Top all-time · #3894
Lenny Zeltser
Personal blog · zeltser.comsecuritycareer
Lenny Zeltser's personal blog at zeltser.com covers security and career. Since 2010, 20 different Hacker News readers have linked it 20 times, most often “Tunneling Data and Commands Over DNS to Bypass Firewalls”. It is still writing: the last post was on 2026-09-24, and you can follow it by feed.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN commenters link Lenny Zeltser's posts as sources on security topics: Docker and browser isolation, padlock and favicon trust in browsers, and DNS tunnelling. The comments only cite or link them, without judging the writing.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Builder of security products and programs. Teacher of those who run them. Cybersecurity executive, SANS Faculty Fellow, and creator of REMnux.
Most-linked posts?
- /security-risks-and-benefits-of-docker-application/3 people · 3 mentions · first linked 2015-07-23
- Tunneling Data and Commands Over DNS to Bypass Firewalls2 people · 2 mentions · first linked 2015-07-12
What Hacker News says?
I'm not sure if docker is the right solution here, a VM would seem to be much better at this kind of isolation. https://zeltser.com/security-risks-and-benefits-of-docker-ap...
Comment linking /security-risks-and-benefits-of-docker-application/
on “Firefox exploit found in the wild”Submitted Cybersecurity Checklist for Political Campaigns as a story · 100 points
HN discussion> ...with the advertisers’ favicon, to increase transparency. My mom thinks any URL with a padlock next to it is über secure [0][1] and that she can give her bank details without worry. [0] https://zeltser.com/padlock-and-favicon-confusion-in-browser... [1] https://support.cloudflare.com/hc/en-us/articles/200170416-W...
Comment linking /padlock-and-favicon-confusion-in-browsers/
on “Increasing transparency through advertiser identity verification”Submitted Tunneling Data and Commands Over DNS to Bypass Firewalls as a story · 70 points
HN discussionIt would actually be less secure to run your browser in a Docker container. If an attacker can break out of the container, it has root access to your system. https://zeltser.com/security-risks-and-benefits-of-docker-ap...
Comment linking /security-risks-and-benefits-of-docker-application/
on “Comparing how security experts and non-experts stay safe online”Submitted Tips for Troubleshooting Human Communications as a story · 25 points
HN discussionFor your convenience here are the URLs from that broken document: http://blog.bofh.it/debian/id_413 http://reventlov.com/advisories/using-the-docker-command-to-... http://events.linuxfoundation.org/sites/events/files/slides/... http://opensource.com/business/14/9/security-for-docker https://zeltser.com/security-risks-and-benefits-of-docker-ap... https://benchmarks.cisecurity.org/tools2/docker/CIS_Docker_1... https:/…
Comment linking /security-risks-and-benefits-of-docker-application/
on “Docker and Security [pdf]”Submitted REMnux: A Linux Distribution for Reverse-Engineering Malware as a story · 15 points
HN discussionAny type of traffic can be used to tunnel other types of traffic. You can tunnel over DNS as well: https://zeltser.com/c2-dns-tunneling/
Comment linking /c2-dns-tunneling/
on “Advanced Ping: httping, dnsping, smtpping”Submitted Conversation with a Tech Support Scammer as a story · 7 points
HN discussionSubmitted Experimenting with Honeypots Using the Modern Honey Network as a story · 5 points
HN discussionSubmitted The Illusion of Invulnerability in Cybersecurity as a story · 3 points
HN discussionSubmitted How to Get and Set Up a Free Windows VM for Malware Analysis as a story · 3 points
HN discussionSubmitted How You Can Set Up Honeytokens Using Canarytokens to Detect Intrusions as a story · 3 points
HN discussionSubmitted REMnux: A Linux Distribution for Reverse-Engineering Malware as a story · 3 points
HN discussionSubmitted A Field Guide to the AI Security Market as a story · 2 points
HN discussionSubmitted Run Metasploit Framework as a Docker Container as a story · 2 points
HN discussionSubmitted Version 7 of the REMnux Distro Is Now Available as a story · 1 points
HN discussionSubmitted Third-party-keyboards-security as a story · 1 points
HN discussionSubmitted How to Suck at Information Security by Lenny Zeltser as a story · 1 points
HN discussion
