Top all-time · #25386
Tevora
Company blog · threat.tevora.comsecurity
Tevora is the company blog at threat.tevora.com, writing about security. Since 2016, 3 different Hacker News readers have linked it 3 times. No feed was found, so read it on the site itself.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
The linked post covers desktop.ini files on USB drives and how they can expose NTLM hashes. One commenter cites it in a thread on the Native File System API to support a point about executing downloaded files.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Fortify your company's defenses, reinforce compliance with industry and government regulations, & guide you to more effective management of cyber risk.
What Hacker News says?
> It is not downloading malware that is the issue, it's executing it. That line is very thin. Local DLLs, application configs setting path to executables, even desktop.ini ( https://threat.tevora.com/usb-drives-desktop-ini-and-ntlm-ha... ) and that's before we get into NTFS alternative streams and other really out there ideas. If you can choose which path you download to, the user has lost. Even if they never active…
Comment linking /usb-drives-desktop-ini-and-ntlm-hashes/
on “The Native File System API allows web apps to save directly to files”Submitted A Valiant Effort at a Stealthy Backdoor as a story · 1 points
HN discussionSubmitted Leveraging Splunk Admin Credentials to Own the Enterprise as a story · 1 points
HN discussion