Top all-time · #19056
the Security Factory
Company blog · thesecurityfactory.besecurity
the Security Factory is the company blog at thesecurityfactory.be, writing about security. Since 2014, 4 different Hacker News readers have linked it 4 times, most often “Windows Batch Script Command Injection”. No feed was found, so read it on the site itself.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link the Security Factory blog as the original source for a write-up on command injection in Windows, similar to Shellshock, and it is cited in discussion of password strength.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
The Security Factory - Set your defenses and train your employees. Find, know and remove your weaknesses. Where the hacking happens.
Most-linked posts?
- Windows Batch Script Command Injection2 people · 2 mentions · first linked 2014-10-06
What Hacker News says?
Assuming a single character has something in the order of 100 possible values (I.e. a US English keyboard, no Unicode etc.) then a 12 character random password would take about 11.5 days to crack if you had a billion machines that could each crack a billion passwords a second. Assuming NTLM hashes you can currently crack almost 100 billion hashes per second on a single AWS p3.16xlarge that costs $25/hour to run ( ht…
Comment linking /password-cracking-speed/
on “There’s no need to change passwords if they're robust, unique and not breached”Submitted Windows Batch Script Command Injection as a story · 4 points
HN discussionoriginal post: http://thesecurityfactory.be/command-injection-windows.html
Comment linking /command-injection-windows.html
on “Shellshock-like Weakness May Affect Windows”Submitted Discovery of a Vulnerability in Windows Command Scripts as a story · 1 points
HN discussion