Top all-time · #19091
Compass Security Blog
Company blog · blog.compass-security.comsecurity
Compass Security Blog is the company blog at blog.compass-security.com, writing about security. Since 2016, 4 different Hacker News readers have linked it 5 times. It is still writing: the last post was on 2026-10-02, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
Linked for security write-ups, including a discussion of a discovered OpenAI agent message board and a Kerberoasting post. One commenter points readers to the blog's Kerberos video series.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
What Hacker News says?
The whole point is that something is inspecting all HTTP/HTTPS requests and only allowing POSTs to Azure Block Storage (`.*blob.core.windows.net`). Meanwhile the agent needs to make a POST request to a PBI host (`wabi-north-europe-i-primary-api.analysis.windows.net` / 20.223.25.152). So a proxy should block any POST to 20.223.25.152 unless that IP somehow overlaps with ABS. But in that case, there's no reason for th…
Comment linking /2025/03/bypassing-web-filters-part-1-sni-spoofing/
on “Discovery of a new OpenAI agent message board”Submitted Deep Dive into Kerberos Attacks as a story · 2 points
HN discussionSee also https://blog.compass-security.com/2025/09/taming-the-three-h... for an in-depth video series on Kerberos.
Comment linking /2025/09/taming-the-three-headed-dog-kerberos-deep-dive-series/
on “Kerberoasting”Submitted Compass SSL/TLS recommendations as a story · 2 points
HN discussionSubmitted WinGet abused to deliver malicious payloads as a story · 1 points
HN discussion