Top all-time · #10884
boosterok.com
Personal blog · boosterok.com/blogsecuritysystems
boosterok.com is a personal blog at boosterok.com about security and systems. Since 2017, 7 different Hacker News readers have linked it 11 times, most often “Crashing Phones with Wi-Fi: Exploiting Nitayart's Broadpwn Bug (CVE-2017-9417)”. No feed was found, so read it on the site itself.
Too few sampled comments (7) to say how often HN recommends it.?
Why HN links it
HN readers link boosterok.com's two-part writeup on the Broadpwn bug (CVE-2017-9417) in Broadcom Wi-Fi chips, which can remotely compromise Android and iOS devices. Part 1 covers the bug and affected devices; part 2 gives further analysis.
Summarised by Claude from a sample of 7 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Crashing Phones with Wi-Fi: Exploiting Nitayart's Broadpwn Bug (CVE-2017-9417)5 people · 6 mentions · first linked 2017-07-14
- Crashing phones with Wi-Fi: Exploiting nitayart's Broadpwn bug4 people · 4 mentions · first linked 2017-07-09
What Hacker News says?
http://boosterok.com/blog/broadpwn/ shows a simple check using hostapd to see if a device is vulnerable
Comment linking /blog/broadpwn/
on “Remotely Compromising Android and iOS via a bug in Broadcom's WI-FI Chipsets”Submitted A cursory analysis of nitayart's Broadpwn bug (CVE-2017-9417) as a story · 2 points
HN discussionMore info is available here: http://boosterok.com/blog/broadpwn/ http://boosterok.com/blog/broadpwn2/
Comment linking /blog/broadpwn2/
on “Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code”Submitted Crashing Phones with Wi-Fi: Exploiting Nitayart's Broadpwn Bug (CVE-2017-9417) as a story · 2 points
HN discussionInterestingly, the changelogs are silent about a fairly major change to the filesystem when going from 10.3.x to 10.3.3. It seems like APFS was originally intended to use a different unicode normalization setup than HFS, but it turned out to be very problematic. After iOS 10.3.0 silently converted all iOS devices from HFS to APFS (!) (and not only was this not specified in the user-visible changelogs, earlier iOS 10…
Comment linking /blog/broadpwn2/
on “The security content of iOS 10.3.3”Submitted Crashing phones with Wi-Fi: Exploiting nitayart's Broadpwn bug as a story · 2 points
HN discussionMaybe not this time, but they have a history of fatal firmware bugs that could compromise the host system - such as http://boosterok.com/blog/broadpwn2/
Comment linking /blog/broadpwn2/
on “Apple: Heap Overflow in AppleBCMWLANCore Driver”More details as well as how to trigger the bug and what devices have been tested against it: http://boosterok.com/blog/broadpwn/ We will know a lot more after @nitayart presents at BlackHat.
Comment linking /blog/broadpwn/
on “Broadpwn Bug Affects Millions of Android and iOS Devices”Part 2: http://boosterok.com/blog/broadpwn2/
Comment linking /blog/broadpwn2/
on “A cursory analysis of nitayart's Broadpwn bug (CVE-2017-9417)”the link in the main title of this thread is part 1 of a two-part writeup about this topic.... part 2 could be found here, http://boosterok.com/blog/broadpwn2/
Comment linking /blog/broadpwn2/
on “Crashing phones with Wi-Fi: Exploiting nitayart's Broadpwn bug”
