Top all-time · #12395
Schibsted
Company blog · schibsted.com/blogsecurityprogramming
Schibsted is the company blog at schibsted.com, writing about security and programming. Since 2015, 6 different Hacker News readers have linked it 6 times, most often “How we protected ourselves from the Dependency Confusion attack”. It is still writing: the last post was on 2026-02-03, and you can follow it by feed.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN readers link Schibsted's corporate site as a reference for the media and classifieds conglomerate, and in a hiring post for its Barcelona team. The comments do not discuss any writing.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
What began as a small publishing house in 1839 is now a media house with some of the strongest news brands in the Nordics.
Most-linked posts?
- How we protected ourselves from the Dependency Confusion attack3 people · 3 mentions · first linked 2021-03-09
- /2 people · 2 mentions · first linked 2015-07-07
What Hacker News says?
Schibsted Classified Media @ Barcelona, Spain http://www.schibsted.com/ # Senior iOS developer [ONSITE] We are looking for senior iOS developers (full time) for building a unique project focused on building state of the art mobile services that power digital marketplaces worldwide, with data and traffic from 30+ of diverse sites. This is a unique opportunity to help design, build, and scale the mobile and multi-chan…
Comment linking /
on “Ask HN: Who is hiring? (July 2015)”Submitted How we protected ourselves from the Dependency Confusion attack as a story · 10 points
HN discussionWe do at Schibsted: http://www.schibsted.com/ .
Comment linking /
on “Scala School”Submitted How we protected ourselves from the Dependency Confusion attack as a story · 1 points
HN discussionIt's 60% owned by Schibsted, one of the largest media conglomerates hailing from the Nordics. They recently spun out their non-Nordic classifieds into a subsidiary and listed it onto the Oslo Stock Exchange. https://schibsted.com/about/who-we-are/adevinta-a-schibsted-... https://en.wikipedia.org/wiki/Schibsted
Comment linking /about/who-we-are/adevinta-a-schibsted-subsidiary/
on “Adevinta wins auction to buy eBay's classified ads unit for nearly $9B: source”Alex Birsan actually published his findings for this vulnerability in Feb 2021 [1], and collected a bunch of bug bounties from various companies (Apple, Microsoft, Paypal, Yelp, Tesla, Shopify, Uber, Netflix). He was able to steal packages names for Python (PyPi), JS (npm), Ruby (Gem), where these various companies have their own private package repositories with private modules where they don't control the package…
Comment linking /blog/dependency-confusion-how-we-protected-ourselves/
on “Compromised PyTorch-nightly dependency chain December 30th, 2022”