Top all-time · #19074
runZero
Company blog · runzero.com/blogsecurity
runZero is the company blog at runzero.com, writing about security. Since 2022, 4 different Hacker News readers have linked it 4 times. It is still writing: the last post was on 2026-11-02, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link runZero's security research posts on exposed remote management firmware (iLO vulnerabilities) and its SSH scanning work (sshamble). The comments cite them as context, with no judgement of the writing.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
runZero, a Dragos company, provides a single source of truth for exposure management in the AI-attack era across your total attack surface. Try it free!
What Hacker News says?
No IT department wants their remote management at BlackHat. https://www.runzero.com/blog/ilo-vulnerabilities/ I'm not sure that iDRAC is much better; haven't checked lately.
Comment linking /blog/ilo-vulnerabilities/
on “Disabling the Intel Management Engine”Submitted Out-of-Band, Part 1: The new gen of IP KVMs and how to find them as a story · 3 points
HN discussionI'm vaguely surprised that https://www.runzero.com/sshamble/ didn't find this. They did a scan over the entire internet trying invalid SSH state machine transitions, which I guess didn't cover this sequence.
Comment linking /sshamble/
on “Unauthenticated Remote Code Execution in Erlang/OTP SSH”Submitted How to find Next.js on your network as a story · 2 points
HN discussion