Top all-time · #19380
Jon Bottarini
Personal blog · jonbottarini.comsecurity
Jon Bottarini's personal blog at jonbottarini.com covers security. Since 2017, 4 different Hacker News readers have linked it 7 times. The last post was in 2021, but the archive is still widely read.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN commenters link Jon Bottarini's posts on iOS and Safari security, including a phishing post and a 2017 post on bypassing iOS parental restrictions. The comments cite them as examples and do not assess the writing.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Security research and bug bounty writeups by Jon Bottarini, covering vulnerabilities in Apple, Stripe, New Relic and more.
Most-linked posts?
- /2021/12/09/dont-reply-a-clever-phishing-method-in-apples-mail-app/2 people · 2 mentions · first linked 2022-01-29
What Hacker News says?
Don't [0] worry, they're[1] perfectly happy[2] to catch[3] up on the[4] critical vulnerability[5] front. [0] https://jonbottarini.com/2021/12/09/dont-reply-a-clever-phis... [1] https://www.theverge.com/2022/1/16/22886809/safari-15-bug-le... [2] https://nvd.nist.gov/vuln/detail/CVE-2021-30858 [3] https://www.ryanpickren.com/safari-uxss [4] https://www.cvedetails.com/cve/CVE-2021-30954/ [5] https://www.exploit-db.com/…
Comment linking /2021/12/09/dont-reply-a-clever-phishing-method-in-apples-mail-app/
on “Unlisted App Distribution”Submitted Abusing Internal API to Achieve IDOR in New Relic as a story · 1 points
HN discussionAside from Filedescriptor's work, here are some of my favourite blogs in the web application security space (not an exhaustive list): - https://blog.orange.tw/ - https://ngailong.wordpress.com/ - https://whitton.io/ - https://sakurity.com/blog - https://homakov.blogspot.com/ - https://buer.haus/ - https://philippeharewood.com/ - https://portswigger.net/research - https://gerbenjavado.com/ - https://medium.com/@intid…
Comment linking /
on “Google YOLO clickjacking (2018)”Submitted (SFW) Penetrating Pornhub – Hacking PornHub for $$$ and Tshirts as a story · 1 points
HN discussionWhat’s peculiar about this is that parental restrictions itself on iOS has always been flawed, Apple knew about it, and it’s still an issue to this day. The sole purpose of parental restrictions on iPhone was to block adult websites... and that worked as well as you can imagine: https://www.jonbottarini.com/2017/03/09/bypassing-apples-ios...
Comment linking /2017/03/09/bypassing-apples-ios-10-restrictions-settings-twice/
on “How Apple's Screen Time is outsmarted by kids, frustrating parents”Submitted Bypassing Apple's iOS 10 Parental Restrictions – Twice as a story · 1 points
HN discussionAt least in the past there has been instances where Apple sat on security bugs for years until they were fixed, one example: https://jonbottarini.com/2021/12/09/dont-reply-a-clever-phis... I've heard they cleaned up their program recently to respond much quicker nowadays
Comment linking /2021/12/09/dont-reply-a-clever-phishing-method-in-apples-mail-app/
on “A 0-click exploit chain for the Pixel 10”