Top all-time · #3006
Richard Bejtlich
Personal blog · taosecurity.blogspot.comsecurity
Richard Bejtlich writes TaoSecurity Blog, a personal blog at taosecurity.blogspot.com about security. Since 2007, 25 different Hacker News readers have linked it 39 times. It is still writing: the last post was on 2026-07-17, and you can follow it by feed.
Richard Bejtlich's blog on digital security, strategic thought, and military history.
Most-linked posts?
- /2 people · 2 mentions · first linked 2009-08-10
What Hacker News says?
Kind of a funny choice of names, "dark visitor" is a common English translation of 黑客, the title of a book[1] about hacking in China, for example. 1: https://taosecurity.blogspot.com/2008/02/review-of-dark-visi...
Comment linking /2008/02/review-of-dark-visitor.html
on “Dark Visitors – A list of known AI agents on the internet”Submitted Steve Jobs Understands Team Building as a story · 119 points
HN discussionThis is the primary reason I use ad blocking. Privacy is another (e.g., http://taosecurity.blogspot.com/2013/10/mozilla-lightbeam-ad... ). I don't mind ads so much as I mind surveillance.
Comment linking /2013/10/mozilla-lightbeam-add-on-shows-risk-of.html
on “The anterolateral ligament: Wrong information on the Internet”Submitted Cooking the Cuckoo's Egg as a story · 22 points
HN discussionThe Cuckoo's Egg is a fantastic book and definitely worth a read for regardless of forensic interest. It's very well written and a great story. The slide author is one of the most knowledgeable experts on incident response today, his blog[1] is definitely worth a read now and again. If you want to see what large scale operations look like today, the Ghostnet report[2] makes for compelling reading. [1] - http://taose…
Comment linking /
on “Cooking the Cuckoo's Egg”Submitted The Tragedy of the Bloomberg Code Issue as a story · 10 points
HN discussionRead the Kapersky analysis, it starts to answer your questions regarding the reuse of Shamoon by NK. Doesn't matter though, my point was, this was not the media regurgitating a US gov opinion as the comment I replied to claimed. I agree that the publically available evidence is never 100%, but the malware samples and c&c infrastructure point to NK. If you have evidence that someone else did it, that would be interes…
Comment linking /2014/12/what-does-responsibility-mean-for.html?m=1
on “Sony 'Hack' Shows How Eagerly U.S. Media Still Regurgitate Government Claims”Submitted Seven Security Strategies, Summarized as a story · 4 points
HN discussionQuite a few: http://slashdot.org http://serverfault.com http://securityfocus.com http://sucuri.net http://matasano.com/log (well, while it was up and I hope it comes back).. http://taosecurity.blogspot.com http://linux.com
Comment linking /
on “Ask HN: What websites do you frequent?”Submitted Continuous Diagnostic Monitoring Does Not Detect Hackers as a story · 4 points
HN discussionYes. And they're not shy about it either. "The way in which the J-20 was unveiled also reflects China’s use and control of information technology to support national interests. The test airfield is located in the city of Chengdu and is not secure, with many public viewing points. Photography is technically forbidden, but reports suggest that patrols have been permitting the use of cell phone cameras." http://taosecu…
Comment linking /2011/01/more-on-chinese-stealth-fighter-and-apt.html
on “Black Silk - Chinese J-20 Stealth Fighter Takes Off”Submitted Going Too Far to Prove a Point as a story · 3 points
HN discussionTheir blog is pretty good: http://blog.sucuri.net . I also like: http://taosecurity.blogspot.com and http://scheneier.com
Comment linking /
on “Offer HN: Hosting security / web site security / web malware removal help”Submitted The Attack on GitHub Must Stop as a story · 3 points
HN discussionSubmitted Why Would Iran Welcome Western Tech? as a story · 3 points
HN discussionSubmitted Where Russia and North Korea Meet as a story · 3 points
HN discussionSubmitted Stop Killing Innovation as a story · 3 points
HN discussionSubmitted Retrieving Deleted Files on the Commodore C64 in 1987 as a story · 2 points
HN discussionSubmitted Ping Tunnel and Telnet: Tunnel TCP over ICMP (2005) as a story · 2 points
HN discussionSubmitted If You Can't Patch Your Email Server, You Should Not Be Running It as a story · 2 points
HN discussionSubmitted Bejtlich Moves On as a story · 2 points
HN discussionSubmitted Focus on the Threat: Bank Heists as a story · 2 points
HN discussionSubmitted Are Nation States Responsible for Evil Traffic Leaving Their Networks? as a story · 2 points
HN discussionSubmitted Forget ROI and Risk. Consider Competitive Advantage as a story · 2 points
HN discussionSubmitted Key Network Questions as a story · 1 points
HN discussionSubmitted Not So Fast! Boyd OODA Looping Is More Than Speed (2015) as a story · 1 points
HN discussionSubmitted Dissecting Weird Packets as a story · 1 points
HN discussionSubmitted Bejtlich on the APT1 Report: No Hack Back as a story · 1 points
HN discussionSubmitted Five Reasons I Want China Running Its Own Software as a story · 1 points
HN discussionSubmitted What Year Is This? as a story · 1 points
HN discussion
