Top all-time · #4843
Assetnote is now part of Searchlight Cyber
Company blog · blog.assetnote.iosecurityweb
Assetnote is now part of Searchlight Cyber is the company blog at blog.assetnote.io, writing about security and web. Since 2019, 16 different Hacker News readers have linked it 34 times, most often “A Glossary of Blind SSRF Chains”. No feed was found, so read it on the site itself.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
The linked post is a company news announcement, titled that Assetnote is now part of Searchlight Cyber. The comments discuss other web security blogs and bug bounty pricing, not this post.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Assetnote’s Attack Surface Management platform (ASM) is now called Searchlight Exposure.
Most-linked posts?
- A Glossary of Blind SSRF Chains3 people · 3 mentions · first linked 2021-01-14
- Hacking on Bug Bounties for Four Years2 people · 2 mentions · first linked 2020-09-17
- Cloudflare Pages, part 2: The two privescs2 people · 2 mentions · first linked 2022-05-06
- Exploiting Static Site Generators: When Static Is Not Static2 people · 2 mentions · first linked 2022-11-01
- Gaining access to Uber's user data through AMPScript evaluation2 people · 2 mentions · first linked 2019-01-14
- Eliminating Dangling Elastic IP Takeovers with Ghostbuster2 people · 2 mentions · first linked 2022-02-14
- Discovering a zero day and getting code execution on Mozilla's AWS Network2 people · 2 mentions · first linked 2019-03-19
What Hacker News says?
Aside from Filedescriptor's work, here are some of my favourite blogs in the web application security space (not an exhaustive list): - https://blog.orange.tw/ - https://ngailong.wordpress.com/ - https://whitton.io/ - https://sakurity.com/blog - https://homakov.blogspot.com/ - https://buer.haus/ - https://philippeharewood.com/ - https://portswigger.net/research - https://gerbenjavado.com/ - https://medium.com/@intid…
Comment linking /
on “Google YOLO clickjacking (2018)”Submitted Taking over Azure DevOps accounts with one click as a story · 118 points
HN discussionhttps://docs.hackerone.com/programs/bounty-tables.html The large amounts you read about by big companies can hardly be matched my small companies. And rarely reflects the damage it could cause. Our maximum amount is US$1000 currently. We ( https://opencagedata.com/security-bounty ) get regular reports where high or critical severity is claimed but maybe that's only to get our attention. No report so far justified th…
Comment linking /2020/09/15/hacking-on-bug-bounties-for-four-years/
on “Ask HN: How to price a responsibly-disclosed bug bounty?”Submitted Hacking on Bug Bounties for Four Years as a story · 89 points
HN discussionSubmitted Expanding the Attack Surface: React Native Android Applications as a story · 37 points
HN discussionSubmitted Cloudflare Pages, part 1: The fellowship of the secret as a story · 28 points
HN discussionSubmitted Exploiting Static Site Generators: When Static Is Not Static as a story · 21 points
HN discussionSubmitted Taking over Uber accounts through voicemail as a story · 15 points
HN discussionSubmitted Zoom Zero Day Followup: Getting the RCE as a story · 5 points
HN discussionSubmitted Getting access to Zendesk’s gcloud and artifactory from a GitHub dotfiles repo as a story · 4 points
HN discussionSubmitted Discovering a zero day and getting code execution on Mozilla's AWS Network as a story · 4 points
HN discussionSubmitted Hacking a Bank by Finding a 0day in DotCMS as a story · 3 points
HN discussionSubmitted Discovering Full Read SSRF in Jamf (CVE-2021-39303 and CVE-2021-40809) as a story · 3 points
HN discussionSubmitted Contextual Content Discovery: You've forgotten about the API endpoints as a story · 3 points
HN discussionSubmitted H2C Smuggling in the Wild as a story · 3 points
HN discussionSubmitted Encrypted Doesn't Mean Authenticated as a story · 2 points
HN discussionSubmitted Exploiting Static Site Generators: When Static Is Not Static as a story · 2 points
HN discussionSubmitted Eliminating Dangling Elastic IP Takeovers with Ghostbuster as a story · 2 points
HN discussionSubmitted Turning Bad SSRF to Good SSRF: Websphere Portal as a story · 2 points
HN discussionSubmitted Exploiting GraphQL as a story · 2 points
HN discussionSubmitted A Glossary of Blind SSRF Chains as a story · 2 points
HN discussionSubmitted A Glossary of Blind SSRF Chains as a story · 2 points
HN discussionSubmitted Gaining access to Uber's user data through AMPScript evaluation as a story · 2 points
HN discussionSubmitted Gaining access to Uber's user data through AMPScript evaluation as a story · 2 points
HN discussionSubmitted Leaking File Contents with a Blind File Oracle in Flarum as a story · 1 points
HN discussionSubmitted Exploiting an Order of Operations Bug to Achieve RCE in Oracle Opera as a story · 1 points
HN discussionSubmitted Abusing functionality to exploit a super SSRF in Jira Server (CVE-2022-26135) as a story · 1 points
HN discussionSubmitted Cloudflare Pages, part 2: The two privescs as a story · 1 points
HN discussionSubmitted Cloudflare Pages, part 2: The two privescs as a story · 1 points
HN discussionSubmitted Eliminating Dangling Elastic IP Takeovers with Ghostbuster as a story · 1 points
HN discussion
