Top all-time · #8605
Shape Security Labs
Company blog · engineering.shapesecurity.comsecurityweb
Shape Security Labs is the company blog at engineering.shapesecurity.com, writing about security and web. Since 2014, 9 different Hacker News readers have linked it 12 times, most often “Pokémon Go API – A Closer Look at Automated Attacks”. The last post was in 2017, but the archive is still widely read.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link this Shape Security Labs post on the Pokemon Go API and location spoofing. It is cited as a case study in how request signing can be defeated once an app becomes popular.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Pokémon Go API – A Closer Look at Automated Attacks3 people · 3 mentions · first linked 2016-08-17
- Detecting PhantomJS-based visitors2 people · 2 mentions · first linked 2015-01-16
What Hacker News says?
There is no better case study for this than Pokemon Go, where the interest in spoofing location reached unheard of levels (outside of state actors). This is a good writeup: http://engineering.shapesecurity.com/2016/08/pokemon-go-api.... Basically sign your API requests with the most obscure function of phone context variables imaginable, and recognize that if you get so popular that it's cracked, you can just hire a…
Comment linking /2016/08/pokemon-go-api.html
on “Square Said to Acquire Team from Struggling Social App Yik Yak”Submitted Detecting PhantomJS-based visitors as a story · 116 points
HN discussionSubmitted Detecting PhantomJS Based Visitors as a story · 27 points
HN discussionSubmitted Pokémon Go API – A Closer Look at Automated Attacks as a story · 17 points
HN discussionSubmitted Announcing the Shift JavaScript AST Specification as a story · 9 points
HN discussionSubmitted Comparison of the Shift and SpiderMonkey AST Formats as a story · 6 points
HN discussionSubmitted Inside the most POPULAR account cracking tool: SentryMBA as a story · 5 points
HN discussionSubmitted Pokemon Go API (reverse engennered) (2016) as a story · 3 points
HN discussionSubmitted Announcing the Shift JavaScript AST Specification as a story · 3 points
HN discussionSubmitted Salvation Is Coming (to CSP) as a story · 2 points
HN discussionSubmitted Contributing to the Future as a story · 1 points
HN discussionSubmitted Reducing with the Shift Reducer as a story · 1 points
HN discussion
