Top all-time · #17879
Reiners' Weblog
Personal blog · websec.wordpress.comsecurity
Reiners' Weblog is a personal blog at websec.wordpress.com about security. Since 2010, 4 different Hacker News readers have linked it 4 times. The last post was in 2016, but the archive is still widely read.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link Reiners' Weblog for write-ups of web security flaws, such as parameter parsing vulnerabilities in Rails Action Pack. Commenters compare them to similar exploits in Struts2 and a Java enterprise stack.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
anything about Web Security
Most-linked posts?
- /2012/01/04/multiple-vulnerabilities-in-apache-struts2-and-property-oriented-programming-with-java/3 people · 3 mentions · first linked 2013-01-08
What Hacker News says?
Struts2 had a similar vulnerability last year: http://websec.wordpress.com/2012/01/04/multiple-vulnerabilit...
Comment linking /2012/01/04/multiple-vulnerabilities-in-apache-struts2-and-property-oriented-programming-with-java/
on “Multiple vulnerabilities in parameter parsing in Action Pack”Submitted Exploiting hard filtered SQL Injections as a story · 18 points
HN discussionI just read this today and it is clever and horrific at the same time: http://websec.wordpress.com/2012/01/04/multiple-vulnerabilit...
Comment linking /2012/01/04/multiple-vulnerabilities-in-apache-struts2-and-property-oriented-programming-with-java/
on “Multiple vulnerabilities in parameter parsing in Action Pack”Here's a very, very similar exploit from last year... in a popular enterprise Java stack: http://websec.wordpress.com/2012/01/04/multiple-vulnerabilit...
Comment linking /2012/01/04/multiple-vulnerabilities-in-apache-struts2-and-property-oriented-programming-with-java/
on “Multiple vulnerabilities in parameter parsing in Action Pack”