Top all-time · #9926
IMQ Minded Security Blog
Company blog · blog.mindedsecurity.comsecurity
IMQ Minded Security Blog is the company blog at blog.mindedsecurity.com, writing about security. Since 2011, 8 different Hacker News readers have linked it 8 times. The last post was in 2024, but the archive is still widely read.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link the IMQ Minded Security blog for its web security research, such as DOM-based XSS protection in Chromium and the DOMinator project. Comments mostly point to other security researchers' blogs.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
IMQ Minded Security Research Labs
What Hacker News says?
Some blogs I like (most are not updated very frequently, though): Billy Rios (discovered GIFAR) http://xs-sniper.com/blog/ Michal Zalewski (one of the top security researchers in the world, wrote "The Tangled Web", a must-read) http://lcamtuf.blogspot.com Neal Poole: https://nealpoole.com/blog/ Nir Goldshlager: http://www.nirgoldshlager.com/ Michael Brooks: https://sitewatch.me/en/Blog Nils Jünemann: http://www.nils…
Comment linking /
on “How we hacked Facebook with OAuth2 and Chrome bugs”Submitted Exploiting CVE-2011-2461 on Google.com as a story · 17 points
HN discussionSorry, I meant this: http://blog.mindedsecurity.com/2011/05/dominator-project.htm... (pro version now at: dominator.mindedsecurity.com). This project also implemented JS taint tracking, but for FF. They released 2 versions, an open source version and a pro version, both of these have lagged far behind current FF versions, presumably because it's not easy to maintain these patches. That said, DOMinator pro is still u…
Comment linking /2011/05/dominator-project.html
on “We Built a Protection Against DOM-Based Cross-Site Scripting into Chromium”Submitted Minded Security Blog: DOM XSS on Google Plus One Button as a story · 3 points
HN discussionSubmitted SSL MiTM attack in AFNetworking 2.5.1 – Do Not use it in production as a story · 2 points
HN discussionSubmitted JQuery is a sink as a story · 2 points
HN discussionSubmitted Shhlack – message encryption for Slack as a story · 1 points
HN discussionSubmitted DOM XSS on Google Plus One Button as a story · 1 points
HN discussion
