Top all-time · #10730
MB blog
Personal blog · blog.bentkowski.infosecurityweb
MB blog is a personal blog at blog.bentkowski.info about security and web. Since 2016, 7 different Hacker News readers have linked it 7 times, most often “Vulnerability in Hangouts Chat: how Electron makes open redirect great again”. The last post was in 2018, but the archive is still widely read.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Security research posts on web vulnerabilities. One commenter links it as background on a Google Chat open-redirect bug that led to RCE, where security features were not inherited by child windows.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Vulnerability in Hangouts Chat: how Electron makes open redirect great again4 people · 4 mentions · first linked 2018-07-24
What Hacker News says?
This is related to the recent disclosure about how open redirects in Google Chat can lead to RCE [0]. The bugs are related to security features not being correctly inherited across child windows (e.g. iframes). [0]: https://blog.bentkowski.info/2018/07/vulnerability-in-hangou...
Comment linking /2018/07/vulnerability-in-hangouts-chat-aka-how.html
on “CVE-2018-15685 – Electron WebPreferences Remote Code Execution”Submitted Vulnerability in Hangouts Chat: how Electron makes open redirect great again as a story · 100 points
HN discussionSubmitted Firefox – Same-Origin Policy Bypass (CVE-2015-7188) as a story · 32 points
HN discussionSubmitted Vulnerability in Hangouts Chat aka how Electron makes open redirect great again as a story · 4 points
HN discussionSubmitted Vulnerability in Hangouts Chat a.k.a. how Electron makes open redirects great as a story · 2 points
HN discussionSubmitted Vulnerability in Hangouts Chat as a story · 1 points
HN discussionSubmitted XSS-es in Google Caja as a story · 1 points
HN discussion
