Top all-time · #7660
Guido Vranken
Personal blog · guidovranken.wordpress.comsecurityprogramming
Guido Vranken's personal blog at guidovranken.wordpress.com covers security and programming. Since 2015, 10 different Hacker News readers have linked it 16 times, most often “LibFuzzer-gv: new techniques for dramatically faster fuzzing”. The last post was in 2022, but the archive is still widely read.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
The only comment concerns a write-up of the Ring-Road bug, a vulnerability involving Apple's data-transmission encryption. Its wording is discussed, not the blog's broader output.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- LibFuzzer-gv: new techniques for dramatically faster fuzzing3 people · 3 mentions · first linked 2017-07-08
- HTTPS Bicycle Attack3 people · 3 mentions · first linked 2016-01-04
What Hacker News says?
I've written this article on CVE-2017-3730: https://guidovranken.wordpress.com/2017/01/26/cve-2017-3730-... It includes proofs of concept and touches upon the fact that client vulnerabilities can affect some servers just as well, because servers sometimes initiate connections to other servers. Mail servers do this, as well as certain web applications.
Comment linking /2017/01/26/cve-2017-3730-openssl-1-1-0-remote-client-denial-of-service-affects-servers-as-well-poc/
on “OpenSSL Security Advisory”Submitted Important security vulnerabilities in OpenVPN as a story · 266 points
HN discussionThe page is oddly written in a variety of ways: "The team was astonished," the insistence on "G-mail," and what is this doing in there: "Apple has decided to use alternatives such as Advanced Encryption Standard, Cipher Block Chaining (AES-CBC) + Keyed Hash Authentication (HMAC) to achieve both confidentiality and integrity for sensitive data transmitted over the Internet." They're talking about a vulnerability in Q…
Comment linking /2015/12/30/https-bicycle-attack/
on “Ring-Road Bug”Submitted OpenSSL CVE-2016-0799: heap corruption via BIO_printf as a story · 137 points
HN discussionSubmitted New vulnerabilities found in ARM mbed TLS as a story · 36 points
HN discussionSubmitted LibFuzzer-gv: new techniques for dramatically faster fuzzing as a story · 28 points
HN discussionSubmitted Malformed private keys lead to heap corruption in OpenSSL's b2i_PVK_bio as a story · 25 points
HN discussionSubmitted LibFuzzer-gv: new techniques for dramatically faster fuzzing as a story · 4 points
HN discussionSubmitted Can you spot the vulnerability? as a story · 3 points
HN discussionSubmitted LibFuzzer-gv: new techniques for dramatically faster fuzzing as a story · 2 points
HN discussionSubmitted Rpcbomb: remote rpcbind denial-of-service and patches as a story · 2 points
HN discussionSubmitted OpenSSL remote client memory corruption as a story · 2 points
HN discussionSubmitted HTTPS Bicycle Attack as a story · 2 points
HN discussionSubmitted CVE-2015-5291: remote heap corruption in ARM mbedTLS/PolarSSL as a story · 2 points
HN discussionSubmitted Security audit of SoftEther VPN finds 11 security vulnerabilities as a story · 1 points
HN discussionSubmitted HTTPS Bicycle Attack as a story · 1 points
HN discussion
