Top all-time · #2390
Exodus Intelligence
Company blog · blog.exodusintel.comsecurity
Exodus Intelligence is the company blog at blog.exodusintel.com, writing about security. Since 2013, 30 different Hacker News readers have linked it 50 times, most often “Remotely Compromising Android and iOS via a bug in Broadcom's WI-FI Chipsets”. It is still writing: the last post was on 2026-07-27, and you can follow it by feed.
Too few sampled comments (18) to say how often HN recommends it.?
Why HN links it
HN readers link Exodus Intelligence's posts as writeups of vulnerabilities and exploits, including Broadpwn, a Chrome V8 bug, a Cisco firewall flaw, i2p bugs and the patch-gap research.
Summarised by Claude from a sample of 18 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Exodus Blog Exodus ensures that each and every discovered vulnerability is relevant, reliable, and well-documented before we disclose the issue to the appropriate vendor for remediation. Latest Posts Microsoft Windows Cloud Files Minifilter TOCTOU Privilege Escalation Exodus Intel VRT October 20, 2
Most-linked posts?
- Remotely Compromising Android and iOS via a bug in Broadcom's WI-FI Chipsets6 people · 6 mentions · first linked 2017-07-26
- Google Chrome V8 CVE-2024-0517 Out-of-Bounds Write Code Execution3 people · 4 mentions · first linked 2024-01-22
- Mind the Patch Gap: Exploiting an Io_uring Vulnerability in Ubuntu3 people · 3 mentions · first linked 2024-04-25
- Exodus Write-Up on Cisco IKEv1 and IKEv2 Buffer Overflow Vulnerability2 people · 3 mentions · first linked 2016-02-10
- Patch-Gapping Google Chrome2 people · 3 mentions · first linked 2019-09-09
- Off By: Exploiting a Use-After-Free in the Linux Kernel2 people · 2 mentions · first linked 2026-06-09
- Silver Bullets and Fairy Tails2 people · 2 mentions · first linked 2014-07-23
- Exploiting the Magellan Bug on 64-bit Chrome Desktop2 people · 2 mentions · first linked 2019-01-23
- Asterisk Vulnerability: "DoS? Then Who Was Phone?"2 people · 2 mentions · first linked 2013-01-09
- Exploiting a Chrome 1DAY Vulnerability2 people · 2 mentions · first linked 2019-04-03
What Hacker News says?
Vulnerabilities in Broadcom/Cypress wifi chips' firmware have been known for a while now: https://blog.exodusintel.com/2017/07/26/broadpwn/
Comment linking /2017/07/26/broadpwn/
on “ESP32/ESP8266 Wi-Fi Attacks”Submitted Remotely Compromising Android and iOS via a bug in Broadcom's WI-FI Chipsets as a story · 387 points
HN discussionSo, a neighbor’s compromised wifi router could remotely exploit your smart tv without even configured settings: https://blog.exodusintel.com/2017/07/26/broadpwn/
Comment linking /2017/07/26/broadpwn/
on “The CIA Spied on People Through Their Smart TVs, Leaked Documents Reveal (2017)”Submitted Android libstagefright still exploitable as a story · 164 points
HN discussionI appreciate a lot of the work that the Tails guys do - but for a privacy and security focused distribution there are far too many included apps for my liking[1], which increases the attack surface. LibreOffice, Gimp and Audacity are just some of the apps - and many have a horrible history of vulnerabilities[2]. When Tails has had vulnerabilities it is often with one of these included apps[6]. The browser isn't sanb…
Comment linking /2014/07/23/silverbullets_and_fairytails/
on “Tails 2.0 is out”Submitted Pwn2Own 2019: Microsoft Edge Sandbox Escape (CVE-2019-0938). Part 2 as a story · 5 points
HN discussionVulnerability researcher here. This vulnerability was patch-gapped before it was disclosed. When the patch went out 9 days ago [1], many vulnerability researchers were able to look at it and identify the root cause within minutes. Exploits started going out over a week ago before it was publicly disclosed and the CVE was released. Good security orgs that can hire skilled vulnerability researchers started patching on…
Comment linking /2019/09/09/patch-gapping-chrome/
on “Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sheet reference guide”Submitted CVE-2019-5786: Analysis and Exploitation of the recently patched Chrome vuln as a story · 5 points
HN discussionVulnerability researcher here. It's really hard for vulnerabilities as simple as this one to stay under wraps. When the patch went out 9 days ago [1], many vulnerability researchers were able to look at it and identify the root cause within minutes. Exploits started going out over a week ago before the CVE was released. Good security orgs that can hire skilled vulnerability researchers started patching on December 6…
Comment linking /2019/09/09/patch-gapping-chrome/
on “Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sheet reference guide”Submitted Exploiting the Magellan Bug on 64-bit Chrome Desktop as a story · 5 points
HN discussionYou get my upvote, because I respect your perspective and I agree in principle. But at its logical conclusion, this idea puts up some serious practical barriers. Even if you only use an OS that you’ve personally audited, and even if you’ve gotten past the potential Thompsonian compiler issues, you’re still left with a minefield of possibly-adversarial pieces of software that might interfere with your computing exper…
Comment linking /2017/07/26/broadpwn/
on “Every Major Advertising Group Is Blasting Apple for Blocking Cookies in Safari”Submitted TrueKey: The Not So Uncommon Story of a Failed Patch as a story · 5 points
HN discussionWebSQL? https://blog.exodusintel.com/2019/01/22/exploiting-the-magel...
Comment linking /2019/01/22/exploiting-the-magellan-bug-on-64-bit-chrome-desktop/
on “Using Large Language Models to Catch Vulnerabilities”Submitted Three RCE Vulnerabilities in VxWorks (covering 20 years of releases) as a story · 5 points
HN discussionThere’s also a very interesting wasm based Ubercage (V8) sandbox escape in the chain: https://blog.exodusintel.com/2024/01/19/google-chrome-v8-cve... I don’t think the Chrome process isolation sandbox is escaped though.
Comment linking /2024/01/19/google-chrome-v8-cve-2024-0517-out-of-bounds-write-code-execution/
on “Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224”Submitted Silver Bullets and Fairy Tails as a story · 4 points
HN discussionhttps://blog.exodusintel.com/2024/01/19/google-chrome-v8-cve... Here’s the exploit writeup.
Comment linking /2024/01/19/google-chrome-v8-cve-2024-0517-out-of-bounds-write-code-execution/
on “Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224”Submitted A browser is only as strong as its weakest byte as a story · 4 points
HN discussion> We don’t have any memory safe techniques for the output of JITs (or compilers by the way) That's not quite true. BTW there is a writeup by Exodus Intelligence here: https://blog.exodusintel.com/2024/01/19/google-chrome-v8-cve... It's a horrifyingly complicated vulnerability that takes 28 printed pages to explain and one line of code to fix. I don't even want to know what kind of effort it took to discover this one…
Comment linking /2024/01/19/google-chrome-v8-cve-2024-0517-out-of-bounds-write-code-execution/
on “Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224”Submitted Asterisk Vulnerability: "DoS? Then Who Was Phone?" as a story · 4 points
HN discussionHere's a recent vulnerability: https://blog.exodusintel.com/2024/03/27/mind-the-patch-gap-e... It's just your typical multithreading woes (in an unsafe language). One presumes that these problems will be ironed out eventually. Unfortunately it seems as though various hardened distros turn it off for this reason (source was a HN comment I read a while back).
Comment linking /2024/03/27/mind-the-patch-gap-exploiting-an-io_uring-vulnerability-in-ubuntu/
on “BSD kqueue is a mountain of technical debt (2021)”Submitted Off By: Exploiting a Use-After-Free in the Linux Kernel as a story · 3 points
HN discussionI'm considering switching from Android to iOS because I don't want to throw away my phone once my 2-4 years of security updates are over. How do firmware updates factor into your thinking around Android and security? Is there a way off of the "buy a new phone if you want firmware updates" treadmill? (I don't expect you to have a solution, but I'm curious to hear how you're thinking about this problem.) See-also: htt…
Comment linking /2017/07/26/broadpwn/
on “AMA: Gaël Duval, founder of the de-Googled Android OS /e/”Submitted Oops Safari, I Think You Spilled Something as a story · 3 points
HN discussionHere a nice explanation of the vulnerability: https://blog.exodusintel.com/2016/02/10/firewall-hacking/ There is also a Snort signature to detect attempts to exploit this vulnerability.
Comment linking /2016/02/10/firewall-hacking/
on “Cisco buffer overflow vulnerability with remote code execution”Submitted Google Chrome V8 CVE-2024-0517 Out-of-Bounds Write Code Execution as a story · 3 points
HN discussiongets is not missing from the list. As for alloca() please see http://blog.exodusintel.com/2013/01/07/who-was-phone/ as an example of how things can go very wrong. memcpy() isn't bad in itself but its easy to get wrong when you're dealing with untrusted user supplied size parameters. memcpy_s is a better alternative because it encourages the developer to think about the size parameters being passed in.
Comment linking /2013/01/07/who-was-phone/
on “GCC Poison”Submitted Patch-Gapping Google Chrome as a story · 3 points
HN discussionI have not run i2p or otherwise paid much attention to the project for more than a year, but I did notice it had a remote code execution vulnerability discovered last summer or so (stemming from its default-on web admin interface: http://blog.exodusintel.com/2014/07/23/silverbullets_and_fai... ). Just because of that I would not consider it an alternative to Tor. However it's not true that "nobody uses i2p". The net…
Comment linking /2014/07/23/silverbullets_and_fairytails/
on “'Silk Road Reloaded' Just Launched on a Network More Secret Than Tor”Submitted Fuzzing Grammars in Python: gramfuzz as a story · 3 points
HN discussion
