Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #19757

M

Mikko Kenttälä

Personal blog · mikko-kenttala.medium.comsecurity

Mikko Kenttälä's personal blog at mikko-kenttala.medium.com covers security. Since 2021, 3 different Hacker News readers have linked it 5 times, most often “Zero click vulnerability in Apple’s macOS Mail”. The last post was in 2024, but the archive is still widely read.

Visit the blog
5mentions?
3HN people?
2021–2024first – last linked?
Links on Hacker News per year · peak 3 in 2021

Too few sampled comments (2) to say how often HN recommends it.?

Why HN links it

HN commenters link Mikko Kenttälä's Medium posts on security research, such as a zero-click bug in Apple Mail's config files, in threads on email and Zoom vulnerabilities. The comments do not judge the writing itself.

Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

Most-linked posts?

  1. Zero click vulnerability in Apple’s macOS Mail
    3 people · 3 mentions · first linked 2021-04-01

What Hacker News says?

  1. > So discover them. Roll in your piles of cash from those easy picking bounties. Prove your point. Sure, I already did. I earned the second highest bounty for Fastmail back in 2019 for exactly this kind of exploit. Since then I've reported to dozens of programs (OpenSSL, ClamAV, SpamAssassin, ProtonMail, Hey, Missive, Yahoo Mail, Yandex, Spark, Trello, Missive, AWS, Google Chrome) and rolled in a few tidy piles. I h…

    Comment linking /zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c

    on “Can I Email?”
  2. Submitted Zero-Click Calendar invite vulnerability chain in macOS as a story · 461 points

    HN discussion
  3. Just last week we were talking about a zero-click bug in Apple Mail ( https://mikko-kenttala.medium.com/zero-click-vulnerability-i... ) that didn't even need to bypass Apple's built-in sandboxing—simply overwriting Mail.app's config files was enough to trigger a devastating information disclosure.

    Comment linking /zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c

    on “Zoom zero-day discovery”
  4. Submitted Zero click vulnerability in Apple’s macOS Mail as a story · 443 points

    HN discussion
  5. Submitted Alias file to rule them all – One click code execution with alias file in macOS as a story · 2 points

    HN discussion

Search all of HN for mikko-kenttala.medium.com