Top all-time · #14344
RedHunt Labs
Company blog · redhuntlabs.com/blogsecurity
RedHunt Labs is the company blog at redhuntlabs.com, writing about security. Since 2020, 5 different Hacker News readers have linked it 13 times, most often “Scanning Millions of Public Docker Containers – 1000s of Secrets Leaked”. It is still writing: the last post was on 2026-05-14, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
The post argues that the Kubernetes API should not be exposed to the public internet, comparing it to RDP or databases. The thread debates whether that analogy holds.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Continuous Threat Exposure Management (CTEM) platform for security teams. Discover your external attack surface, find data leaks, and prioritize risks. Trusted by enterprises. Book a demo.
Most-linked posts?
- Scanning Millions of Public Docker Containers – 1000s of Secrets Leaked2 people · 2 mentions · first linked 2021-11-11
What Hacker News says?
Of course that's how it works, there are various authentication methods that must be completed [2] to do anything. The author's claim is that similarly like you shouldn't expose RDP to the public internet, you shouldn't expose your k8s API. In practice the difference is that while RDP (or database or WordPress) credentials are vulnerable to bruteforce, in almost all cases k8s clusters are secured by either mtls or j…
Comment linking /blog/unsecured-kubernetes-clusters-exposed/
on “Why the hell is your Kubernetes API public?”Submitted Thousands of unauthenticated databases exposed on the internet – study as a story · 58 points
HN discussionRedHunt Labs is excited to announce the latest updates to our 360° ASM Platform. Our team has been hard at work to bring you even more powerful features, fixes, and enhancements to help you protect your organization's digital assets. Here's a sneak peek of what's new: 1. Our Attack Surface Management Platform is now available on AWS Marketplace, making deployment and integration easier than ever. For more details an…
Comment linking /request-free-trial/
on a deleted threadSubmitted Guide to Android SSL Pinning Bypass (Free eBook) as a story · 5 points
HN discussionAs part of RedHunt Labs' Project Resonance Initiative, we scanned ~170,000 buckets deployed all across the internet only to discover that several thousand of them were misconfigured and leaking secrets! Click to know more about our findings: https://redhuntlabs.com/blog/massive-cloud-scan-revealed-tho... This was all achieved by our in-house scanner BucketLoot ( https://github.com/redhuntlabs/BucketLoot/ ) and for t…
Comment linking /blog/massive-cloud-scan-revealed-thousands-of-exposed-and-leaky-buckets/
on a deleted threadSubmitted Scanning Millions of Public Docker Containers – 1000s of Secrets Leaked as a story · 3 points
HN discussionSubmitted Scanning Millions of Exposed Docker Containers – Thousands of Secrets Leaked as a story · 3 points
HN discussionSubmitted Internet-Wide Analysis of Subdomain Takeover as a story · 3 points
HN discussionSubmitted What Port 80 Revealed About the Internet as a story · 2 points
HN discussionSubmitted A Practical Guide to Attacking JWT (JSON Web Tokens) as a story · 2 points
HN discussionSubmitted Internet-Wide Study: State of SPF, DKIM, and Dmarc as a story · 2 points
HN discussionSubmitted How to Exploit a Domain Takeover Vulnerability as a story · 1 points
HN discussionSubmitted Dependency Confusion Attack – What, Why, and How? as a story · 1 points
HN discussion