Top all-time · #2378
Christian Haschek
Personal blog · blog.haschek.atsecuritysystems
Christian Haschek's personal blog at blog.haschek.at covers security and systems. Since 2015, 34 different Hacker News readers have linked it 113 times, most often “Defending a website with Zip bombs”. It is still writing: the last post was on 2026-07-23, and you can follow it by feed.
Personal Blog of Christian Haschek
Most-linked posts?
- Defending a website with Zip bombs5 people · 8 mentions · first linked 2017-07-05
- The curious case of the Raspberry Pi in the network closet (2019)4 people · 6 mentions · first linked 2019-11-09
- SSH Based Comment System4 people · 4 mentions · first linked 2023-07-28
- Threat vector: Legacy static HTML sites3 people · 8 mentions · first linked 2019-08-01
- I opened a link some random person sent me and I got raided (2015)3 people · 6 mentions · first linked 2015-11-08
- The Perfect File Server3 people · 6 mentions · first linked 2020-11-03
- How to defend your website with ZIP bombs (2017)3 people · 3 mentions · first linked 2018-05-09
- I heat my home by mining crypto currencies3 people · 3 mentions · first linked 2021-02-23
- The A1 Telekom Austria Hack they came in through the web shells3 people · 3 mentions · first linked 2020-06-08
- Why hackits are the first thing I teach new classes (2014)3 people · 3 mentions · first linked 2023-06-16
What Hacker News says?
Wow that sucks. It's not just HTML Cleaners though. A few years ago (before snowden) I analyzed free proxy servers and found that most of them blocked https and many even injected JS or HTML into all requests [1]. I also wrote a tutorial on how you can build an infecting proxy too [2]. Doesn't work anymore though since HTTPS is everywhere. Thank god [1] https://blog.haschek.at/2015-analyzing-443-free-proxies [2] htt…
Comment linking /2013/05/why-free-proxies-are-free-js-infection.html
on “The top-ranking HTML editor on Google is an SEO scam”Submitted The curious case of the Raspberry Pi in the network closet (2019) as a story · 799 points
HN discussionThis post is suspiciously similar to my post from 2017 "How to defend your website with ZIP bombs" https://blog.haschek.at/2017/how-to-defend-your-website-with...
Comment linking /2017/how-to-defend-your-website-with-zip-bombs.html
on “I use zip bombs to protect my server”Submitted Defending a website with Zip bombs as a story · 631 points
HN discussionAnother solution would be to find out who the scammers parents are and write them. Worked for me https://blog.haschek.at/2016/how-a-scammer-stole-500-dollars...
Comment linking /2016/how-a-scammer-stole-500-dollars-from-me/
on “I'm a scam prevention expert and I got scammed”Submitted I heat my home by mining crypto currencies as a story · 529 points
HN discussionI am using a bash script on my vps to get a wildcard certificate and just scp the cert to my other reverse proxies. Some using nginx but some Caddy or traefik Wrote an article how to set it up https://blog.haschek.at/2023/letsencrypt-wildcard-cert.html
Comment linking /2023/letsencrypt-wildcard-cert.html
on “Nginx introduces native support for ACME protocol”Submitted The curious case of the Raspberry Pi in the network closet as a story · 518 points
HN discussion> What a technical dad you have! Working for over 35 years for IBM and inspiring BASIC/REXX to ones child may do the trick -> https://blog.haschek.at/about/
Comment linking /about/
on “The curious case of the Raspberry Pi in the network closet (2019)”Submitted I got my money back from a scammer by contacting his mom on Facebook (2016) as a story · 508 points
HN discussion> It's not really so much about "who do I contact if I find a security problem on a website Cannot confirm. I bought a windshield for my '01 Ford Focus and found a major security bug on their site [1] (they linked a JS file from a non-existant domain) I talked to CERT, the clerks at the store, tried to contact the owner on linkedin; heck it was even published in one of the largest newspapers of my country but never…
Comment linking /2019/threat-vector-legacy-static-websites.html
on “Security.txt”Submitted Stopping phishing campaigns with Bash as a story · 457 points
HN discussionyes I even wrote about the laptop servers here https://blog.haschek.at/2015-my-company-just-turned-10.html
Comment linking /2015-my-company-just-turned-10.html
on “I wish my web server were in the corner of my room”Submitted A scammer stole $500 from me and in the end begged me not to tell his parents as a story · 432 points
HN discussionnot true, I have started a blog and hosted it on blogspot at first but wasn't satisfied with the style in general and the lack of customization so I built my own in bootstrap + php and hosted it on a 5€/month Server. No tracking, no ads, no external libraries, no referral links, no monetization. After switching to my own I re-wrote one of the articles of my old blogspot posts (word for word) and because my custom so…
Comment linking /
on “Disqus, a dark commenting system”Submitted The curious case of the Raspberry Pi in the network closet (2019) as a story · 329 points
HN discussionsomething similar from the same blog about a malicious raspberry pi in a network closet and in the end the person who put it there was found out because their wifi credentials were still in the Pi https://blog.haschek.at/2019/the-curious-case-of-the-RasPi-i...
Comment linking /2019/the-curious-case-of-the-RasPi-in-our-network.html
on “I got my money back from a scammer by contacting his mom on Facebook (2016)”Submitted I scanned Austria as a story · 326 points
HN discussionVery progressive move by Twitter. Meanwhile I tried to warn a car parts shop for 6 months of their massive problem [1] (remote js execution on their site that hadled payments) and even after it was in the media they didn't answer me or fix the issue. Wrote them on Facebook one day and they tried to sue me [1] https://blog.haschek.at/2019/threat-vector-legacy-static-web...
Comment linking /2019/threat-vector-legacy-static-websites.html
on “Twitter names famed hacker 'Mudge' as head of security”Submitted Why are free proxies free? (2013) as a story · 319 points
HN discussionNot sure if your post is sarcastic but if not it already exists: https://blog.haschek.at/tools/bomb.php Usually aimed against bots though: https://hackaday.com/2017/07/08/dropping-zip-bombs-on-vulner...
Comment linking /tools/bomb.php
on “A better zip bomb”Submitted I opened a link some random person sent me and I got raided (2015) as a story · 251 points
HN discussionIt really does sound amazing. Would have needed this when you guys (hn) and reddit helped me figure out what a rogue Raspberry Pi was doing in our server closet https://blog.haschek.at/2019/the-curious-case-of-the-RasPi-i...
Comment linking /2019/the-curious-case-of-the-RasPi-in-our-network.html
on “Dive: A tool for exploring a Docker image, layer contents and more”Submitted Simple Raspberry Pi Powered SMS Gateway as a story · 250 points
HN discussionI love the concept and I even wrote a blog post about how to set up a fully pxe bootable server environment using Alpine Linux [1] (which by default boots from RAM) in 2019. I still use it and it's one of those things that makes recovery or testing so much faster because I don't even need a usb thumb drive [1] https://blog.haschek.at/2019/build-your-own-datacenter-with-...
Comment linking /2019/build-your-own-datacenter-with-pxe-and-alpine.html
on “Mullvad: Diskless infrastructure using stboot in beta”Submitted Sending emails to my three-year-old as a story · 199 points
HN discussionthe nice thing about the Proxmox + ZFS setup is that it works and is even recommended without using hardware raid controllers. Less headaches either way. I recently wrote a guide [1] how to use proxmox with ZFS over iSCSI so you can use the snapshot features from a SAN [1] https://blog.haschek.at/2023/zfs-over-iscsi-in-proxmox.html
Comment linking /2023/zfs-over-iscsi-in-proxmox.html
on “Helios: A distribution of Illumos powering the Oxide Rack”Submitted How to defend your website with ZIP bombs (2017) as a story · 122 points
HN discussionAlso don't forget there are more IKEA things that can host computers. I used a Kallax shelf for a beautiful home server. https://blog.haschek.at/2014/07/ikea-server-rack-nope-not-th...
Comment linking /2014/07/ikea-server-rack-nope-not-that-lack.html
on “How to Turn an IKEA Coffee Table into a DIY Server Rack”Submitted Defending websites with gzip bombs as a story · 56 points
HN discussion
