Top all-time · #14004
CrankySec
Personal blog · crankysec.com/blogsecuritycareer
CrankySec is a personal blog at crankysec.com about security and career. Since 2024, 5 different Hacker News readers have linked it 5 times. It is still writing: the last post was on 2026-10-13, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link CrankySec for cybersecurity rants and commentary on open source security, supply chains and the industry's response to incidents. One commenter calls it fun to read.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Fuck InfoSec
What Hacker News says?
I've argued in a blog post [1] that we need to delineate between "open source developer" and "supplier". If we don't do that, calling thankless unpaid volunteers and hobbyists a "supply chain" is kind of insulting [2]. I don't believe that "identity verification" for F/OSS developers is a good idea. Suppliers? Sure. That can be a contract negotiation when you decide how much you pay for it. Also, I don't think ident…
Comment linking /blog/supply/
on “XZ backdoor story – Initial analysis”Submitted Cybersecurity Is Broken as a story · 91 points
HN discussionI think this article describes the issue well: https://crankysec.com/blog/community/ > All the cybersecurity companies saying "We don't have anything to say about this situation." is just them being true to their main in-group: for-profit companies that don't want to upset a big current or potential buyer. They are, first and foremost, part of that "community", and they happen to be involved in cybersecurity. Solida…
Comment linking /blog/community/
on “Deafening Silence from the Cybersecurity Industry”Submitted Security Program Is Shit as a story · 76 points
HN discussionSome I like: https://www.writesoftwarewell.com/ - very good software posts, mostly around Ruby on Rails. https://crankysec.com/ - Cybersecurity rants mostly, fun to read. https://www.wheresyoured.at/ - Ed Zitron's writings. Good counterpoints to all the AI hype these days. These come up often on HN but I'll call them out anyway: https://jvns.ca/ - Julia Evans, good technical content all around. https://xeiaso.net/ -…
Comment linking /
on “Ask HN: Who do you follow via RSS feed?”