Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #14036

D

dfir it!

Personal blog · dfir.it/blogsecurity

dfir it! is a personal blog at dfir.it about security. Since 2015, 5 different Hacker News readers have linked it 5 times, most often “The Supreme Backdoor Factory”. The last post was in 2019, but the archive is still widely read.

Visit the blog
5mentions?
5HN people?
2015–2020first – last linked?
Links on Hacker News per year · peak 2 in 2019

Too few sampled comments (1) to say how often HN recommends it.?

Why HN links it

HN readers link dfir it! for a 2019 post on a GitHub-based 'backdoor factory' that promoted backdoored apps. The only comment is a bare citation of that post as the original source.

Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

Recently I was playing with VirusTotal Intelligence and while testing some dynamic behavior queries I stumbled upon this strange PE binary (MD5: …

Most-linked posts?

  1. The Supreme Backdoor Factory
    3 people · 3 mentions · first linked 2019-03-01

What Hacker News says?

  1. Agreed... Original source: https://dfir.it/blog/2019/02/26/the-supreme-backdoor-factory...

    Comment linking /blog/2019/02/26/the-supreme-backdoor-factory/

    on “Researchers uncover ring of GitHub accounts promoting 300 backdoored apps”
  2. Submitted The Supreme Backdoor Factory as a story · 146 points

    HN discussion
  3. Submitted The Supreme Backdoor Factory: JXplorer Clones as a story · 4 points

    HN discussion
  4. Submitted Webshells: a short case study on investigating webshell compromise as a story · 4 points

    HN discussion
  5. Submitted Forensic Case Studies – Carving and Parsing Solaris WTMPX Files as a story · 2 points

    HN discussion

Search all of HN for dfir.it