Top all-time · #12279
softScheck
Company blog · softscheck.com/en/blog · on HN as softSchecksecurity
softScheck is the company blog at softscheck.com, writing about security. Since 2016, 6 different Hacker News readers have linked it 9 times, most often “Reverse Engineering the TP-Link HS110”. It is still writing: the last post was on 2026-05-17, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link softScheck posts on reverse-engineering device and OS network traffic, such as TP-Link smart plug cloud and DNS/NTP calls and Windows 10 telemetry inspected with mitmproxy. The comments do not judge the writing.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Reverse Engineering the TP-Link HS1102 people · 2 mentions · first linked 2017-12-13
- How we found a tcpdump vulnerability using cloud fuzzing2 people · 2 mentions · first linked 2017-04-19
What Hacker News says?
Slightly tangential, but I've recently been writing a command line tool to talk to some TP-Link Smart Plugs, and discovered that they regularly talk to 'devs.tplinkcloud.com' even if you don't enable a TP-link Cloud account. More details here (not my site): https://www.softscheck.com/en/reverse-engineering-tp-link-hs...
Comment linking /en/reverse-engineering-tp-link-hs110/
on “TP-Link firmware sends six DNS requests and one NTP query every 5 seconds”Submitted Reverse Engineering the TP-Link HS110 as a story · 100 points
HN discussionSecurity is always the excuse, but it's a local device connected to Wifi. Add a setting to the existing menus that is opt in to turn on the new API. Beyond that, there's what, like 4 or 5 parameters that are useful to set, and a few that can be read. It wouldn't be necessary to over engineer the API, even a few simple, fixed TCP packets to query state and set the basic parameters like mode, fan, room and set temp wo…
Comment linking /en/blog/tp-link-reverse-engineering/
on “Nest 1st gen and 2nd gen thermostats no longer supported from Oct 25”Submitted How we found a tcpdump vulnerability using cloud fuzzing as a story · 3 points
HN discussionsomething like this using mitmproxy (from 2017): https://www.softscheck.com/en/blog/windows-10-enterprise-tel...
Comment linking /en/blog/windows-10-enterprise-telemetry-analysis/
on “Windows 11: a spyware machine out of users' control”Submitted Fuzzing tcpdump in the cloud as a story · 2 points
HN discussionSubmitted Reverse Engineering a WiFi SmartPlug: Lax encryption and hidden debug protocols as a story · 2 points
HN discussionSubmitted A Smarter Way to Merge Network Scans – Introducing Scans2any as a story · 1 points
HN discussionSubmitted Practical Tips for OWASP Top 2017 #7: Insufficient Attack Protection as a story · 1 points
HN discussion