Top all-time · #2541
NCC Group
Company blog · nccgroup.com/research-blogsecurity
NCC Group is the company blog at nccgroup.com, writing about security. Since 2012, 30 different Hacker News readers have linked it 43 times, most often “Nccgroup”. No feed was found, so read it on the site itself.
Too few sampled comments (23) to say how often HN recommends it.?
Why HN links it
HN readers link NCC Group's research blog for security write-ups on topics such as anti-cheat reverse engineering, Rust hardening, Apple's Private Cloud Compute and USB attacks. Many HN mentions are job postings.
Summarised by Claude from a sample of 23 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Assess, Develop and Manage Cyber Threats. Research-Driven Assessments and Solutions. Address Your Challenges No Matter the Location, Industry, or Sector with NCC Group.
Most-linked posts?
- Nccgroup3 people · 3 mentions · first linked 2023-06-20
- /us/about-us/careers/2 people · 6 mentions · first linked 2020-11-05
- Rustproofing Linux2 people · 3 mentions · first linked 2024-08-29
- USB attacks without physical access [pdf]2 people · 2 mentions · first linked 2014-03-27
What Hacker News says?
There's some other cool tricks you can do, where you symbolically execute using angr or another emulator such as https://github.com/cea-sec/miasm to be able to use control flow graph unflattening. You can also use Intel's PIN framework to do some interesting analysis. Some helpful articles here: - https://calwa.re/reversing/obfuscation/binary-deobfuscation-... - https://www.nccgroup.com/us/research-blog/a-look-at-so…
Comment linking /us/research-blog/a-look-at-some-real-world-obfuscation-techniques/
on “Reverse engineering Call of Duty anti-cheat”Submitted Matasano Security acquired for £8.4m ($13m) - Congrats tptacek as a story · 439 points
HN discussionNCC Group | Security Consultants | Full Time | Remote OR Chicago, Seattle, Austin, Sunnyvale, San Francisco, and Waterloo (US and Canada only) NCC Group is a global expert in cyber security and risk mitigation. Through an unrivaled suite of services, we provide organizations with peace of mind that their most important assets are protected, available and operating as they should be. We are passionate about making th…
Comment linking /us/about-us/careers/
on “Ask HN: Who is hiring? (April 2021)”Submitted Analysis of the Linux backdoor used in Freenode IRC network compromise as a story · 93 points
HN discussionNCC Group | Security Consultants | Full Time | Remote OR Chicago, Seattle, Austin, Sunnyvale, San Francisco, and Waterloo (US and Canada only) NCC Group is a global expert in cyber security and risk mitigation. Through an unrivaled suite of services, we provide organizations with peace of mind that their most important assets are protected, available and operating as they should be. We are passionate about making th…
Comment linking /us/about-us/careers/
on “Ask HN: Who is hiring? (January 2021)”Submitted USB attacks without physical access [pdf] as a story · 18 points
HN discussionAWS Nitro (and Nitro Enclaves) are general computing platforms, so it's different. You'd need to write a PCC-like system/application on top of AWS Nitro Enclaves to make a direct comparison. A breakdown of those 5 core requirements from Apple: 1. Stateless computation on personal user data - a property of the application 2. Enforceable guarantees - a property of the application; Nitro Enclaves attestation helps here…
Comment linking /us/research-blog/public-report-aws-nitro-system-api-security-claims/
on “Private Cloud Compute Security Guide”Submitted eBPF Verifier Code Review – NCC Group [pdf] as a story · 14 points
HN discussionNCC Group | Security Consultants | Full Time | Remote OR Chicago, Seattle, Austin, Sunnyvale, San Francisco, and Waterloo (US and Canada only) NCC Group is a global expert in cyber security and risk mitigation. Through an unrivaled suite of services, we provide organizations with peace of mind that their most important assets are protected, available and operating as they should be. We are passionate about making th…
Comment linking /us/about-us/careers/
on “Ask HN: Who is hiring? (June 2021)”Submitted Cryptography Audit of WhatsApp Contacts as a story · 9 points
HN discussionNCC Group | Security Consultants | Full Time | Remote OR Chicago, Seattle, Austin, Sunnyvale, San Francisco, and Waterloo (US and Canada only) NCC Group is a global expert in cyber security and risk mitigation. Through an unrivaled suite of services, we provide organizations with peace of mind that their most important assets are protected, available and operating as they should be. We are passionate about making th…
Comment linking /us/about-us/careers/
on “Ask HN: Who is hiring? (August 2021)”Submitted USB attacks need physical access right? Not any more... as a story · 5 points
HN discussionNCC Group | Security Consultants | Full Time | Remote OR Chicago, Seattle, Austin, Sunnyvale, San Francisco, and Waterloo (US and Canada only) NCC Group is a global expert in cyber security and risk mitigation. Through an unrivalled suite of services, we provide organizations with peace of mind that their most important assets are protected, available and operating as they should be. We are passionate about making t…
Comment linking /us/about-us/careers/
on “Ask HN: Who is hiring? (November 2020)”Submitted Public Report from NCC Group: Google Private AI Compute Review as a story · 4 points
HN discussionNCC Group | Security Consultants | Full Time | Remote OR Chicago, Seattle, Austin, Sunnyvale, San Francisco, and Waterloo (US and Canada only) NCC Group is a global expert in cyber security and risk mitigation. Through an unrivaled suite of services, we provide organizations with peace of mind that their most important assets are protected, available and operating as they should be. We are passionate about making th…
Comment linking /us/about-us/careers/
on “Ask HN: Who is hiring? (December 2020)”Submitted Adventures in Xen exploitation (walk through) – CVE-2012-0217 as a story · 2 points
HN discussionAs others have noted, many of these issues are fundamental to XML DSig, which is insecure by design. [1] However, the “what does the future hold” of OIDC is not much brighter. OIDC is based on JSON Web Tokens (JWT), which manages to avoid some of these issues (e.g. signs the encoded value), but introduces new ones (JSON interpretation bugs, algorithm substitution bugs, etc). They’re similarly terrible by design [2].…
Comment linking /globalassets/resources/us/presentations/isec-hill-attacking-xml-security-bh07.pdf
on “SAML Is Insecure by Design”Submitted Analysis of setting cookies for third party websites in different browsers as a story · 2 points
HN discussionAges ago we intentionally configured MTA's to prevent enumeration and validation of email addresses on purpose. This appears to be a convoluted way to unwind that change and in my opinion would be heavily abused by shady email marketing groups on day 1. With all due respect I would never implement this in a company and would fight it. I choose my battles carefully before presenting them to the board until groups suc…
Comment linking /
on “Email verification protocol”Submitted The Cartographer's Advantage: Human Judgment in an AI Security World as a story · 1 points
HN discussionNot for a little while now. The escrow business was sold to NCC: https://www.nccgroup.com/us/newsroom/ncc-group-launches-esco...
Comment linking /us/newsroom/ncc-group-launches-escode/
on “Iron Mountain: It's Time to Talk About Hard Drives”Submitted Rustproofing Linux as a story · 1 points
HN discussionI do wonder if it is using something like this [0], but then there is always PrivacyLRS[1]. [0] https://www.nccgroup.com/us/research-blog/technical-advisory... [1] https://github.com/sensei-hacker/PrivacyLRS
Comment linking /us/research-blog/technical-advisory-expresslrs-vulnerabilities-allow-for-hijack-of-control-link/
on “Portable drone jammer uses a Raspberry Pi tactical Software Defined Radio”Submitted Nccgroup as a story · 1 points
HN discussionApparently link moved to https://www.nccgroup.com/us/research-blog/rustproofing-linux...
Comment linking /us/research-blog/rustproofing-linux-part-14-leaking-addresses/
on “Rustproofing Linux (Part 1/4 Leaking Addresses) (2023)”Submitted Ninja Threat Modeling as a story · 1 points
HN discussionOdd. A search also provides https://www.nccgroup.com/us/research-blog/rustproofing-linux...
Comment linking /us/research-blog/rustproofing-linux-part-14-leaking-addresses/
on “Rustproofing Linux (Part 1/4 Leaking Addresses) (2023)”Submitted Abusing Blu-Ray Players – Sandbox Escapes as a story · 1 points
HN discussionhttps://www.nccgroup.com/us/about-us/newsroom-and-events/blo... How relevant is it today?
Comment linking /us/about-us/newsroom-and-events/blog/2011/august/javascript-cryptography-considered-harmful/
on “Stanford JavaScript Crypto Library”Submitted NCC Group to open .trust domain for registration as a story · 1 points
HN discussion
