Top all-time · #9486
m417z / blog
Personal blog · m417z.com · on HN as m417zsecurityprogramming
m417z / blog is a personal blog at m417z.com about security and programming. Since 2019, 8 different Hacker News readers have linked it 12 times, most often “De-Anonymization via Clickjacking in 2019”. The last post was in 2024, but the archive is still widely read.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link m417z's security and reverse-engineering posts, including a clickjacking de-anonymization write-up and Winbindex, an index of Windows files from update packages. The comments are questions and links, with no judgement of the writing.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
A Blog About Stuff
Most-linked posts?
- De-Anonymization via Clickjacking in 20192 people · 3 mentions · first linked 2019-10-28
- Winbindex – The Windows Binaries Index2 people · 2 mentions · first linked 2020-07-23
- /De-anonymization-via-Clickjacking-in-2019/?demo2 people · 2 mentions · first linked 2020-01-29
- The De-Anonymization of the Technion Confessions Admin (XSS, Social Engineering)2 people · 2 mentions · first linked 2019-11-21
What Hacker News says?
Not sure exactly where the proof of concept is. Is it this page? https://m417z.com/De-anonymization-via-Clickjacking-in-2019/... I tried it in latest Firefox with uBlock & HTTPS Everywhere and it leads me to a 'captcha' page similar to Cloudflare's but there's no actual captcha box. Nothing seems to happen... Is it uBlock protecting me or is it that I've completely disabled all third party cookies?
Comment linking /De-anonymization-via-Clickjacking-in-2019/?demo
on “De-Anonymization via Clickjacking in 2019”Submitted De-Anonymization via Clickjacking in 2019 as a story · 115 points
HN discussionIf the attack is broken for you and is blocking you from reading the article, here's a demo video at least showing the attack: https://m417z.com/images/De-anonymization-via-Clickjacking-i... And here's a link that lets you reveal the attack: https://m417z.com/De-anonymization-via-Clickjacking-in-2019/...
Comment linking /De-anonymization-via-Clickjacking-in-2019/?demo
on “De-Anonymization via Clickjacking in 2019”Submitted Implementing Global Injection and Hooking in Windows as a story · 72 points
HN discussionAs author, m417z [1] wrote: > I indexed all Windows files which appear in Windows update packages, and created a website which allows to quickly view information about the files and download some of them from Microsoft servers [1] - https://m417z.com/Introducing-Winbindex-the-Windows-Binaries...
Comment linking /Introducing-Winbindex-the-Windows-Binaries-Index/
on “Winbindex – index of Windows files which appear in WU packages”Submitted Winbindex – The Windows Binaries Index as a story · 3 points
HN discussionSubmitted The De-Anonymization of the Technion Confessions Admin as a story · 3 points
HN discussionSubmitted The De-Anonymization of the Technion Confessions Admin (XSS, Social Engineering) as a story · 3 points
HN discussionSubmitted De-Anonymization via Clickjacking in 2019 as a story · 2 points
HN discussionSubmitted Winbindex – index of Windows files which appear in WU packages as a story · 1 points
HN discussionSubmitted De-Anonymization via Clickjacking in 2019 as a story · 1 points
HN discussion