Top all-time · #6553
DEFION Security
Company blog · computest.nl/blogsecurity
DEFION Security is the company blog at computest.nl, writing about security. Since 2016, 12 different Hacker News readers have linked it 14 times, most often “Command execution on Ansible controller from host”. No feed was found, so read it on the site itself.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN commenters link this security firm's posts on vulnerability disclosures, such as the StartEncrypt analysis and an Ansible controller command-execution advisory, plus a post on the security benefits of a login approach.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Onafhankelijk cybersecuritybedrijf in Nederland en Spanje. Pentest, MDR, NIS2-advies, incident response en CISO as a Service. Meer dan 20 jaar ervaring, 100+ security experts.
Most-linked posts?
- Command execution on Ansible controller from host4 people · 5 mentions · first linked 2017-01-10
- StartEncrypt considered harmful today3 people · 3 mentions · first linked 2016-06-30
What Hacker News says?
They aren't that much more secure than a random 256 bit unique password for every site stored in a secure password manager. They are designed to raise the security for the average user, not the most security conscious. https://www.computest.nl/en/knowledge-platform/blog/advantag...
Comment linking /en/knowledge-platform/blog/advantages-and-risks-of-passkeys/
on “How to lose a fortune with one bad click”Submitted StartEncrypt considered harmful today as a story · 248 points
HN discussionhttps://www.computest.nl/advisories/CT-2017-0109_Ansible.txt has the bug details Edit: LWN link was changed to this one
Comment linking /advisories/CT-2017-0109_Ansible.txt
on “Command execution on Ansible controller from host”Submitted Command execution on Ansible controller from host as a story · 112 points
HN discussionYou may be thinking of a similar vulnerability discovered with StartSSL's StartEncrypt tool - https://www.computest.nl/blog/startencrypt-considered-harmfu... .
Comment linking /blog/startencrypt-considered-harmful-today/
on “Certificate Authority Gave Out Certs for GitHub to a GitHub Account Holder”Submitted The Connected Car Ways to get unauthorized access and potential implications [pdf] as a story · 4 points
HN discussionBackground for shutting down StartEncrypt: https://www.computest.nl/blog/startencrypt-considered-harmfu...
Comment linking /blog/startencrypt-considered-harmful-today/
on “StartEncrypt moves to ACME”Submitted Command execution on Ansible controller from host as a story · 4 points
HN discussionSubmitted [Security] Command execution on Ansible controller from host as a story · 4 points
HN discussionSubmitted Volkswagen Group models vulnerable to hackers as a story · 2 points
HN discussionSubmitted Vulnerabilities in Ansible as a story · 2 points
HN discussionSubmitted Exploiting two buggy SRP implementations as a story · 2 points
HN discussionSubmitted Unexpected automatic deserialisation of Java objects: MySQL Connector/J as a story · 1 points
HN discussionSubmitted Security Advisory: Command execution on Ansible controller from host as a story · 1 points
HN discussion
