Hacker Blogs
Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #2862

S

SektionEins GmbH

Company blog · sektioneins.de/en/blogsecurity

SektionEins GmbH is the company blog at sektioneins.de, writing about security. Since 2014, 27 different Hacker News readers have linked it 29 times, most often “OS X 10.10 DYLD_PRINT_TO_FILE Local Privilege Escalation Vulnerability”. No feed was found, so read it on the site itself.

No feed foundVisit the blog
29mentions?
27HN people?
2014–2020first – last linked?
Links on Hacker News per year · peak 18 in 2014

Too few sampled comments (11) to say how often HN recommends it.?

Why HN links it

HN readers link SektionEins's security write-ups on the Apple SSL 'goto fail' bug, the OS X DYLD_PRINT_TO_FILE privilege escalation and Drupal advisories, mostly as technical references.

Summarised by Claude from a sample of 11 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

SektionEins bietet Security Audits und Schulungen für Webanwendungen, sowie IoT.

Most-linked posts?

  1. OS X 10.10 DYLD_PRINT_TO_FILE Local Privilege Escalation Vulnerability
    4 people · 4 mentions · first linked 2015-07-21
  2. Advisory 01/2014: Drupal – Pre Auth SQL Injection Vulnerability
    4 people · 4 mentions · first linked 2014-10-15
  3. Apple OSX Mavericks 10.9.x SSL Key Exchange Verification Vulnerability
    3 people · 3 mentions · first linked 2014-02-22

What Hacker News says?

  1. knweiss · 2014-02-22
    (Caveat: I haven't tried this myself!) Here's the analysis and an experimental patch from @i0n1c for the 64bit version of Mavericks' Security.framework (32-bit remains unpatched): http://sektioneins.de/blog/14-02-22-Apple-SSL-BUG.html

    Comment linking /blog/14-02-22-Apple-SSL-BUG.html

    on “Apple's SSL/TLS bug”
  2. foofoobar · 2014-10-16

    Submitted Drupal 7 SQL Injection Vulnerability as a story · 160 points

    HN discussion
  3. x0x0 · 2015-08-07
    It's a good contender, but in 10.2, you could hold down a key in the screen saver lock screen and overflow a buffer, crashing the screensaver and logging you in. Seriously. Not a root exploit but embarrassing. http://www.cvedetails.com/cve/CVE-2003-0518/ btw, discoverer claims to have written a kext fixing the hole http://www.sektioneins.de/blog/15-07-07-dyld_print_to_file_l...

    Comment linking /blog/15-07-07-dyld_print_to_file_lpe.html

    on “OS X sudoers exploit found in the wild”
  4. ssclafani · 2016-09-02

    Submitted PEGASUS iOS Kernel Vulnerability Explained as a story · 82 points

    HN discussion
  5. marquis · 2015-08-07
    Is there a test to determine if the patch is successful? Edit: as noted in Esser's blog [1]: $ EDITOR=/usr/bin/true DYLD_PRINT_TO_FILE=/this_system_is_vulnerable crontab -e I found this test failed in both a patched (10.10.4) and un-patched system (10.10.1) so not sure what these results mean. [1] https://www.sektioneins.de/en/blog/15-07-07-dyld_print_to_fi...

    Comment linking /en/blog/15-07-07-dyld_print_to_file_lpe.html

    on “OS X sudoers exploit found in the wild”
  6. noondip · 2015-07-21

    Submitted OS X 10.10 DYLD_PRINT_TO_FILE Local Privilege Escalation Vulnerability as a story · 17 points

    HN discussion
  7. x0x0 · 2014-10-29
    wow. Drupal took a month to turn this around. 16. Sep. 2014 - Notified the Drupal devs via security contact form 15. Okt. 2014 - Relase of Bugfix by Drupal core Developers [1] [1] https://www.sektioneins.de/en/advisories/advisory-012014-dru...

    Comment linking /en/advisories/advisory-012014-drupal-pre-auth-sql-injection-vulnerability.html

    on “Drupal Core – Highly Critical Public Service announcement”
  8. lelf · 2014-07-04

    Submitted Phpinfo() Type Confusion Infoleak Vulnerability and SSL Private Keys as a story · 7 points

    HN discussion
  9. pr0zac · 2020-09-11
    Ironically, one example is an app that was useful for detecting malware or other security problems: https://www.sektioneins.de/en/blog/16-08-11-sysinfo-what-hap...

    Comment linking /en/blog/16-08-11-sysinfo-what-happened.html

    on “Tim Sweeney on Apple and Google”
  10. DiabloD3 · 2016-09-06

    Submitted PEGASUS iOS Kernel Vulnerability Explained – Part 2 as a story · 6 points

    HN discussion
  11. UnoriginalGuy · 2014-11-01
    Why does Drupal use string manipulation to generate SQL statements instead of bind parameters? It is 2014, hasn't this been best practice since at least the late 1990s? Wouldn't all security audits, including automated ones, pick this up? And before someone makes a "joke" about PHP, they're using the PDO framework which supports bindParam(). Seems like woful incompetence in the Drupal codebase to me. Exploit in deta…

    Comment linking /en/advisories/advisory-012014-drupal-pre-auth-sql-injection-vulnerability.html

    on “Up to 12M websites may have been compromised via Drupal vulnerability”
  12. passfree · 2014-10-15

    Submitted Drupal 7.31 Pre Auth SQL Injection Vulnerability as a story · 6 points

    HN discussion
  13. cantfindmypass · 2014-02-22
    I am now for informational purposes linking to the OS X patch released by i0n1c. http://www.sektioneins.de/en/blog/14-02-22-Apple-SSL-BUG.htm...

    Comment linking /en/blog/14-02-22-Apple-SSL-BUG.html

    on “Show HN: Check if your browser is vulnerable to the Apple SSL bug”
  14. plentz · 2014-02-22

    Submitted Apple OSX Mavericks 10.9.x SSL Key Exchange Verification Vulnerability as a story · 4 points

    HN discussion
  15. mikeash · 2014-02-25
    No need to MITM anything. You can just patch the binaries on disk. People have already done the legwork for it: http://www.sektioneins.de/en/blog/14-02-22-Apple-SSL-BUG.htm...

    Comment linking /en/blog/14-02-22-Apple-SSL-BUG.html

    on “Has goto fail been fixed yet?”
  16. bef · 2018-12-05

    Submitted CSRF/SSRF and DoS in GnuPG's WKD Handling as a story · 2 points

    HN discussion
  17. bascule · 2015-07-27
    The recent OS X DYLD_PRINT_TO_FILE local privilege escalation vulnerability was a classic confused deputy: https://www.sektioneins.de/en/blog/15-07-07-dyld_print_to_fi...

    Comment linking /en/blog/15-07-07-dyld_print_to_file_lpe.html

    on “The Confused deputy”
  18. raimue · 2018-07-03

    Submitted OpenSSHd Security Configuration Checker as a story · 2 points

    HN discussion
  19. itg · 2015-07-22
    Stefan's blog post: https://www.sektioneins.de/en/blog/15-07-07-dyld_print_to_fi...

    Comment linking /en/blog/15-07-07-dyld_print_to_file_lpe.html

    on “OS X 0day”
  20. ssclafani · 2016-09-05

    Submitted PEGASUS iOS Kernel Vulnerability Explained – Part 2 as a story · 2 points

    HN discussion
  21. ayrx · 2014-10-15
    Technical details can be found in this link: https://www.sektioneins.de/en/advisories/advisory-012014-dru...

    Comment linking /en/advisories/advisory-012014-drupal-pre-auth-sql-injection-vulnerability.html

    on “SA-CORE-2014-005 - Drupal core - SQL injection”
  22. martin_ · 2014-10-15

    Submitted Advisory 01/2014: Drupal – Pre Auth SQL Injection Vulnerability as a story · 2 points

    HN discussion
  23. FractalNerve · 2014-10-01

    Submitted iOS 7/8 Kernel Exploitation Training (November 2014) – 4500€ fee as a story · 2 points

    HN discussion
  24. dgavrilov · 2014-09-04

    Submitted SPL ArrayObject/SPLObjectStorage Unserialization Type Confusion Vulnerabilities as a story · 2 points

    HN discussion
  25. jasvir · 2014-08-23

    Submitted PHP vulnerable configuration checker as a story · 2 points

    HN discussion
  26. AndreyKarpov · 2014-12-24

    Submitted Mach_port_kobject() and the kernel address obfuscation as a story · 1 points

    HN discussion
  27. thefreeman · 2014-07-04

    Submitted Phpinfo() Type Confusion Infoleak Vulnerability and SSL Private Keys as a story · 1 points

    HN discussion
  28. abdullahdiaa · 2014-05-07

    Submitted PHP 5.3 Security Backports as a story · 1 points

    HN discussion
  29. chmars · 2014-02-23

    Submitted [Patch] Apple OSX 10.9.x SSL Key Verification Vulnerability (CVE-2014-1266) as a story · 1 points

    HN discussion

Search all of HN for sektioneins.de

Linked by the same people?