Top all-time · #7413
CryptoHack Blog
Company blog · blog.cryptohack.orgsecurityprogramming
CryptoHack Blog is the company blog at blog.cryptohack.org, writing about security and programming. Since 2020, 11 different Hacker News readers have linked it 13 times, most often “Partial Redaction Is Not Redaction (PEM Recovery)”. It is still writing: the last post was on 2026-09-29, and you can follow it by feed.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN readers link CryptoHack's blog for security writeups: VirtualBox escape research from CTF work, macOS OCSP certificate-check problems, and the risks of partially redacted private keys.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Updates about the CryptoHack platform, cryptography news, and CTF writeups.
Most-linked posts?
- Partial Redaction Is Not Redaction (PEM Recovery)6 people · 6 mentions · first linked 2021-03-24
- Can't open apps on macOS: an OCSP disaster waiting to happen – CryptoHack Blog4 people · 4 mentions · first linked 2020-11-16
- Cracking a Chinese Proxy Tunnel: Real World CTF Personal Proxy Writeup2 people · 2 mentions · first linked 2021-01-15
What Hacker News says?
This is impressive work. First it shows how the top CTFs can showcase the state of the art in terms of exploitation. It's hard for anyone to argue that the CTF scene does not reflect the "real world" when it is producing solid work like unpublished virtual machine escapes. And even better, the work is shared in high quality writeups. Secondly, this plus other vulnerabilities found in VirtualBox emphasises that off-t…
Comment linking /cracking-chinese-proxy-realworldctf
on “Escaping VirtualBox 6.1: Part 1”Submitted Partial Redaction Is Not Redaction (PEM Recovery) as a story · 7 points
HN discussion> …also, is it fine to only partially redact a private key in an image? It is not: https://blog.cryptohack.org/twitter-secrets
Comment linking /twitter-secrets
on “A pentester gets root - step by step example”Submitted Recovering a full PEM Private Key when half of it is redacted as a story · 6 points
HN discussionThis is in response to the issue last week where slowness of Apple's OCSP responders caused hangs in apps launching. It was a bad look for privacy-conscious Apple especially considering that basic OCSP queries are unencrypted HTTP requests. In my post ( https://blog.cryptohack.org/macos-ocsp-disaster ) I argued that OCSP was inherently a poor way to perform certificate revocation in this scenario, and that an approa…
Comment linking /macos-ocsp-disaster
on “Safely open apps on your Mac”Submitted Recovering a full PEM private key when half of it is redacted as a story · 6 points
HN discussion3rd party apps are validated via OCSP on macOS when the apps are launched. A few years ago this was an issue, when millions of macOS users found that they couldn't launch any apps at all on their Macs, because Apple's OCSP servers were down[1]. [1] https://blog.cryptohack.org/macos-ocsp-disaster
Comment linking /macos-ocsp-disaster
on “iOS 17 app sideloading might only be available in Europe”Submitted Recovering a full PEM Private Key when half of it is redacted as a story · 5 points
HN discussionAn example a real life reconstruction of a partially redacted SSH private key : https://blog.cryptohack.org/twitter-secrets
Comment linking /twitter-secrets
on “Hiltonhotels.jp SSL key publicly available”Submitted Cracking a Chinese Proxy Tunnel: Real World CTF Personal Proxy Writeup as a story · 3 points
HN discussionSubmitted Can't open apps on macOS: an OCSP disaster waiting to happen – CryptoHack Blog as a story · 3 points
HN discussionSubmitted Can't open apps on macOS: an OCSP disaster waiting to happen as a story · 2 points
HN discussionSubmitted CryptoHack – New Challenges as a story · 1 points
HN discussion
