Top all-time · #7622
HUMAN Documentation
Company blog · perimeterx.com/blogsecurityweb
HUMAN Documentation is the company blog at perimeterx.com, writing about security and web. Since 2018, 10 different Hacker News readers have linked it 18 times, most often “CSP Bypass Vulnerability in Google Chrome Discovered”. No feed was found, so read it on the site itself.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link PerimeterX's documentation and tech blog, including a post on JavaScript anti-debugging using source maps. One commenter says they use the PerimeterX product.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- CSP Bypass Vulnerability in Google Chrome Discovered2 people · 2 mentions · first linked 2020-08-10
- Exfiltrating User’s Private Data Using Google Analytics to Bypass CSP2 people · 2 mentions · first linked 2020-06-17
What Hacker News says?
Source maps are used for anti-debugging: https://www.perimeterx.com/tech-blog/2019/javascript-anti-de...
Comment linking /tech-blog/2019/javascript-anti-debugging-1/
on “JSFuck (2012)”Submitted I found a WhatsApp security flaw that allowed hackers to read the file system as a story · 555 points
HN discussionWe use PerimeterX and it's generally worked well for us https://www.perimeterx.com/ (and more cost-effective than spending our own time on it, at least for us) I do share your desire though to try to direct the traffic towards some entity that could be better equipped at cutting it off at its source. It's automated traffic for the most part, so perhaps a clever automated solution could be effective at stirring a big…
Comment linking /
on “Ask HN: "Creative" ways to handle abusive http traffic?”Submitted RPC Olympics – The Search for the Perfect RPC Protocol as a story · 88 points
HN discussionThey're not "afraid" of getting scammed. They get scammed often. Affiliate marketers often use shady techniques to get the click. It's a tale as old as time. Wasn't there some browser extension years ago that was inserting it's Amazon affiliate link into webpages?[1] A large amount of the spam we receive in our email is ulimately just some affiliate trying to earn a commission. Affiliates don't have ethical rules th…
Comment linking /resources/blog/2016/hijacking-users-affiliate-fraud/
on “Amazon cancels my account after exposing account lockout for “racist doorbell” [video]”Submitted Skimming-as-a-Service: Anatomy of a Magecart Attack Toolkit as a story · 19 points
HN discussionSubmitted Defeating JavaScript Obfuscation as a story · 18 points
HN discussionSubmitted Exfiltrating User’s Private Data Using Google Analytics to Bypass CSP as a story · 7 points
HN discussionSubmitted Client-Side – The Security Blindspot of Your Website as a story · 4 points
HN discussionSubmitted CSP Bypass Vulnerability in Google Chrome Discovered as a story · 3 points
HN discussionSubmitted The Missing LNKR as a story · 2 points
HN discussionSubmitted Zero Day CSP Bypass Vulnerability in Google Chrome Discovered as a story · 2 points
HN discussionSubmitted Exfiltrating User’s Private Data Using Google Analytics to Bypass CSP as a story · 2 points
HN discussionSubmitted OK Let’s Go: Three Approaches to Structuring Go Code as a story · 2 points
HN discussionSubmitted Importing Your Cloud Resources into Pulumi as a story · 1 points
HN discussionSubmitted Deobfuscating a Magecart Skimming Toolkit as a story · 1 points
HN discussionSubmitted New Stealth Magecart Attack Bypasses Payment Services Using Iframes as a story · 1 points
HN discussionSubmitted Scaling out with Prometheus as a story · 1 points
HN discussion
