Top all-time · #9244
modzero / Blog
Company blog · modzero.com/en/blogsecurity
modzero / Blog is the company blog at modzero.com, writing about security. Since 2020, 8 different Hacker News readers have linked it 10 times, most often “A million+ tenants worth of data accessible via every install of Synology”. It is still writing: the last post was on 2026-06-03, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link this security research blog for posts on vulnerabilities in widely used products. The linked post covers how backup software setup can open a backdoor, in this case Synology's Microsoft 365 backup.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- A million+ tenants worth of data accessible via every install of Synology2 people · 2 mentions · first linked 2025-06-28
What Hacker News says?
What should be noted, a cost effective M365 backup solution "Synology Active Backup for Microsoft 365" has an external server requirement for OAUTH: https://kb.synology.com/en-af/DSM/help/ActiveBackup-Office36... That seems to have created possibility for quite serious exploit: https://modzero.com/en/blog/when-backups-open-backdoors-syno...
Comment linking /en/blog/when-backups-open-backdoors-synology-active-backup-m365/
on “Synology reverses policy banning third-party HDDs”Submitted Ridiculous vulnerability disclosure process with CrowdStrike Falcon Sensor as a story · 317 points
HN discussionSubmitted No Leak, No Problem – Bypassing ASLR with a ROP Chain to Gain RCE as a story · 114 points
HN discussionSubmitted Ridiculous vulnerability disclosure process with CrowdStrike Falcon [2022] as a story · 74 points
HN discussionSubmitted A million+ tenants worth of data accessible via every install of Synology as a story · 7 points
HN discussionSubmitted MailCleaner security disclosure report [pdf] as a story · 3 points
HN discussionSubmitted Better Make Sure Your Password Manager Is Secure as a story · 3 points
HN discussionSubmitted ROPing Our Way to RCE as a story · 1 points
HN discussionSubmitted Exploiting Email Address Flexibility for Offensive Purposes as a story · 1 points
HN discussionSubmitted Netgear meshed(*) up WiFi for Business as a story · 1 points
HN discussion
