Top all-time · #11062
Collin Mulliner
Personal blog · mulliner.org/blogsecuritysystems
Collin Mulliner writes Welcome to MUlliNER.ORG/NET, a personal blog at mulliner.org about security and systems. Since 2012, 7 different Hacker News readers have linked it 7 times, most often “Hacking Team used open source code to build Android monitoring software”. No feed was found, so read it on the site itself.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN readers link Collin Mulliner's mobile and network security work, mainly a 2010 study on HTTP header privacy. Commenters cite it as evidence that carriers such as O2 inject subscriber identifiers into web requests.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
MUlliNER.ORG/NET/DE
Most-linked posts?
- Hacking Team used open source code to build Android monitoring software2 people · 2 mentions · first linked 2015-07-22
- Privacy Leaks in Mobile Phone Internet Access2 people · 2 mentions · first linked 2012-01-25
What Hacker News says?
From https://summitroute.com/blog/2017/01/07/news_summaries/ , some have already been mentioned. - Downclimb (my own), for weekly infosec news summaries: https://summitroute.com/blog/2017/03/12/downclimb/ - Bulletproof TLS, monthly, for crypto and TLS news: https://www.feistyduck.com/bulletproof-tls-newsletter/issue_... - Mobile security news, monthly: http://www.mulliner.org/blog/blosxom.cgi/security/mobile_sec...…
Comment linking /blog/blosxom.cgi/security/mobile_security_news_update_dec2016.html
on “Ask HN: What are some good technology blogs to follow?”Submitted Hacking Team used open source code to build Android monitoring software as a story · 28 points
HN discussionIt's not just O2 in the UK. This happens all over the place. See this talk done in 2010: http://mulliner.org/security/httpheaderprivacy.php It mentions: Orange (UK), Rogers (Canada), H3G (Italy), Vodafone/BILDmobil (Germany), Pelephone (Israel), and on and on...
Comment linking /security/httpheaderprivacy.php
on “UK network o2 send your number to every site you visit”Submitted Privacy Leaks in Mobile Phone Internet Access as a story · 5 points
HN discussionSo apparently this has been going on for some time - see this paper from October 2010: http://www.mulliner.org/collin/academic/publications/mobile_...
Comment linking /collin/academic/publications/mobile_web_privacy_icin10_mulliner.pdf
on “UK network o2 send your number to every site you visit”Submitted Re-Canary: Detecting Reverse Engineering with Canary Tokens (2017) as a story · 3 points
HN discussionYeah. And it isn't even always the case that they are that good at it... when I first heard about NSO, it was because I learned (as part of Citizen Lab's public analysis of a payload) that they were using some of my software --which I guess they didn't know how to replicate, and, since it wasn't open source, they were awkwardly having to shell out to binaries that I provided in ways that I guess worked well enough--…
Comment linking /blog/blosxom.cgi/security/hackingteam.html
on “Why We’re Suing NSO”
