Top all-time · #3680
Sonar Blog
Company blog · blog.sonarsource.comsecurityprogramming
Sonar Blog is the company blog at blog.sonarsource.com, writing about security and programming. Since 2017, 20 different Hacker News readers have linked it 30 times, most often “Securing Developer Tools: Git Integrations”. It is still writing: the last post was on 2026-10-29, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link Sonar's blog for security write-ups on developer tools and software, such as Git, RainLoop and Zabbix. Commenters use these posts as background and sources on vulnerabilities.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Sonar's blogs showcase our solutions and products: SonarQube Cloud, SonarQube Server, and SonarQube for IDE - trusted by over 7 million developers
Most-linked posts?
- Securing Developer Tools: Git Integrations3 people · 3 mentions · first linked 2022-03-16
- Zabbix – A Case Study of Unsafe Session Storage2 people · 2 mentions · first linked 2022-02-18
- Unknown Security Pitfalls for Python (2021)2 people · 2 mentions · first linked 2022-01-31
- Horde Webmail 5.2.22 – Account Takeover via Email2 people · 2 mentions · first linked 2022-02-22
- Code Security Advent Calendar 20202 people · 2 mentions · first linked 2020-11-27
- Yarn, Pip, Composer and co: Vulnerabilities in popular package managers2 people · 2 mentions · first linked 2022-03-09
What Hacker News says?
Related: https://blog.sonarsource.com/securing-developer-tools-git-in... ("Securing Developer Tools: Git Integrations")
Comment linking /securing-developer-tools-git-integrations/
on “Git security vulnerability announced”Submitted Zabbix – A Case Study of Unsafe Session Storage as a story · 43 points
HN discussionRelated: RainLoop (of which SnappyMail is a fork) seems to be no longer developed and has a known stored XSS problem: https://blog.sonarsource.com/rainloop-emails-at-risk-due-to-... SnappyMail is not affected by this and seems to be the successor.
Comment linking /rainloop-emails-at-risk-due-to-code-flaw/
on “SnappyMail – Modern, lightweight and fast web-based email client”Submitted Unknown Security Pitfalls for Python (2021) as a story · 5 points
HN discussionSource/Origin article (linked in the "Patch now" section): "Zabbix - A Case Study of Unsafe Session Storage"[0] [0]: https://blog.sonarsource.com/zabbix-case-study-of-unsafe-ses...
Comment linking /zabbix-case-study-of-unsafe-session-storage
on “Zabbix – A Case Study of Unsafe Session Storage”Submitted Supply Chain Attack on Composer as a story · 4 points
HN discussionSubmitted Disclosing information with a side-channel in Django as a story · 3 points
HN discussionSubmitted Securing Developer Tools: Git Integrations as a story · 3 points
HN discussionSubmitted Securing Developer Tools: Argument Injection in Visual Studio Code as a story · 2 points
HN discussionSubmitted Horde Webmail 5.2.22 – Account Takeover via Email as a story · 2 points
HN discussionSubmitted Yarn, Pip, Composer and co: Vulnerabilities in popular package managers as a story · 2 points
HN discussionSubmitted Horde Webmail 5.2.22 – Account Takeover via Email as a story · 2 points
HN discussionSubmitted Zabbix SAML Authentication Bypass (CVE-2022-23131) and more as a story · 2 points
HN discussionSubmitted Unknown Security Pitfalls for Python as a story · 2 points
HN discussionSubmitted Code security: now there's a tool for developers as a story · 2 points
HN discussionSubmitted Code Security Advent Calendar 2020 as a story · 2 points
HN discussionSubmitted For secure code, maintainability matters as a story · 2 points
HN discussionSubmitted False positives are our enemies, but may still be your friends as a story · 2 points
HN discussionSubmitted Getting timely, accurate feedback on your C++ from the SonarQube ecosystem as a story · 2 points
HN discussionSubmitted Checkmk: Remote Code Execution by Chaining Multiple Bugs (2/3) as a story · 1 points
HN discussionSubmitted Securing Developer Tools: Git Integrations as a story · 1 points
HN discussionSubmitted Package Manager Vulnerabilities (yarn, pip, composer, etc.) as a story · 1 points
HN discussionSubmitted Code Security Advent Calendar 2021 as a story · 1 points
HN discussionSubmitted Code Security Advent Calendar 2020 as a story · 1 points
HN discussionSubmitted SonarCloud finds bugs in high-quality Python projects as a story · 1 points
HN discussionSubmitted RCE in OpenEMR 5.0.2.1 Electronic Medical Records as a story · 1 points
HN discussionSubmitted Lay a strong foundation by writing secure C and C++ utilities as a story · 1 points
HN discussionSubmitted What's worse than coding without tests? Coding with bad tests as a story · 1 points
HN discussionSubmitted Sonarsource, detect C++ buffer overflows in Posix functions as a story · 1 points
HN discussionSubmitted Cognitive Complexity, Because Testability = Understandability as a story · 1 points
HN discussion
