Top all-time · #6985
Sebastian Neef
Personal blog · 0day.worksecurityprogramming
Sebastian Neef's personal blog at 0day.work covers security and programming. Since 2015, 11 different Hacker News readers have linked it 49 times, most often “An example why NAT is NOT security”. It is still writing: the last post was on 2025-07-08, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link Sebastian Neef's blog for posts on PGP encryption in the browser, the Shift_JIS yen-sign path quirk, and why NAT is not security. Commenters cite these posts as sources or examples.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Just another security blog by Sebastian Neef
Most-linked posts?
- An example why NAT is NOT security4 people · 4 mentions · first linked 2019-03-07
- Parsing the .DS_Store File Format3 people · 3 mentions · first linked 2018-03-12
- Scanning firewalls for differences in IPv4 and IPv6 rules2 people · 2 mentions · first linked 2016-03-28
- Downloading SSH Keys via DNS2 people · 2 mentions · first linked 2018-02-06
- Wordpress InfiniteWP Client Admin Authentication Bypass2 people · 2 mentions · first linked 2020-01-15
- Using neural networks for password cracking2 people · 2 mentions · first linked 2016-01-07
- Performance of Iodine over DNS-over-HTTPS2 people · 2 mentions · first linked 2019-02-27
- Scanning the Alexa Top 1M for Git Daemons2 people · 2 mentions · first linked 2018-06-25
What Hacker News says?
Not sure if I understood it correctly, but in essence it lets your users enter some (secret) content which is then encrypted in the browser using PGP. Except for the message signing and auto-emailing, I've implemented something similar: Blogpost: https://0day.work/easy-pgp-composer-encrypting-pgp-messages-... GitHub: https://github.com/gehaxelt/PHP-Easy-PGP-Composer Demo: http://pgpcomposer.demo.0day.work/
Comment linking /easy-pgp-composer-encrypting-pgp-messages-in-your-browser/
on “Show HN: Get encrypted data from people that don’t know how to encrypt”Submitted Using a Yubikey for GPG and SSH as a story · 445 points
HN discussionNow that I live in Japan, I've come to learn that for Japanese Windows users, seeing the ¥ symbol as a path separator is normal , it isn't a quirk or a bug. In fact, IIRC the copy machine in the closest convenience store shows a ¥ as the path separator when browsing a USB drive, even though I'm almost certain it's not running Windows. A few years back, I wrote a CTF challenge around this quirk of SHIFT_JIS. It used…
Comment linking /boston-key-party-ctf-2016-writeups/
on “But What's Up with That ¥?”Submitted Hacking with LaTeX as a story · 102 points
HN discussionHere is the very simple but practical explanation why: https://0day.work/an-example-why-nat-is-not-security/ And more high-level explanation as well: https://www.f5.com/resources/white-papers/the-myth-of-networ...
Comment linking /an-example-why-nat-is-not-security/
on “The IPv6 Transition”Submitted Writing my first shellcode as a story · 94 points
HN discussionSubmitted Pwning your web server the easy way or why exposing –/.ssh/ is a bad idea as a story · 71 points
HN discussionSubmitted Finding an arbitrary file upload vulnerability in a filesharing script as a story · 37 points
HN discussionSubmitted Performance of Iodine over DNS-over-HTTPS as a story · 28 points
HN discussionSubmitted How I recovered your private key or why small keys are bad as a story · 5 points
HN discussionSubmitted Parsing the .DS_Store File Format as a story · 4 points
HN discussionSubmitted Performance of Iodine over DNS-over-HTTPS as a story · 4 points
HN discussionSubmitted Downloading SSH Keys via DNS as a story · 4 points
HN discussionSubmitted An example why NAT is NOT security as a story · 3 points
HN discussionSubmitted An example why NAT is NOT security as a story · 3 points
HN discussionSubmitted How to configure PXE network booting for Kali Linux as a story · 3 points
HN discussionSubmitted Tunneling all traffic over DNS with a SOCKS proxy as a story · 3 points
HN discussionSubmitted Jinja2 template injection filter bypasses as a story · 3 points
HN discussionSubmitted Don't format, overwrite before you sell – Recovering data from 2nd hand HDDs as a story · 3 points
HN discussionSubmitted Scanning firewalls for differences in IPv4 and IPv6 rules as a story · 3 points
HN discussionSubmitted Using neural networks for password cracking as a story · 3 points
HN discussionSubmitted Easy PGP Composer – Encrypting PGP Messages in Your Browser as a story · 3 points
HN discussionSubmitted Proof of Concept for "viewing unauthenticated posts" in Wordpress 5.2.3 as a story · 2 points
HN discussionSubmitted CVE-2019-11360: BufferOverflow in iptables-restore v1.8.2 as a story · 2 points
HN discussionSubmitted Dockerized Tor Onion Services with Vanity v3 Tor Addresses as a story · 2 points
HN discussionSubmitted Parsing the .DS_Store file format as a story · 2 points
HN discussionSubmitted Parsing the .DS_Store file format as a story · 2 points
HN discussionSubmitted Protecting against spam by receiving more spam as a story · 2 points
HN discussionSubmitted Locking the screen when removing a Yubikey as a story · 2 points
HN discussionSubmitted Being confident: How I could have gotten into the IFA for free as a story · 2 points
HN discussion