Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #21265

T

Tim McLean

Personal blog · timmclean.net · on HN as timmcleansecurityprogrammingweb

Tim McLean writes Chosen Plaintext, a personal blog at timmclean.net about security, programming and web. Since 2013, 3 different Hacker News readers have linked it 7 times, most often “Critical Vulnerabilities in JSON Web Token Libraries”. The last post was in 2017, but the archive is still widely read.

Visit the blog
7mentions?
3HN people?
2013–2015first – last linked?
Links on Hacker News per year · peak 4 in 2015

Too few sampled comments (1) to say how often HN recommends it.?

Why HN links it

One commenter links this 2015 post on JWT algorithm confusion as the original source of that vulnerability write-up, saying it is not spam. The thread is about critical JWT library vulnerabilities.

Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

The author on HN?

timmclean · 771 karma · member since 2012

[first name]@[first name][last name].net https://www.timmclean.net/ https://twitter.com/McLean0 [ my public key: https://keybase.io/timmclean; my proof: https://keybase.io/timmclean/sigs/3KHSzJ0uQlO-_Cr28YhnYsK9yIOfMTpXrEUuRbx4ed4 ]

From their public HN profile, which links to this site.

Most-linked posts?

  1. Critical Vulnerabilities in JSON Web Token Libraries
    2 people · 2 mentions · first linked 2015-04-01

What Hacker News says?

  1. http://www.timmclean.net/json-editor/ A code editor that uses knowledge of a programming language's grammar. It's cool because it should be significantly more efficient than working in vim/emacs, and will allow powerful scripting capabilities and macros to transform code structurally, instead of as text.

    Comment linking /json-editor/

    on “Ask HN: What are you working on and why is it cool?”
  2. Submitted Critical Vulnerabilities in JSON Web Token Libraries as a story · 59 points

    HN discussion
  3. Original, non-spam source is: https://www.timmclean.net/2015/03/31/jwt-algorithm-confusion...

    Comment linking /2015/03/31/jwt-algorithm-confusion.html

    on “Critical Vulnerabilities in JSON Web Token Libraries”
  4. Submitted What I don't like about JSON Web Tokens as a story · 8 points

    HN discussion
  5. I prototyped almost exactly this a couple years ago: https://www.timmclean.net/json-editor/ I haven't had time to come back to it, so I'm very glad to see that other people are working on the idea!

    Comment linking /json-editor/

    on “Prune: A Tree-Based, Home-Row-Oriented Code Editor”
  6. Submitted Show HN: Substructed as a story · 2 points

    HN discussion
  7. Submitted Introducing Substructed as a story · 2 points

    HN discussion

Search all of HN for timmclean.net