Top all-time · #8403
Certitude Blog
Company blog · certitude.consulting/blog/ensecuritybusiness
Certitude Blog is the company blog at certitude.consulting, writing about security and business. Since 2021, 9 different Hacker News readers have linked it 10 times, most often “The Invisible JavaScript Backdoor”. It is still writing: the last post was on 2026-10-22, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link Certitude's security blog posts on Unicode homoglyphs and visual spoofing, an invisible JavaScript backdoor, and a CSS bypass of Microsoft 365 anti-phishing. Commenters cite them as sources.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
In a highly connected business environment, cyber-risks are increasing and could disrupt business processes.
Most-linked posts?
- The Invisible JavaScript Backdoor3 people · 4 mentions · first linked 2021-11-09
- Exploring Anti-Phishing Measures in Microsoft 3652 people · 2 mentions · first linked 2024-08-07
- Cloudflare DDoS protections bypassed using Cloudflare2 people · 2 mentions · first linked 2023-10-01
What Hacker News says?
There are good security reasons, among others to filter some unicode; Homoglyph : https://en.m.wikipedia.org/wiki/Homoglyph UniCode 'Confusables' Visual-Spoofing : https://unicode.org/reports/tr36/#visual_spoofing The Invisible JavaScript Backdoor : https://certitude.consulting/blog/en/invisible-backdoor/ >There are many other characters that look similar to the ones used in code which may be used for such proposes,…
Comment linking /blog/en/invisible-backdoor/
on “Ask HN: Why can’t I use emojis on HN?”Submitted The Invisible JavaScript Backdoor as a story · 573 points
HN discussionHomoglyph: https://en.wikipedia.org/wiki/Homoglyph UniCode 'Confusables' Visual-Spoofing: https://unicode.org/reports/tr36/#visual_spoofing The Invisible JavaScript Backdoor: https://certitude.consulting/blog/en/invisible-backdoor/ <quote> There are many other characters that look similar to the ones used in code which may be used for such proposes, (e.g. “／”, “−”, “＋”, “⩵”, “”, “⫽”, “꓿”, “∗”). Unicode calls these c…
Comment linking /blog/en/invisible-backdoor/
on “Dear devs: Plus signs are valid”Submitted Exploring Anti-Phishing Measures in Microsoft 365 as a story · 3 points
HN discussionActual article from Certitude: https://certitude.consulting/blog/en/o365-anti-phishing-meas...
Comment linking /blog/en/o365-anti-phishing-measures/
on “Microsoft 365 anti-phishing feature can be bypassed with CSS”Submitted The Invisible JavaScript Backdoor as a story · 2 points
HN discussionSubmitted EU CRA Guidelines for "Important" and "Critical" Products with Digital Elements as a story · 1 points
HN discussionSubmitted Using Cloudflare to Bypass Cloudflare as a story · 1 points
HN discussionSubmitted Cloudflare DDoS protections bypassed using Cloudflare as a story · 1 points
HN discussionSubmitted Ransomware Actor May Have Leaked Their Previous Victims as a story · 1 points
HN discussion
