Top all-time · #23409
Chaser Systems Blog
Company blog · chasersystems.com/blog · on HN as new23dsecuritysystems
Chaser Systems Blog is the company blog at chasersystems.com, writing about security and systems. Since 2020, 3 different Hacker News readers have linked it 13 times. It is still writing: the last post was on 2026-08-17, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
The comments do not discuss the writing. They concern a trademark dispute over the word 'egress' and the company's DiscrimiNAT firewall product, which one commenter compares to Zscaler.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Chaser Systems are a cybersecurity innovator building defensive components that operate on Cloud and IoT platforms ergonomically and with native integrations.
Most-linked posts?
- /3 people · 4 mentions · first linked 2020-04-16
What Hacker News says?
TLS 1.3 and ESNI (now called Encrypted Client Hello - ECH) are separate standards, although you'll see ECH only enabled in bleeding edge stacks. In fact, ECH is still in IETF draft phase [1]. It can be disabled if an organisation wishes to. I wrote about how to do this in Chrome [2,3], and will write about Firefox when I get a chance. [1] https://datatracker.ietf.org/doc/draft-ietf-tls-esni/ [2] https://chasersystem…
Comment linking /blog/disabling-encrypted-clienthello-in-google-chrome-and-why/
on “Capturing Linux SSL/TLS plaintext without a CA certificate using eBPF”Submitted What data do coding agents send, and where to? as a story · 2 points
HN discussionGCP's built-in firewalling capabilities are quite basic and on par with AWS' Security Groups and NACLs. This new offering is Suricata backed which offers much more sophisticated packet inspection, and is probably built off their recently launched Gateway Load Balancer tech [1]. A key difference is that third-party appliances, and now with Suricata, hostname based (rather than IP addresses) filtering can be applied a…
Comment linking /
on “AWS Network Firewall – New Managed Firewall Service in VPC”Submitted Upgrading Debian Bullseye's Apt from Using HTTP to HTTPS as a story · 2 points
HN discussionI assume OP is running https://chasersystems.com/ , and he's being threatened by https://www.egress.com/ . But yes, obviously "secure egress gateway" is descriptive and can't violate a US trademark. Both companies are located in the UK; who knows what their trademark law says. Maybe there's a bakery over there with exclusive rights to the word "biscuit". But I doubt it.
Comment linking /
on “Ask HN: Cease & Desist on using the word egress. Sign it away for eternity?”Submitted The Curious Incidents with DNS in the Sandbox at Escape-Time as a story · 1 points
HN discussionIf the workload's network interface (ENI in AWS) is in a VPC that you manage, an outbound traffic filtering solution can prevent that. See AWS Network Firewall or the product we develop, DiscrimiNAT ( https://chasersystems.com/ ), for example. Rules can be per Security Group, too, for fine-grained access control. I would also strongly recommend that installation of dependencies is a build-time task, not a run-time t…
Comment linking /
on “SCH: An affordable sandbox for Coding Agents in your AWS account”Submitted An analysis of CRL sizes from various CAs as a story · 1 points
HN discussionSorry for the plug but DiscrimiNAT Firewall actively prevents ECH [1] from flowing through and cannot be bypassed with SNI forging either [2]. Also has a great 'discovery' mode and CLI tooling to figure out that allowlist on an on-going basis. [1] https://chasersystems.com/blog/disabling-encrypted-clienthel... [2] https://chasersystems.com/discriminat/comparison/aws-network...
Comment linking /discriminat/comparison/aws-network-firewall/
on “Encrypted Client Hello – the last puzzle piece to privacy”Submitted Disabling Encrypted ClientHello in Google Chrome, and Why as a story · 1 points
HN discussionDiscrimiNAT Firewall seems like a useful product: https://chasersystems.com/ Reminds me somewhat of Zscaler.
Comment linking /
on “Disabling Encrypted ClientHello in Google Chrome, and Why”Submitted Upgrading Ubuntu Jammy's Apt from Using HTTP to HTTPS as a story · 1 points
HN discussion