Top all-time · #3215
Securosis
Company blog · securosis.com/blogsecuritybusiness
Securosis is the company blog at securosis.com, writing about security and business. Since 2008, 23 different Hacker News readers have linked it 27 times, most often “How iMessage distributes security to block “phantom devices””. It is still writing: the last post was on 2026-10-03, and you can follow it by feed.
Too few sampled comments (6) to say how often HN recommends it.?
Why HN links it
HN commenters link Securosis posts on security topics such as code signing, agile development and NoSQL/Node.js security. One commenter calls a Securosis reply to Schneier's software monoculture post a good reply.
Summarised by Claude from a sample of 6 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
An information security research and advisory firm dedicated to transparency, objectivity, and quality.
Most-linked posts?
- How iMessage distributes security to block “phantom devices”3 people · 3 mentions · first linked 2016-04-19
- My $500 Cloud Security Screwup2 people · 2 mentions · first linked 2014-01-07
- Do We Have a Right to Security?2 people · 2 mentions · first linked 2016-02-20
What Hacker News says?
This seems to be the natural outcome of Amazon's excellent customer service policy, where they have on numerous occasions[0] refunded costs for hacked instances. When they commit to that policy, they have a huge incentive to limit customer security breaches. I love examples like that where a company's policies result in incentives that are so well-aligned with those of their users. Does anyone have other good exampl…
Comment linking /blog/my-500-cloud-security-screwup
on “Amazon Is Downloading Apps From Google Play and Inspecting Them”Submitted Defining the Journey–The Four Cloud Adoption Patterns as a story · 3 points
HN discussionWhen Mac OS X updates the signature on a binary (for instance, when you configure a firewall rule for a previously unsigned binary), the actual Mach-O file will be changed -- and your digest will be incorrect. Skype (which has notoriously complex obfuscation) had this problem for a short time when Mac OS X 10.5 was released: http://securosis.com/blog/leopard-firewall-code-signing-brea... You can work around this by…
Comment linking /blog/leopard-firewall-code-signing-breaks-skype-and-other-applications
on “I Can Crack Your App With Just A Shell (And How To Stop Me)”Submitted Thoughts on Apple’s Bug Bounty Program as a story · 2 points
HN discussion> "They are not asking for some general thing, they are asking for a particular case." Was hoping Gates would be less naive in thinking this legal precedent has anything to do with this specific case which has close to 0% chance of providing any real-world information and more to do with the fact that this tragedy is used as political theatre and being exploited for maximum PR and political influence. > "Should gove…
Comment linking /blog/do-we-have-a-right-to-security
on “Bill Gates calls for terror data debate”Submitted How iMessage distributes security to block “phantom devices” as a story · 2 points
HN discussionMany devs I speak and work with are either ambivalent or disillusioned about agile. In my circles this article keeps coming up in discussions about agile - https://securosis.com/blog/agile-development-and-security/ .
Comment linking /blog/agile-development-and-security/
on “Where did all the developers go?”Submitted How iMessage distributes security to block “phantom devices” as a story · 2 points
HN discussionHere's a good reply http://securosis.com/blog/ranums-right-for-the-wrong-reasons
Comment linking /blog/ranums-right-for-the-wrong-reasons
on “Schneier on Security: Software Monoculture”Submitted Defending Data on iOS 7 as a story · 2 points
HN discussionServer-Side JavaScript Injection: Attacking NoSQL and Node.js https://securosis.com/blog/nosql-and-no-security
Comment linking /blog/nosql-and-no-security
on “Ask HN: What security issues should I be worried about with Node.js?”Submitted Defending Data In iOS 7 as a story · 2 points
HN discussionSubmitted My $500 Cloud Security Screwup as a story · 2 points
HN discussionSubmitted Investigating Touch ID and the Secure Enclave as a story · 2 points
HN discussionSubmitted How to use the 2013 Verizon Data Breach Investigations Report as a story · 2 points
HN discussionSubmitted Mountain Lion Gatekeeper in Depth as a story · 2 points
HN discussionSubmitted From Blackhat: NoSQL and No Security as a story · 2 points
HN discussionSubmitted Massive, Coordinated Patch To the DNS Released as a story · 2 points
HN discussionSubmitted How iMessage distributes security to block “phantom devices” as a story · 1 points
HN discussionSubmitted How iMessage distributes security to block “phantom devices” as a story · 1 points
HN discussionSubmitted Do We Have a Right to Security? as a story · 1 points
HN discussionSubmitted If You Don't Have Permission, Don't "Test" as a story · 1 points
HN discussionSubmitted Should the Red (team) be Dead? as a story · 1 points
HN discussionSubmitted Good versus bad versus fail as a story · 1 points
HN discussionSubmitted Strongly isolated computing as a story · 1 points
HN discussionSubmitted Hacking Spikes and the Real Time Media as a story · 1 points
HN discussionSubmitted Ranum’s Right, for the Wrong Reasons as a story · 1 points
HN discussion
