Top all-time · #18765
VerSprite
Company blog · versprite.com/blogsecurity
VerSprite is the company blog at versprite.com, writing about security. Since 2019, 4 different Hacker News readers have linked it 5 times. It is still writing: the last post was on 2026-10-26, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Linked for a walkthrough of named pipes in .NET 6, covering a tray icon and a Windows service. One commenter called it a good article but said it did not address securing the pipes.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
VerSprite delivers risk-based cybersecurity services: PASTA threat modeling, penetration testing, AI-driven security, and managed defense.
What Hacker News says?
Good article, but I wish the author would've addressed securing these named pipes. Consider that if a user-mode application can send messages to a privileged process (like a Windows service). What prevents any user-mode application from doing that? And if your Windows service is running as "NT_AUTHORITY/SYSTEM" and even executes privileged commands, well you might find you've got a simple privilege escalation vuln.…
Comment linking /blog/security-research/vulnerable-named-pipe-application/
on “Named Pipes in .NET 6 with Tray Icon and Service”Submitted AFD.sys – Primitives in the Pocket – Integer Shenanigans as a story · 2 points
HN discussionSubmitted Windows Local Priviledge Escalation via Waves Maxx Audio as a story · 2 points
HN discussionSubmitted Attacking Weakly-Configured EAP-TLS Wireless Infrastructures as a story · 1 points
HN discussionSubmitted Windows Userland Application Attack Surface Enumeration as a story · 1 points
HN discussion