Top all-time · #6315
CENSUS
Company blog · census-labs.com/newssecurity
CENSUS is the company blog at census-labs.com, writing about security. Since 2010, 13 different Hacker News readers have linked it 21 times, most often “Remote exploitation of a man-in-the-disk vulnerability in WhatsApp”. No feed was found, so read it on the site itself.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
Linked as the site of CENSUS, a security firm. Comments mention its members as possible white-hat hires and discuss a Windows AppContainer sandbox issue, without judging any writing.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
CENSUS delivers cybersecurity engineering, vulnerability research, and Tiger Team operations — security proven in practice, not on paper.
Most-linked posts?
- Remote exploitation of a man-in-the-disk vulnerability in WhatsApp4 people · 4 mentions · first linked 2021-04-14
What Hacker News says?
No, the AppContainer sandbox this advisory refers to is around fontdrvhost.exe. In Windows 10, this is a sandboxed user mode process running the ATMFD code, it's created by winlogon.exe. Before then, this ATMFD code was only in the kernel, making it a useful vector for privilege escalation. https://bugs.chromium.org/p/project-zero/issues/detail?id=13... (description of an old ATMFD bug) explains it: " Windows 10 has…
Comment linking /media/windows_10_rs2_rs3_exploitation_primitives.pdf
on “Windows code-execution zeroday is under active exploit, Microsoft warns”Submitted Remote exploitation of a man-in-the-disk vulnerability in WhatsApp as a story · 12 points
HN discussionI would hire these guys[1]. I used be in the same "crew" with one of them back in 2003. I trust his skills. Some of them are Phrack authors (is this a thing these days? Can't tell). Note that I have no affiliation with them. [1] http://census-labs.com/
Comment linking /
on “Ask HN: Where can I find a white hat hacker”Submitted FreeBSD kernel exploitation mitigations as a story · 5 points
HN discussionSubmitted iOS kernel exploitation archaeology as a story · 3 points
HN discussionSubmitted On canary randomisation for hardened Linux applications as a story · 3 points
HN discussionSubmitted Remote exploitation of a MitD vulnerability in WhatsApp (CVE-2021-24027) as a story · 2 points
HN discussionSubmitted Remote exploitation of man-in-the-disk vulnerability in WhatsApp -CVE-2021-24027 as a story · 2 points
HN discussionSubmitted Remote exploitation of a man-in-the-disk vulnerability in WhatsApp as a story · 2 points
HN discussionSubmitted An introduction to the LightBulb Framework: Evade WAFs using automata learning as a story · 2 points
HN discussionSubmitted Shadow v2 – jemalloc heap exploitation framework as a story · 2 points
HN discussionSubmitted OR’LYEH? The Shadow Over Firefox (INFILTRATE 2015) as a story · 2 points
HN discussionSubmitted Keys for unattended decryption of LUKS volumes are exposed during race condition as a story · 1 points
HN discussionSubmitted Remote exploitation of a man-in-the-disk vulnerability in WhatsApp as a story · 1 points
HN discussionSubmitted Reverse engineering the Apple iOS sandbox kernel extension as a story · 1 points
HN discussionSubmitted Examining the value of SafetyNet Attestation as a story · 1 points
HN discussionSubmitted Choronzon: an approach at knowledge-based evolutionary fuzzing as a story · 1 points
HN discussionSubmitted Fuzzing Objects D’ART – Hack in the Box 2015 Amsterdam as a story · 1 points
HN discussionSubmitted Building a fully metamorphic PE packer using METASM as a story · 1 points
HN discussionSubmitted The Linux kernel memory allocators from an exploitation perspective as a story · 1 points
HN discussionSubmitted 3 new context-keyed payload encoders for Metasploit as a story · 1 points
HN discussion
