Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #13251

W

Will's Root

Personal blog · willsroot.iosecuritysystems

Will's Root is a personal blog at willsroot.io about security and systems. Since 2022, 6 different Hacker News readers have linked it 6 times, most often “EntryBleed: Breaking KASLR under KPTI with Prefetch (CVE-2022-4543) (2022)”. It is still writing: the last post was on 2025-09-14, and you can follow it by feed.

Visit the blog
6mentions?
6HN people?
2022–2025first – last linked?
Links on Hacker News per year · peak 3 in 2024

Too few sampled comments (2) to say how often HN recommends it.?

Why HN links it

HN readers link Will's Root for Linux and Windows kernel security write-ups, including exploitation techniques and the EntryBleed post on breaking KASLR, which commenters cite as evidence.

Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

Vulnerability Research on Low-Level Systems

Most-linked posts?

  1. EntryBleed: Breaking KASLR under KPTI with Prefetch (CVE-2022-4543) (2022)
    3 people · 3 mentions · first linked 2024-03-26

What Hacker News says?

  1. modern mitigations have made exploits much more difficult, however researchers continue to find bypasses to these mitigations. there are "classic" techniques to bypass most of the modern protections and if there isn't then researchers often come up with novel attacks / bypasses. for example for heap protections you can see how2heap to bypass heap protections[0]. another example is an exploit which allows bypass of K…

    Comment linking /2022/12/entrybleed.html

    on “Flipping Pages: New Linux vulnerability in nf_tables and exploitation techniques”
  2. Submitted EntryBleed: Breaking KASLR under KPTI with Prefetch (CVE-2022-4543) (2022) as a story · 2 points

    HN discussion
  3. KASLR is broken anyway, at least on x86, even with KPTI (a Linux feature to mitigate Meltdown) enabled. See https://www.willsroot.io/2022/12/entrybleed.html , which still runs fine (with some modifications depending on the microarchitecture) on the latest AMD and Intel hardware that we've checked.

    Comment linking /2022/12/entrybleed.html

    on “NT OS Kernel Information Disclosure Vulnerability”
  4. Submitted Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days as a story · 1 points

    HN discussion
  5. Submitted Leaking Flags from Filesystem with Spectre v1 as a story · 1 points

    HN discussion
  6. Submitted 31337$ bounty won, pwning Ubuntu and escaping Google's KCTF containers as a story · 1 points

    HN discussion

Search all of HN for willsroot.io