Top all-time · #11495
Blackwing Intelligence
Company blog · blackwinghq.com/blogsecurity
Blackwing Intelligence is the company blog at blackwinghq.com, writing about security. Since 2023, 7 different Hacker News readers have linked it 7 times, most often “A Touch of PWN – Part I”. It is still writing: the last post was on 2026-05-29, and you can follow it by feed.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
Security research blog with technical writeups on exploits and bypasses, including a Windows Hello fingerprint bypass and a multi-part series, plus heap internals. Commenters link it as the fuller account.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Blackwing Intelligence is a boutique cyber security research and engineering firm based in New York. Since 2005 we’ve delivered cutting edge software and…
Most-linked posts?
- A Touch of PWN – Part I5 people · 5 mentions · first linked 2023-11-22
What Hacker News says?
Needless to say, this is an ad for Tailscale. I hate these short-lived sessions myself, but there are oftenreasons why they're there. The alternatives proposed are "just always check right before a sensitive action" and "use continuous verification". Both of which are much harder to pull off correctly than short-lived authentication sessions (unless you buy their product, of course, supposedly), especially on third-…
Comment linking /blog/posts/a-touch-of-pwn-part-i/
on “Frequent reauth doesn't make you more secure”Submitted Finding Vulnerability Variants at Scale as a story · 3 points
HN discussionIf you're interested in this in more detail, check this out: https://blackwinghq.com/blog/posts/a-touch-of-pwn-part-i/
Comment linking /blog/posts/a-touch-of-pwn-part-i/
on “FBI couldn't get into WaPo reporter's iPhone because Lockdown Mode enabled”Submitted A Touch of Pwn – an investigation into fingerprint sensors for Windows Hello as a story · 1 points
HN discussionIf you are using a Mac, heapster is a different but also interesting tool for learning about what goes on inside the heap https://blackwinghq.com/blog/posts/playing-with-libmalloc/
Comment linking /blog/posts/playing-with-libmalloc/
on “Show HN: Heap Explorer”Submitted A Touch of PWN – Part I as a story · 1 points
HN discussionFull writeup is a much better read: https://blackwinghq.com/blog/posts/a-touch-of-pwn-part-i/ "Microsoft did a good job designing SDCP to provide a secure channel between the host and biometric devices, but unfortunately device manufacturers seem to misunderstand some of the objectives. Additionally, SDCP only covers a very narrow scope of a typical device’s operation, while most devices have a sizable attack surfac…
Comment linking /blog/posts/a-touch-of-pwn-part-i/
on “Microsoft's Windows Hello fingerprint authentication has been bypassed”