firewall. Stateful firewalls have been around for longer than I can remember. The default for any consumer firewall is "disable by default", as they should be. Now with NAT we need to be disable UPnP, and deal with "NAT types" on gaming consoles. Or Nintendo Switches breaking your LAN because Nintendo tells you to put your switch into the DMZ: https://en-americas-suppo…
Comment linking /research/nat-slipstreaming-v2-0/
on “Most 16-year-olds don't have servers in their rooms”Submitted BlueBorne as a story · 4 points
HN discussionOverview is here: https://armis.com/urgent11/ And a detailed research paper: https://go.armis.com/hubfs/White-papers/Urgent11%20Technical...
Comment linking /urgent11/
on “RCE Vulnerabilities Found in VxWorks”Submitted Nat Slipstreaming v2.0: New Variant Can Expose All Internal Network Devices as a story · 4 points
HN discussionhttps://www.armis.com/research/nat-slipstreaming-v2-0/
Comment linking /research/nat-slipstreaming-v2-0/
on “Nat Slipstreaming v2.0 allows an attacker to remotely access any TCP/UDP service”Submitted BleedingBit: two critical vulnerabilities in Bluetooth Low Energy (BLE) chips as a story · 4 points
HN discussionSubmitted Analysis of Critical Vulnerabilities in the Windows TCP/IP Stack as a story · 3 points
HN discussionSubmitted Nat Slipstreaming v2.0: Exposing All Internal Network Devices to the Internet as a story · 3 points
HN discussionSubmitted Nat Slipstreaming v2: New Variant Can Expose All LAN Devices to the Internet as a story · 3 points
HN discussionSubmitted APC Ups – Critical-Vulnerability as a story · 2 points
HN discussionSubmitted Shadow IoT as a story · 2 points
HN discussionSubmitted Urgent/11: 11 zero day vulnerabilities in VxWorks as a story · 1 points
HN discussionSubmitted BleedingBit: Exposes Enterprise Access Points and Unmanaged Devices 2 Undetectab as a story · 1 points
HN discussion
