Top all-time · #6051
Arne Swinnen
Personal blog · arneswinnen.netsecurity
Arne Swinnen's personal blog at arneswinnen.net covers security. Since 2016, 13 different Hacker News readers have linked it 14 times, most often “How I Could Steal Money from Instagram, Google and Microsoft”. The last post was in 2017, but the archive is still widely read.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link Arne Swinnen's posts on security and phone-number fraud, such as a 2016 piece on how he could make money from semi-premium numbers used in automated verification calls.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- How I Could Steal Money from Instagram, Google and Microsoft4 people · 4 mentions · first linked 2016-07-17
- Authentication Bypass on Uber’s Single Sign-On via Subdomain Takeover3 people · 3 mentions · first linked 2017-07-12
- InstaBrute: Two Ways to Brute-Force Instagram Account Credentials3 people · 3 mentions · first linked 2016-05-19
- The Tales of a Bug Bounty Hunter: 10 Interesting Vulnerabilities in Instagram2 people · 2 mentions · first linked 2016-02-29
What Hacker News says?
There was some story here before about a person that figured out they could muse these kinds of semi-premium numbers for automated verification calls from online svcs (like Microsoft and Twitter). (If) They automated the process and could make some semi-reasonable amount of money per hour. edit: here it is: https://www.arneswinnen.net/2016/07/how-i-could-steal-money-...
Comment linking /2016/07/how-i-could-steal-money-from-instagram-google-and-microsoft/
on “Man makes money from cold calls with his own higher-rate phone number (2013)”Submitted How I Could Steal Money from Instagram, Google and Microsoft as a story · 384 points
HN discussionAside from Filedescriptor's work, here are some of my favourite blogs in the web application security space (not an exhaustive list): - https://blog.orange.tw/ - https://ngailong.wordpress.com/ - https://whitton.io/ - https://sakurity.com/blog - https://homakov.blogspot.com/ - https://buer.haus/ - https://philippeharewood.com/ - https://portswigger.net/research - https://gerbenjavado.com/ - https://medium.com/@intid…
Comment linking /
on “Google YOLO clickjacking (2018)”Submitted Authentication Bypass on Uber’s Single Sign-On via Subdomain Takeover as a story · 11 points
HN discussionThis is very interesting read. Reminds me of this article. https://www.arneswinnen.net/2016/07/how-i-could-steal-money-...
Comment linking /2016/07/how-i-could-steal-money-from-instagram-google-and-microsoft/
on “Chicken story: The time Microsoft banned my entire country”Submitted How I Could Steal Money from Instagram, Google and Microsoft (2016) as a story · 10 points
HN discussionSubmitted InstaBrute: Two Ways to Brute-Force Instagram Account Credentials as a story · 4 points
HN discussionSubmitted InstaBrute: Two Ways to Brute-Force Instagram Account Credentials as a story · 3 points
HN discussionSubmitted The Tales of a Bug Bounty Hunter: 10 Interesting Vulnerabilities in Instagram as a story · 3 points
HN discussionSubmitted Authentication bypass on Uber’s Single Sign-On via subdomain takeover as a story · 2 points
HN discussionSubmitted Authentication bypass on Uber’s Single Sign-On via subdomain takeover as a story · 2 points
HN discussionSubmitted The Tales of a Bug Bounty Hunter: 10 Interesting Vulnerabilities in Instagram as a story · 2 points
HN discussionSubmitted How I Could Compromise 4% of Locked Instagram Accounts as a story · 1 points
HN discussionSubmitted InstaBrute: Two Ways to Brute-Force Instagram Account Credentials as a story · 1 points
HN discussion
