Top all-time · #1711
SEC Consult
Company blog · sec-consult.com/blogsecurity
SEC Consult is the company blog at sec-consult.com, writing about security. Since 2009, 41 different Hacker News readers have linked it 50 times, most often “SMTP Smuggling – Spoofing Emails Worldwide”. No feed was found, so read it on the site itself.
Too few sampled comments (12) to say how often HN recommends it.?
Why HN links it
HN readers link SEC Consult's security research and advisories, including SMTP smuggling, NetUSB, AT&T U-verse modem vulnerabilities, a Tenda firmware backdoor, and a Windows NTFS tricks article. Comments mostly cite them as sources.
Summarised by Claude from a sample of 12 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
SEC Consult is one of the leading consultancies in the field of cyber and application security. The company specializes in information security management, security audits, penetration testing, ISO 27001 certification support, cyber defense and secure software certification.
Most-linked posts?
- SMTP Smuggling – Spoofing Emails Worldwide7 people · 7 mentions · first linked 2023-12-18
- Windows NTFS Tricks Collection4 people · 4 mentions · first linked 2018-06-13
- The Art of Fuzzing (2017) [pdf]3 people · 7 mentions · first linked 2017-11-25
- Ubiquiti device command injection vulnerability granting root access3 people · 3 mentions · first linked 2017-03-16
- Internet of Dildos: A Long Way to a Vibrant Future – From IoT to IoD2 people · 3 mentions · first linked 2018-02-01
- When baby monitors fail to be smart2 people · 2 mentions · first linked 2018-02-22
- Critical Vulnerabilities in Dormakaba's Physical Access Control System2 people · 2 mentions · first linked 2026-01-30
- Oracle Access Manager's identity crisis. (Padding oracle attack)2 people · 2 mentions · first linked 2018-05-03
- /fxdata/seccons/prod/temedia/advisories_txt/20150519-0_KCodes_NetUSB_Kernel_Stack_Buffer_Overflow_v10.txt2 people · 2 mentions · first linked 2015-05-20
What Hacker News says?
In a world where users should have control over their own computers, it is the customer who should have SSH access, not AT&T. But as you all know, most times the customer does not own the modem. One well-known workaround is for the customer to use their own modem or to use their own router as a gateway to the modem. But does this really give the user more contorl over the modem/router? These user-owned modems/router…
Comment linking /fxdata/seccons/prod/temedia/advisories_txt/20170316-0_Ubiquiti_Networks_authenticated_command_injection_v10.txt
on “SharknAT&To: Vulnerabilities in AT&T U-verse modems”Submitted SMTP Smuggling – Spoofing Emails Worldwide as a story · 289 points
HN discussionSEC Consult added an update to their page [1]. They are basically hiding behind Cisco, CERT-Bund and CERT.at. I mean, c'mon... They did all that research and they expect me to believe they didn't understand the potential impact so they deferred to someone else's judgement? That's the excuse, seriously? Besides, what would have been the harm in reaching out to projects like Sendmail and Postfix and ask them for their…
Comment linking /blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/
on “SMTP Smuggling – Spoofing Emails Worldwide”Submitted Windows NTFS Tricks Collection as a story · 234 points
HN discussion> 2023-11-29: CERT/CC allows public release of SMTP smuggling, since no software vulnerabilities were identified ("it's not a bug, it's a feature") https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-...
Comment linking /blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/
on “SMTP Smuggling – Spoofing Emails Worldwide”Submitted Fake Crypto: Microsoft Outlook S/MIME Cleartext Disclosure (CVE-2017-11776) as a story · 48 points
HN discussionThe original blog can be found here: https://sec-consult.com/en/blog/2018/06/pentesters-windows-n... The author of the above blog copy & pasted the full article, explicitly removed the author names and references to the original source. That's pretty disappointing.
Comment linking /en/blog/2018/06/pentesters-windows-ntfs-tricks-collection/
on “Windows NTFS Tricks Collection”Submitted When baby monitors fail to be smart as a story · 46 points
HN discussionhow about using the original website of the researcher who identified all of this and not just a cheap copy? https://www.sec-consult.com/en/blog/2018/06/pentesters-windo...
Comment linking /en/blog/2018/06/pentesters-windows-ntfs-tricks-collection/
on “Windows NTFS Tricks Collection”Submitted The Art of Fuzzing (2017) [pdf] as a story · 40 points
HN discussion"Generating Software Tests" ( https://www.fuzzingbook.org/ ) is pretty great (independent of your programming language) - arguably a must read for anyone interested in software testing. John Regehr (the author of the blog post) has written more great posts: - How to Fuzz an ADT Implementation - https://blog.regehr.org/archives/896 - Better Random Testing by Leaving Features Out - https://blog.regehr.org/archives/591…
Comment linking /en/blog/2017/11/the-art-of-fuzzing-slides-and-demos/
on “Write Fuzzable Code”Submitted The Art of Fuzzing (2017) [pdf] as a story · 33 points
HN discussion> Workaround: > ----------- > Sometimes NetUSB can be disabled via the web interface, but at least on NETGEAR devices this does not mitigate the vulnerability. NETGEAR told us, that there is no workaround available, the TCP port can't be firewalled nor is there a way to disable the service on their devices. https://www.sec-consult.com/fxdata/seccons/prod/temedia/advi... Eeesh
Comment linking /fxdata/seccons/prod/temedia/advisories_txt/20150519-0_KCodes_NetUSB_Kernel_Stack_Buffer_Overflow_v10.txt
on “NetUSB Impacts the Security of Millions of Devices Worldwide”Submitted Local Privilege Escalation via MSI Installer as a story · 20 points
HN discussionPerhaps you missed the link in the article to https://www.sec-consult.com/fxdata/seccons/prod/temedia/advi...
Comment linking /fxdata/seccons/prod/temedia/advisories_txt/20150519-0_KCodes_NetUSB_Kernel_Stack_Buffer_Overflow_v10.txt
on “NetUSB Impacts the Security of Millions of Devices Worldwide”Submitted Pentester's Windows NTFS Tricks Collection as a story · 6 points
HN discussionSMTP pipelining was actually the cause of fairly recently discovered vulnerability. https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-... https://www.postfix.org/smtp-smuggling.html Probably the main reason it is recommended against.
Comment linking /blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/
on “Pipelined State Machine Corruption”Submitted Covid-19 left hundreds of thousands of printers vulnerable as a story · 5 points
HN discussionThe article doesn't mention possible security implications. However, we already get lots of vulnerabilities exactly _because_ implementations disagree on delimiters. Examples for this are HTTP request smuggling[1, 2, 3] and SMTP smuggling[4]. As the references show, this is already a big source of vulnerabilities - trying to push for a change in standards would likely make the situation much worse. At the very least…
Comment linking /blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/
on “Stop Requiring CRLF Line Endings”Submitted The Art of Fuzzing [pdf] as a story · 4 points
HN discussion> Has Level 2 been cracked? It's tricky because you have to chain multiple exploits, but yes. You can temporarily downgrade from RDP2 to RDP1 via glitching. At that point, you have to move directly into RDP1 techniques without causing a reset. The protection levels are set in the RDP register. [listed out of order...] Level 0 = 0xAA, Level 2 = 0xCC, Level 1 = anything else. Flip just a single bit and you get out of…
Comment linking /blog/detail/secglitcher-part-1-reproducible-voltage-glitching-on-stm32-microcontrollers/
on “An Interesting Find: STM32 RDP1 Decryptor”Submitted Internet of Dildos: A Long Way to a Vibrant Future – From IoT to IoD as a story · 4 points
HN discussionI'll do better than a second case, here's three: Barracuda Networks: https://krebsonsecurity.com/2013/01/backdoors-found-in-barra... Fortinet: https://community.spiceworks.com/t/hard-coded-password-backd... Korenix: https://sec-consult.com/vulnerability-lab/advisory/backdoor-... The fact that the password is "rzadmin" makes it a lot more likely that this is just run of the mill stupidity, and not something more nefa…
Comment linking /vulnerability-lab/advisory/backdoor-account-in-korenix-technology-jetport-series/
on “Tenda firmware (multiple versions) contains hidden authentication backdoor”Submitted Microsoft Windows MSI Installer – Repair to System – A Detailed Journey as a story · 3 points
HN discussionSubmitted Pentester’s Windows NTFS Tricks Collection as a story · 3 points
HN discussionSubmitted The Art of Fuzzing [pdf] as a story · 3 points
HN discussionSubmitted Internet of Dildos: A Long Way to a Vibrant Future – From IoT to IoD as a story · 3 points
HN discussionSubmitted A Long Way to a Vibrant Future – From IoT to IoD as a story · 3 points
HN discussionSubmitted Ubiquiti Wireless Gear Subject to PHP Vulnerability as a story · 3 points
HN discussionSubmitted Ubiquiti device command injection vulnerability granting root access as a story · 3 points
HN discussion
