Top all-time · #5654
LevelBlue SpiderLabs Blog
Company blog · blog.gdssecurity.comsecurity
LevelBlue SpiderLabs Blog is the company blog at blog.gdssecurity.com, writing about security. Since 2014, 14 different Hacker News readers have linked it 17 times, most often “JetLeak Vulnerability: Remote Leakage of Shared Buffers in Jetty Web Server”. It is still writing: the last post was on 2026-10-30, and you can follow it by feed.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN readers link the SpiderLabs security research blog for technical vulnerability write-ups, such as the JetLeak flaw in Jetty caused by sharing a buffer between requests, and Linux in-memory ELF execution.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
The security community's go-to destination for technical breakdowns of the latest threats, critical vulnerability disclosures and cutting-edge research.
Most-linked posts?
- JetLeak Vulnerability: Remote Leakage of Shared Buffers in Jetty Web Server3 people · 3 mentions · first linked 2015-02-25
- CUPS Local Privilege Escalation and Sandbox Escapes2 people · 2 mentions · first linked 2018-07-12
- An Analysis of CVE-2017-5638 – how Equifax was hacked2 people · 2 mentions · first linked 2017-09-17
- Linux Based Inter-Process Code Injection Without Ptrace(2)2 people · 2 mentions · first linked 2017-09-22
What Hacker News says?
What's recent? https://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerab... https://blog.cloudflare.com/dns-parser-meet-go-fuzzer/ https://rustsec.org/advisories/RUSTSEC-2018-0004.html
Comment linking /labs/2015/2/25/jetleak-vulnerability-remote-leakage-of-shared-buffers-in-je.html
on “How safe is Zig?”Submitted An Analysis of CVE-2017-5638 – how Equifax was hacked as a story · 132 points
HN discussionAh it, was called JetLeak -- http://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerabi...
Comment linking /labs/2015/2/25/jetleak-vulnerability-remote-leakage-of-shared-buffers-in-je.html
on “Would Rust have prevented Heartbleed? Another look”Submitted Reviewing Ethereum Smart Contracts as a story · 99 points
HN discussionI don't know why this was downvoted. This vulnerability in Jetty was the result of sharing a buffer between requests: http://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerabi...
Comment linking /labs/2015/2/25/jetleak-vulnerability-remote-leakage-of-shared-buffers-in-je.html
on “A Well Known but Forgotten Trick: Object Pooling”Submitted CUPS Local Privilege Escalation and Sandbox Escapes as a story · 50 points
HN discussionSimilar - https://blog.gdssecurity.com/labs/2017/9/5/linux-based-inter...
Comment linking /labs/2017/9/5/linux-based-inter-process-code-injection-without-ptrace2.html
on “In-Memory-Only ELF Execution Without Tmpfs”Submitted CUPS Local Privilege Escalation and Sandbox Escapes as a story · 6 points
HN discussionSubmitted Node.js Server-Side JavaScript Injection Detection & Exploitation as a story · 5 points
HN discussionSubmitted Remote Code Execution in BlackBerry Workspaces Server as a story · 4 points
HN discussionSubmitted JetLeak Vulnerability: Remote Leakage of Shared Buffers in Jetty Web Server as a story · 4 points
HN discussionSubmitted Linux Based Inter-Process Code Injection Without Ptrace(2) as a story · 3 points
HN discussionSubmitted Equifax hack explained (Struts 2/Java web application) as a story · 2 points
HN discussionSubmitted Reverse Shell Over SMS as a story · 2 points
HN discussionSubmitted Auditing Scala for Insecure Code with FindBugs as a story · 2 points
HN discussionSubmitted Introducing EvilAbigail as a story · 1 points
HN discussionSubmitted Exploiting Padding Oracle to Gain Encryption Keys as a story · 1 points
HN discussion
