Top all-time · #4418
https://blog.lizzie.io
Personal blog · blog.lizzie.iosecuritysystems
https://blog.lizzie.io is a personal blog at blog.lizzie.io about security and systems. Since 2016, 16 different Hacker News readers have linked it 25 times, most often “Linux containers in 500 lines of code”. The last post was in 2018, but the archive is still widely read.
Too few sampled comments (9) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for "Linux containers in 500 lines of code", written as literate org-mode, and for notes on the CVE-2016-7117 Linux kernel use-after-free vulnerability.
Summarised by Claude from a sample of 9 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Linux containers in 500 lines of code8 people · 10 mentions · first linked 2016-10-17
- Notes about CVE-2016-71173 people · 5 mentions · first linked 2016-10-06
- Exploiting CVE-2016-862 people · 2 mentions · first linked 2016-10-14
- /linux-containers-in-500-loc.org2 people · 2 mentions · first linked 2017-11-02
- Clickjacking Chrome Extensions2 people · 2 mentions · first linked 2018-07-27
What Hacker News says?
It is the better road, and the road chosen by most other things that aren't SaaS, including Google's other most popular thing, Android. Keep the default to auto-update, fine, but let me disable that, as the Android app store does. Attacks from previously trusted extensions (and apps) being updated and then doing malicious things (requesting new permissions to do them is not significant friction) are worse and more f…
Comment linking /clickjacking-privacy-badger.html
on “Wikipedia article blocked worldwide by Delhi high court”Submitted Linux containers in 500 lines of code as a story · 440 points
HN discussionKinda cool how it's all generated from an org-mode file: https://blog.lizzie.io/linux-containers-in-500-loc.org Really nice example of the power of literate programming in general and of org-mode's support for it in particular.
Comment linking /linux-containers-in-500-loc.org
on “Linux containers in 500 lines of code”Submitted Linux containers in 500 lines of code (2016) as a story · 267 points
HN discussionSomewhat tangentially related, I would like to know how the parent poster or for that matter printed the document. somewhat unrelated, I don't use emacs but is there a way to break lines such as #+caption: [[ https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.... ] in the org mode source? https://blog.lizzie.io/linux-containers-in-500-loc.org
Comment linking /linux-containers-in-500-loc.org
on “Linux containers in 500 lines of code”Submitted Linux containers in 500 lines of code (2016) as a story · 250 points
HN discussionMight benefit from a (2016) tag. Date gotten from the homepage: https://blog.lizzie.io/
Comment linking /
on “Linux containers in 500 lines of code (2016)”Submitted Linux containers in 500 lines of code (2016) as a story · 146 points
HN discussionA great resource to understand how Linux containers work is "Linux containers in 500 lines of code": https://blog.lizzie.io/linux-containers-in-500-loc.html Or, if you just want to skip to the code: https://blog.lizzie.io/linux-containers-in-500-loc/contained...
Comment linking /linux-containers-in-500-loc/contained.c
on “Linux Container Internals”Submitted Linux containers in 500 lines of code as a story · 6 points
HN discussionI wrote a bit about it: https://blog.lizzie.io/notes-about-cve-2016-7117.html tl;dr looks like it'd function well a local privilege exploit. not an expert, but as a remote exploit think it would need 1) a service running recvmmsg (which is kind of unlikely) 2) a way to cause recvmsg to error, and 3) a way to cause the service to close its socket in the middle of the recvmmsg call.
Comment linking /notes-about-cve-2016-7117.html
on “Linux Kernel Use-After-Free Remote Code Execution Vulnerability”Submitted Linux containers in 500 lines of code as a story · 3 points
HN discussionI couldn't find anything, so I wrote some https://blog.lizzie.io/notes-about-cve-2016-7117.html
Comment linking /notes-about-cve-2016-7117.html
on “Linux Kernel Use-After-Free Remote Code Execution Vulnerability”Submitted Clickjacking Chrome Extensions as a story · 2 points
HN discussionhttps://blog.lizzie.io/linux-containers-in-500-loc.html
Comment linking /linux-containers-in-500-loc.html
on “Ask HN: Good resources on learning how docker works under the hood?”Submitted Linux containers in 500 lines of code as a story · 2 points
HN discussionThere is a similar project _Linux containers in 500 lines of code_ [1], the code is a bit old, but the procedure is quite simple. [1]: https://blog.lizzie.io/linux-containers-in-500-loc.html
Comment linking /linux-containers-in-500-loc.html
on “Barco: Linux Containers from Scratch in C”Submitted Exploiting CVE-2016-86 as a story · 2 points
HN discussionSubmitted Notes about CVE-2016-7117 as a story · 2 points
HN discussionSubmitted Notes about CVE-2016-7117 as a story · 2 points
HN discussionSubmitted Linux containers in 500 lines of code (2017) as a story · 1 points
HN discussionSubmitted Preventing USB Attacks with Grsecurity as a story · 1 points
HN discussionSubmitted Notes about CVE-2016-7117 as a story · 1 points
HN discussionSubmitted Exploiting CVE-2016-8606: a cross-protocol attack on Guile Scheme repls as a story · 1 points
HN discussion
