Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #6985

S

Sebastian Neef

Personal blog · 0day.worksecurityprogramming

Sebastian Neef's personal blog at 0day.work covers security and programming. Since 2015, 11 different Hacker News readers have linked it 49 times, most often “An example why NAT is NOT security”. It is still writing: the last post was on 2025-07-08, and you can follow it by feed.

Visit the blog
49mentions?
11HN people?
2015–2024first – last linked?
Links on Hacker News per year · peak 12 in 2018

Too few sampled comments (3) to say how often HN recommends it.?

Why HN links it

HN readers link Sebastian Neef's blog for posts on PGP encryption in the browser, the Shift_JIS yen-sign path quirk, and why NAT is not security. Commenters cite these posts as sources or examples.

Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

Just another security blog by Sebastian Neef

Most-linked posts?

  1. An example why NAT is NOT security
    4 people · 4 mentions · first linked 2019-03-07
  2. Parsing the .DS_Store File Format
    3 people · 3 mentions · first linked 2018-03-12
  3. Scanning firewalls for differences in IPv4 and IPv6 rules
    2 people · 2 mentions · first linked 2016-03-28
  4. Downloading SSH Keys via DNS
    2 people · 2 mentions · first linked 2018-02-06
  5. Wordpress InfiniteWP Client Admin Authentication Bypass
    2 people · 2 mentions · first linked 2020-01-15
  6. Using neural networks for password cracking
    2 people · 2 mentions · first linked 2016-01-07
  7. Performance of Iodine over DNS-over-HTTPS
    2 people · 2 mentions · first linked 2019-02-27
  8. Scanning the Alexa Top 1M for Git Daemons
    2 people · 2 mentions · first linked 2018-06-25

What Hacker News says?

  1. Not sure if I understood it correctly, but in essence it lets your users enter some (secret) content which is then encrypted in the browser using PGP. Except for the message signing and auto-emailing, I've implemented something similar: Blogpost: https://0day.work/easy-pgp-composer-encrypting-pgp-messages-... GitHub: https://github.com/gehaxelt/PHP-Easy-PGP-Composer Demo: http://pgpcomposer.demo.0day.work/

    Comment linking /easy-pgp-composer-encrypting-pgp-messages-in-your-browser/

    on “Show HN: Get encrypted data from people that don’t know how to encrypt”
  2. Submitted Using a Yubikey for GPG and SSH as a story · 445 points

    HN discussion
  3. Now that I live in Japan, I've come to learn that for Japanese Windows users, seeing the ¥ symbol as a path separator is normal , it isn't a quirk or a bug. In fact, IIRC the copy machine in the closest convenience store shows a ¥ as the path separator when browsing a USB drive, even though I'm almost certain it's not running Windows. A few years back, I wrote a CTF challenge around this quirk of SHIFT_JIS. It used…

    Comment linking /boston-key-party-ctf-2016-writeups/

    on “But What's Up with That ¥?”
  4. Submitted Hacking with LaTeX as a story · 102 points

    HN discussion
  5. xvilka · 2024-10-21Recommends
    Here is the very simple but practical explanation why: https://0day.work/an-example-why-nat-is-not-security/ And more high-level explanation as well: https://www.f5.com/resources/white-papers/the-myth-of-networ...

    Comment linking /an-example-why-nat-is-not-security/

    on “The IPv6 Transition”
  6. Submitted Writing my first shellcode as a story · 94 points

    HN discussion
  7. Submitted Pwning your web server the easy way or why exposing –/.ssh/ is a bad idea as a story · 71 points

    HN discussion
  8. Submitted Finding an arbitrary file upload vulnerability in a filesharing script as a story · 37 points

    HN discussion
  9. Submitted Performance of Iodine over DNS-over-HTTPS as a story · 28 points

    HN discussion
  10. Submitted How I recovered your private key or why small keys are bad as a story · 5 points

    HN discussion
  11. Submitted Parsing the .DS_Store File Format as a story · 4 points

    HN discussion
  12. Submitted Performance of Iodine over DNS-over-HTTPS as a story · 4 points

    HN discussion
  13. Submitted Downloading SSH Keys via DNS as a story · 4 points

    HN discussion
  14. Submitted An example why NAT is NOT security as a story · 3 points

    HN discussion
  15. Submitted An example why NAT is NOT security as a story · 3 points

    HN discussion
  16. Submitted How to configure PXE network booting for Kali Linux as a story · 3 points

    HN discussion
  17. Submitted Tunneling all traffic over DNS with a SOCKS proxy as a story · 3 points

    HN discussion
  18. Submitted Jinja2 template injection filter bypasses as a story · 3 points

    HN discussion
  19. Submitted Don't format, overwrite before you sell – Recovering data from 2nd hand HDDs as a story · 3 points

    HN discussion
  20. Submitted Scanning firewalls for differences in IPv4 and IPv6 rules as a story · 3 points

    HN discussion
  21. Submitted Using neural networks for password cracking as a story · 3 points

    HN discussion
  22. Submitted Easy PGP Composer – Encrypting PGP Messages in Your Browser as a story · 3 points

    HN discussion
  23. Submitted Proof of Concept for "viewing unauthenticated posts" in Wordpress 5.2.3 as a story · 2 points

    HN discussion
  24. Submitted CVE-2019-11360: BufferOverflow in iptables-restore v1.8.2 as a story · 2 points

    HN discussion
  25. Submitted Dockerized Tor Onion Services with Vanity v3 Tor Addresses as a story · 2 points

    HN discussion
  26. Submitted Parsing the .DS_Store file format as a story · 2 points

    HN discussion
  27. Submitted Parsing the .DS_Store file format as a story · 2 points

    HN discussion
  28. Submitted Protecting against spam by receiving more spam as a story · 2 points

    HN discussion
  29. Submitted Locking the screen when removing a Yubikey as a story · 2 points

    HN discussion
  30. Submitted Being confident: How I could have gotten into the IFA for free as a story · 2 points

    HN discussion

Search all of HN for 0day.work

Linked by the same people?