Top all-time · #9338
elttam
Company blog · elttam.com/blogsecurity
elttam is the company blog at elttam.com, writing about security. Since 2019, 8 different Hacker News readers have linked it 20 times, most often “Simple Bugs with Complex Exploits”. It is still writing: the last post was on 2026-09-23, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN commenters cite this security research blog's post "Hacking with Environment Variables", which shows arbitrary code execution through Python's antigravity module. The comment links it as a reference on the security issue.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Expert‑led penetration testing augmented by intelligent systems. We uncover real weaknesses and help strengthen your systems against real‑world threats.
Most-linked posts?
- Simple Bugs with Complex Exploits3 people · 3 mentions · first linked 2020-09-03
- How the Talkback infosec aggregator works2 people · 2 mentions · first linked 2024-01-11
What Hacker News says?
This looked innocuous at first glance, but this "antigravity" Easter egg has been found to have security implications. See "Hacking with Environment Variables", which specifically exploits the antigravity module for arbitrary code execution - https://www.elttam.com/blog/env/#content Previous HN comments: https://news.ycombinator.com/item?id=23828045
Comment linking /blog/env/
on “Antigravity.py (2020)”Submitted Hacking with environment variables as a story · 226 points
HN discussionSubmitted Simple Bugs with Complex Exploits as a story · 56 points
HN discussionSubmitted Ruby 2.x Universal RCE Deserialization Gadget Chain (2018) as a story · 36 points
HN discussionSubmitted Simple bugs with complex exploits – an analysis of a V8 vulnerability from P0 as a story · 3 points
HN discussionSubmitted Ruby 4.0 Universal RCE Deserialization Gadget Chain as a story · 2 points
HN discussionSubmitted Golang Code Review Notes by Elttam as a story · 2 points
HN discussionSubmitted ESP-IDF Setup Guide – Setting up an environment for ESP32 vulnerability research as a story · 2 points
HN discussionSubmitted Lua SUID Shells – How to make SUID Lua scripts not drop privileges as a story · 2 points
HN discussionSubmitted Cruising for Shells in Flowise – 6 RCEs That Rode Flowise Low and Slow as a story · 1 points
HN discussionSubmitted ORM Leaking More Than You Joined For as a story · 1 points
HN discussionSubmitted New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails as a story · 1 points
HN discussionSubmitted ORM Leak Vulnerabilities as a story · 1 points
HN discussionSubmitted Talkback: Keeping up with the pwnses, a next gen infosec resource aggregator as a story · 1 points
HN discussionSubmitted How the Talkback infosec aggregator works as a story · 1 points
HN discussionSubmitted PwnAssistant – Controlling /Home's via a Home Assistant RCE as a story · 1 points
HN discussionSubmitted Ruby Universal RCE Deserialization Gadget Chain (2018) as a story · 1 points
HN discussionSubmitted Tuya IoT and EZ Mode Pairing as a story · 1 points
HN discussionSubmitted Simple Bugs With Complex Exploits – A detailed root cause analysis as a story · 1 points
HN discussionSubmitted Hacking with Environment Variables as a story · 1 points
HN discussion