Top all-time · #7220
Vlad Tsyrklevich
Personal blog · tsyrklevich.netsecurity
Vlad Tsyrklevich's personal blog at tsyrklevich.net covers security. Since 2013, 11 different Hacker News readers have linked it 12 times, most often “Hacking Team: a zero-day market case study”. The last post was in 2019, but the archive is still widely read.
Too few sampled comments (6) to say how often HN recommends it.?
Why HN links it
HN readers link Vlad Tsyrklevich's posts on security and malware analysis, including his analysis of the FBI's Tor-related payload (tbb_payload.txt) and a 2015 post on the Hacking Team zero-day market.
Summarised by Claude from a sample of 6 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Hacking Team: a zero-day market case study4 people · 5 mentions · first linked 2015-07-26
- Analysis of the Tor Browser exploit shellcode4 people · 4 mentions · first linked 2013-08-05
What Hacker News says?
Unless this is different from the shellcode they used when taking down Freedom Hosting, I'm not sure what releasing it would do. There are already numerous analyses of the code: - Vlad Tsyrklevich: http://tsyrklevich.net/tbb_payload.txt - Gareth Owenson: http://owenson.me/fbi-tor-malware-analysis/ - My own analysis based on running it in PANDA: https://www.reddit.com/r/ReverseEngineering/comments/1jpln2/... (you can…
Comment linking /tbb_payload.txt
on “Judge Rules FBI Must Reveal Malware It Used to Hack Over 1,000 Computers”Submitted Hacking Team: a zero-day market case study as a story · 148 points
HN discussionHere’s some information you might find useful. https://tsyrklevich.net/2015/07/22/hacking-team-0day-market/
Comment linking /2015/07/22/hacking-team-0day-market/
on “Microsoft Offers Bug Bounty to Prevent Another Spectre-Meltdown Fiasco”Submitted Hacking Team: A Zero-Day Market Case Study as a story · 14 points
HN discussionFrom http://tsyrklevich.net/tbb_payload.txt - yes. It uses Winsock routines and WinAPI stdcall calling conventions.
Comment linking /tbb_payload.txt
on “Feds are Suspects in New Malware That Attacks Tor Anonymity”Submitted Hacking team: a 0-day market case study as a story · 3 points
HN discussionThe Hacking Team hack had some interesting fallout... I believe the article below was posted on HN a while ago: [Edit, just saw tptacek's comment] https://tsyrklevich.net/2015/07/22/hacking-team-0day-market/ https://www.wired.com/2015/07/hacking-team-leak-shows-secret...
Comment linking /2015/07/22/hacking-team-0day-market/
on “Stealing Facebook access_tokens using CSRF in device login flow”Submitted Hacking Team: a zero-day market case study (2015) as a story · 1 points
HN discussionThe link should be changed to the full article: https://tsyrklevich.net/2015/07/22/hacking-team-0day-market/
Comment linking /2015/07/22/hacking-team-0day-market/
on “Hacking Team's Purchasing of Zero-Day Vulnerabilities”Submitted Android OEMs exposing touchscreen input as a story · 1 points
HN discussionHere is a more in-depth analysis http://tsyrklevich.net/tbb_payload.txt
Comment linking /tbb_payload.txt
on “The FH exploit sends local IPs, hostnames & MAC to an IP in Washington DC”Submitted Analysis of the Tor Browser exploit shellcode as a story · 1 points
HN discussion