Top all-time · #810
Check Point Blog
Company blog · blog.checkpoint.comsecurity
Check Point Blog is the company blog at blog.checkpoint.com, writing about security. Since 2015, 80 different Hacker News readers have linked it 96 times, most often “Over 400 vulnerabilities on Qualcomm’s Snapdragon chip”. It is still writing: the last post was on 2026-10-29, and you can follow it by feed.
Explore Check Point Software Blog - Research, news, articles, trends, attacks and updates on the cyber security world
Most-linked posts?
- Over 400 vulnerabilities on Qualcomm’s Snapdragon chip7 people · 7 mentions · first linked 2020-08-06
- Malicious Subtitles Threaten Kodi, VLC and Popcorn Time Users4 people · 4 mentions · first linked 2017-05-23
- Faxploit: Breaking the Unthinkable4 people · 4 mentions · first linked 2018-08-13
- QuadRooter: New Android Vulnerabilities in Over 900M Devices3 people · 3 mentions · first linked 2016-08-07
- EBay Platform Exposed to Severe Vulnerability3 people · 3 mentions · first linked 2016-02-02
- Magento vulnerability analysis3 people · 3 mentions · first linked 2015-04-20
- Vulnerability That Allowed Hackers to Take Over WhatsApp and Telegram Accounts2 people · 3 mentions · first linked 2017-03-15
- FACEBOOK MaliciousChat2 people · 2 mentions · first linked 2016-06-10
- Hacked from a lightbulb2 people · 2 mentions · first linked 2020-02-05
- Malicious VSCode extensions with more than 45K downloads2 people · 2 mentions · first linked 2023-05-16
What Hacker News says?
For almost every user - yes. If apps had to run in a strict sandbox it would be better for most users. Where it would make you jump through an incredible number of hoops or even install “developer editions” of operating systems. You really can’t trust developers to do the right thing - even major developers like Zoom (the secret web server) , Facebook (the VPN that trashed usage actoss apps on iOS) and Google (convi…
Comment linking /research/fortnite-vulnerability-where-only-the-secure-survive/
on “Android's sideloading limits are its most anti-consumer move”Submitted Malicious Subtitles Threaten Kodi, VLC and Popcorn Time Users as a story · 467 points
HN discussionhttp://blog.checkpoint.com/2016/02/02/ebay-platform-exposed-... http://thedailywtf.com/articles/bidding-on-security
Comment linking /2016/02/02/ebay-platform-exposed-to-severe-vulnerability/
on “A Javascript journey with only six characters”Submitted More Than 1M Google Accounts Breached by Gooligan as a story · 450 points
HN discussionThis is the sourced post http://blog.checkpoint.com/2017/05/23/hacked-in-translation/ The ingenuity that goes into RCE exploits never ceases to amaze (and terrify) me. Can't wait for more details to be released.
Comment linking /2017/05/23/hacked-in-translation/
on “Malicious Subtitles Threaten Kodi, VLC and Popcorn Time Users”Submitted Over 400 vulnerabilities on Qualcomm’s Snapdragon chip as a story · 381 points
HN discussionThanks for making this comment. This post is a wonderful example of the rampant marketing that has given the security industry a bad name. - The title is technically accurate, which is the best kind of accurate for clickbait. This is not a novel vulnerability representative of an application security flaw within Google - the malware campaign specifically targets older devices using previously known vulnerabilities.[…
Comment linking /wp-content/uploads/2016/11/info_2_REVISED-11.23.16-Copy.jpg
on “More Than 1M Google Accounts Breached by Gooligan”Submitted Vulnerabilities in chips in 37% of smartphones as a story · 172 points
HN discussionI was at a DefCon talk where these researchers demonstrated pwning a network by sending a fax: https://blog.checkpoint.com/2018/08/12/faxploit-hp-printer-f...
Comment linking /2018/08/12/faxploit-hp-printer-fax-exploit/
on “Technologies I thought my son would never use”Submitted Viking Horde: A New Type of Android Malware on Google Play as a story · 103 points
HN discussionI disagree. It may seem good on paper, but it gives you too much of a false sense of security. Security measures like this often seem to work, but they are papering over a deeper problem. Usually this is being done because user input is not being handled carefully, and if so, the assumption that blocking some keywords "defangs" potential exploits is usually easy to prove false. Consider the case of eBay and JSFuck[1…
Comment linking /research/ebay-platform-exposed-to-severe-vulnerability/
on “Password may not contain: select, insert, update, delete, drop”Submitted Preinstalled Malware Targeting Mobile Users as a story · 93 points
HN discussionBlog spam. Typical ArsTechnica these days. Here's the actual report: https://blog.checkpoint.com/2020/08/06/achilles-small-chip-b...
Comment linking /2020/08/06/achilles-small-chip-big-peril/
on “Snapdragon chip flaws put 1B Android phones at risk of data theft”Submitted Vulnerability That Allowed Hackers to Take Over WhatsApp and Telegram Accounts as a story · 92 points
HN discussionMultiple Kernel Vulnerabilities Affecting All Qualcomm Devices (2020) https://blog.zimperium.com/multiple-kernel-vulnerabilities-a... The Road to Qualcomm TrustZone Apps Fuzzing (2019) https://research.checkpoint.com/2019/the-road-to-qualcomm-tr... QualPwn - Exploiting Qualcomm WLAN and Modem Over The Air (2019) https://blade.tencent.com/en/advisories/qualpwn/ QuadRooter: New Android Vulnerabilities in Over 900 Mill…
Comment linking /2016/08/07/quadrooter/
on “Snapdragon chip flaws put 1B Android phones at risk of data theft”Submitted Hacked from a lightbulb as a story · 90 points
HN discussionThere is no specific information available about the nature of the vulnerabilities or possible mitigation. Arstechnica.com is sensationalizing the news, when it comes to security I would rely on actual sec researchers. https://blog.checkpoint.com/2020/08/06/achilles-small-chip-b...
Comment linking /2020/08/06/achilles-small-chip-big-peril/
on “Snapdragon chip flaws put 1B Android phones at risk of data theft”Submitted The Judy Malware: Possibly the largest malware campaign found on Google Play as a story · 89 points
HN discussionCheckpoint's release for these vulnerabilities is here https://blog.checkpoint.com/2020/08/06/achilles-small-chip-b... not clear from the writeup how many devices are affected. They fuzz-tested 'a DSP chip' (sounds like just one) and then say that Qualcomm products are used in 40% of devices. press release focuses on exfiltrating media + GPS, not clear if this is a rootkit that can access the keyboard or take over y…
Comment linking /2020/08/06/achilles-small-chip-big-peril/
on “Snapdragon chip flaws put 1B Android phones at risk of data theft”Submitted Fixing critical vulnerabilities in Apache's remote desktop as a story · 75 points
HN discussionIt had massive security problems, so they mostly killed it. eg https://blog.checkpoint.com/2015/05/12/the-microsoft-help-fi...
Comment linking /2015/05/12/the-microsoft-help-file-chm-may-enslave-you/
on “Microsoft Is Killing ePub Support in Edge Classic”Submitted Fireball – Chinese malware that has infected over 250M computers worldwide as a story · 23 points
HN discussionF-Droid is too much of a liability. http://blog.checkpoint.com/2016/11/30/1-million-google-accou...
Comment linking /2016/11/30/1-million-google-accounts-breached-gooligan/
on “Jolla’s Sailfish certified as Russian government’s first ‘Android alternative’”Submitted Magento vulnerability analysis as a story · 22 points
HN discussionThis is in a certain sense a typical checkpoint finding. It's probably a good finding and it's good that they point out the problematic andorid ecosystem. But their announcement is then filled with some nonsense and marketing bullshit that's more likely to confuse users than help. In their blog post they say [1]: * "Use known, trusted Wi-Fi networks or while traveling use only those that you can verify are provided…
Comment linking /2016/08/07/quadrooter/
on “Quadrooter: New Vulnerabilities Affecting Over 900M Android Devices [pdf]”Submitted EBay Platform Exposed to Severe Vulnerability as a story · 21 points
HN discussionRecently I've spent an entire day playing with AI Dungeon, an AI-based creative writing service for playing role-playing, Dungeon-like text games. You can pay to unlock the "Dungeon" model - an advanced machine learning model supposed based on GPT-3. It's not GPT-3 itself, and it's not perfect because its output is seriously biased for role-playing games, but as close as we can get for an outsider. I was quite amaze…
Comment linking /2020/08/06/achilles-small-chip-big-peril/
on “Sci-fi story coauthored by GPT-3, including in-character human/AI chats”Submitted How Business and Home Networks Can Be Hacked from a Lightbulb as a story · 10 points
HN discussionAt a higher level than the other guy, and not precisely the same thing: http://blog.checkpoint.com/2016/02/02/ebay-platform-exposed-...
Comment linking /2016/02/02/ebay-platform-exposed-to-severe-vulnerability/
on “Dramatically Reducing Software Vulnerabilities [pdf]”Submitted QuadRooter: New Android Vulnerabilities in Over 900M Devices as a story · 10 points
HN discussion
