Top all-time · #19199
Nick Frichette
Personal blog · frichetten.com/blogsecurityprogramming
Nick Frichette's personal blog at frichetten.com covers security and programming. Since 2020, 4 different Hacker News readers have linked it 4 times. It is still writing: the last post was on 2026-07-10, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for write-ups of CVEs, such as the Pi-hole remote code execution issues. The comment cites a post on CVE-2020-11108 as the description of how the Pi-hole flaw works.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
The personal website of Nick Frichette, Software Developer and Security Researcher
What Hacker News says?
Regarding the older CVE-2020-8816: The code sent in the request is executed using sudo. From there, the code can use curl/wget to download a script from a specified server, and execute the script as root and take over the device. For this CVE, here is a description: https://frichetten.com/blog/cve-2020-11108-pihole-rce/
Comment linking /blog/cve-2020-11108-pihole-rce/
on “Pi-hole 4.4.0 Remote Code Execution”Submitted XSS in the AWS Console as a story · 2 points
HN discussionSubmitted A Look at AWS API Protocols as a story · 1 points
HN discussionSubmitted Enumerate AWS API Permissions Without Logging to CloudTrail as a story · 1 points
HN discussion