Top all-time · #8069
Supernetworks
Company blog · supernetworks.org/pages/blog · on HN as spr-alexsecurityhardware
Supernetworks is the company blog at supernetworks.org, writing about security and hardware. Since 2023, 10 different Hacker News readers have linked it 26 times, most often “MitM Flaw in Bitchat: Identity Is a Bitchat Challenge”. It is still writing: the last post was on 2026-07-22, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link Supernetworks for SPR, a security-oriented Wi-Fi router distribution with strong device isolation for guest and home automation devices. It is also cited for its flexibility.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
SPR gives every WiFi device its own isolated network automatically. Per-device VLANs, unique passwords, and default-deny firewall policies. Open source, self-hosted, zero cloud dependencies.
Most-linked posts?
- MitM Flaw in Bitchat: Identity Is a Bitchat Challenge3 people · 4 mentions · first linked 2025-07-08
- /2 people · 4 mentions · first linked 2023-06-20
- Show HN: Supernetworks' Secure Programmable Router2 people · 3 mentions · first linked 2023-04-15
- /2 people · 3 mentions · first linked 2024-04-06
- OpenBSD crond / crontab set_range() heap underflow (CVE-2024-43688)2 people · 2 mentions · first linked 2024-08-20
What Hacker News says?
Plugging https://www.supernetworks.org/ -- when on wifi/vpn all DNS will go up over DNS over HTTPS as plaintext DNS is DNAT'd to CoreDNS which is by default configured to use DoH.
Comment linking /
on “Warning: DNS encryption in Little Snitch 6.1 may occasionally fail”Submitted OpenBSD crond / crontab set_range() heap underflow (CVE-2024-43688) as a story · 20 points
HN discussionThis exactly. Eeros, Nest/Google Wifi, and other cloud based mesh devices all likely have access to the password as they send it down to the app. I work on SPR @ https://www.supernetworks.org/,w e keep data self hosted, instead of a database in someone else's cloud.
Comment linking /,w
on “Linksys Velop routers send Wi-Fi passwords in plaintext to US servers”Submitted MitM Flaw in Bitchat: Identity Is a Bitchat Challenge as a story · 7 points
HN discussionNot all are cryptographically signed, no. We have no special documentation but we are also not directly modifying closed firmware either. We are working with mediatek cards and will post more updates this summer. We last posted about our approach 6 months ago, https://www.supernetworks.org/pages/blog/barely-ap-surfaces . So the randomization bugs we have reported are specifically about stations, namely: mobile smart…
Comment linking /pages/blog/barely-ap-surfaces
on “Surveilling the masses with wi-fi-based positioning systems”Submitted OpenBSD crond / crontab set_range() heap underflow (CVE-2024-43688) as a story · 3 points
HN discussionYes, We have some prototypes and will have some nice enclosures coming soon that we'll make available via our website at https://www.supernetworks.org
Comment linking /
on “Surveilling the masses with wi-fi-based positioning systems”Submitted New Supernetworks WiFi 6 PoE+ Router as a story · 2 points
HN discussioni cant speak to hetzner, contabo. i have tested this attack on aws, gcp a while back and their L2 segmentation was solid. VMs/containers should be VLANd across customers/projects on most mature providers. On some it may not be though. if theres defense in depth it may be worth checking out L2 forwarding within a project for unexpected pivots an attacker could use. we've seen this come up in pentests I work on SPR, w…
Comment linking /pages/blog/docker-networking-containment
on “A story on home server security”Submitted Identity Is a Bitchat Challenge as a story · 2 points
HN discussionYou can give us a try, https://github.com/spr-networks/super , https://supernetworks.org/ . Wireguard is well integrated. We also have a tailscale plugin, and more vpn plugins on the way
Comment linking /
on “PiVPN v4.6.0: The End”Submitted Identity Is A Bitchat Challenge (MITM Flaw) as a story · 1 points
HN discussionwe've happily running on routers on the pi5/cm5 since last year ( https://www.supernetworks.org ) and openwrt support is there as well.
Comment linking /
on “Raspberry Pi 5 Gets a MicroSD Express Hat”Submitted OSS Secure Private Router (SPR) Configuration App on the iOS App Store (2023) as a story · 1 points
HN discussionWe ( https://supernetworks.org/ ) have a Tailscale integration https://github.com/spr-networks/spr-tailscale and support Site destinations for devices. For our hardware products one thing we do need is to source a good carrying case for travel.
Comment linking /
on “WireGuard Performance with a Pi Zero (2019)”Submitted Securely Chaining WiFi Routers (2022) as a story · 1 points
HN discussionI've recently been test driving SPR[1] which is a security-oriented distro for Wi-Fi routers. The team behind it are serious about Wi-Fi security and have a research lab[2] that has been credited with several CVEs in the likes of Apple's network stack. The headline feature is strong device isolation for semi-trusted guest and home automation devices, and the software stack is based around containerized and audited G…
Comment linking /security-labs.html
on “OpenWrt One – Open Hardware Router”Submitted Show HN: Supernetworks' Secure Programmable Router as a story · 1 points
HN discussionOpenBSD is an admirable operating system. We reported a local privilege escalation vulnerability in cron on openbsd due to a memory corruption flaw. Our research got surprisingly close to a reliable exploitation path and we opened up a contest for someone to demonstrate a working exploit, https://www.supernetworks.org/crontab-challenge
Comment linking /crontab-challenge
on “Ask HN: What is your opinion on Open BSD?”Plugging a project we've been working on -- https://www.supernetworks.org . It's dockerized router software tailored for privacy & security that will happily coexist on a general purpose system.
Comment linking /
on “OpenWrt Project: a Linux operating system targeting embedded devices”We designed SPR to address problems with wifi isolation. Every wifi device runs in an isolated subnet and individual VLAN. Mac spoofing is not possible since a device's MAC identity is combined with a device-specific PSK. You can check out the project here: https://www.supernetworks.org/ While we were not aware of these protocol flaws specifically, the project was inspired by fundamental weaknesses in secure wifi is…
Comment linking /
on “MacStealer allows for WiFi client isolation bypasses (CVE-2022-47522)”blog author mentioned in the article here, previously submitted to hn at https://news.ycombinator.com/item?id=44497622 blog post here, https://www.supernetworks.org/pages/blog/agentic-insecurity-...
Comment linking /pages/blog/agentic-insecurity-vibes-on-bitchat
on “Jack Dorsey says his 'secure' new Bitchat app has not been tested for security”EAP TLS provides strong authentication, is much better than the other enterprise authentication options, but will not block these lateral attacks from other authenticated devices. The second half of the deployment is putting each identity into a VLAN to defend against the L2/L3 disconnects that can occur. I work on https://supernetworks.org/ . We propose a solution to these flaws with per-device VLANs and encourage…
Comment linking /
on “New AirSnitch attack breaks Wi-Fi encryption in homes, offices, and enterprises”I'm a big fan of https://www.supernetworks.org for the flexibility it gives. The security focus is a bonus as well.
Comment linking /
on “Building a freedom-friendly WiFi pocket-router (2021)”For people interested in learning more about network security & wifi, we have also been releasing self hosted CTF challenges at https://turtles.supernetworks.org/ & https://www.supernetworks.org/wifiturtles.html
Comment linking /wifiturtles.html
on “Show HN: Supernetworks' Secure Programmable Router”