Top all-time · #17355
Daniel Dent
Personal blog · danieldent.com/blog · on HN as DanielDentsecuritystartups
Daniel Dent's personal blog at danieldent.com covers security and startups. Since 2014, 4 different Hacker News readers have linked it 15 times, most often “The RESTLESS Vulnerability: Non-Browser Based Cross-Domain HTTP Request Attacks”. The last post was in 2020, but the archive is still widely read.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for a post on a data exfiltration vulnerability in rclone. The only comment is a bare link with a one-line claim, so there is no commentary on the writing.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Entrepreneur. Developer. Product manager. Leader. Founder of Digital Market Maker - technology that empowers.
Most-linked posts?
- The RESTLESS Vulnerability: Non-Browser Based Cross-Domain HTTP Request Attacks3 people · 4 mentions · first linked 2018-06-27
What Hacker News says?
I wrote about this a while back, and also proposed a solution which doesn't involve parsing console output: https://www.danieldent.com/blog/ssh-requires-a-chain-of-trus...
Comment linking /blog/ssh-requires-a-chain-of-trust/
on “Golang SSH Security”Submitted Google Apps Security Vulnerability Puts Organizations’ Data at Risk as a story · 20 points
HN discussionrclone is vulnerable to data exfiltration attacks https://www.danieldent.com/blog/restless-vulnerability-non-b...
Comment linking /blog/restless-vulnerability-non-browser-cross-domain-http-request-attacks/
on “Show HN: B2blaze – A Backblaze B2 library for Python”Submitted Six Common Internet Privacy Myths as a story · 7 points
HN discussionB2's API design has security implications: https://www.danieldent.com/blog/restless-vulnerability-non-b...
Comment linking /blog/restless-vulnerability-non-browser-cross-domain-http-request-attacks/
on “Show HN: B2blaze – A Backblaze B2 library for Python”Submitted Dear NSA: If you find yourself in a hole, stop digging as a story · 4 points
HN discussionI'm not sure I understand what your use case is for pushing static routes & would be interested to understand what you mean. I've been trying a few different approaches to routing. Putting link-local addresses in routing tables has worked well in some deployments. Debian & OS X use MAC based addresses in addition to their privacy addresses. https://www.danieldent.com/blog/remote-ipv6-device-fingerpri...
Comment linking /blog/remote-ipv6-device-fingerprinting/
on “VMWare Fusion IPv6 NAT Black Holes”Submitted NCIX, Able Auctions, and Bowra Group Data Breach as a story · 3 points
HN discussionI wrote my own take on this based on what I observed at their auction: https://www.danieldent.com/blog/ncix-able-auctions-bowra-gro...
Comment linking /blog/ncix-able-auctions-bowra-group-data-breach/
on “NCIX Data Breach”Submitted The RESTLESS Vulnerability: Non-Browser Based Cross-Domain HTTP Request Attacks as a story · 3 points
HN discussionSubmitted Track OS X Users Remotely Using IPv6 Device Fingerprinting as a story · 3 points
HN discussionSubmitted Prepare Android Apps for ISRG Let’s Encrypt Expiry of IdenTrust Cross-Signature as a story · 2 points
HN discussionSubmitted Devops Developers: SSH Requires a Chain of Trust as a story · 2 points
HN discussionSubmitted The RESTLESS Vulnerability: Non-Browser Based Cross-Domain HTTP Request Attacks as a story · 1 points
HN discussionSubmitted Frequently free financing for founders: technical debt as a story · 1 points
HN discussion