Top all-time · #2878
ZERO DAY
Personal blog · zetter-zeroday.comsecuritypolitics
ZERO DAY is a personal blog at zetter-zeroday.com about security and politics. Since 2023, 25 different Hacker News readers have linked it 30 times, most often “Apple Chip Flaw Lets Hackers Steal Encryption Keys”. It is still writing: the last post was on 2026-10-28, and you can follow it by feed.
Too few sampled comments (9) to say how often HN recommends it.?
Why HN links it
HN readers link Kim Zetter's Zero Day blog for reporting on security and government technology: DOGE access to Treasury systems, Apple M-series key extraction, CrowdStrike crashes, Kaspersky, and Trezor and Ledger backdoors.
Summarised by Claude from a sample of 9 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Where cybersecurity meets national security
Most-linked posts?
- Apple Chip Flaw Lets Hackers Steal Encryption Keys3 people · 4 mentions · first linked 2024-03-22
- Kaspersky Lab Closing U.S. Division, Laying Off Workers3 people · 3 mentions · first linked 2024-07-15
- Court Documents Shed New Light on DOGE Activity at Treasury Department3 people · 3 mentions · first linked 2025-02-13
- New Government Ban on Kaspersky Would Prevent Updating Malware Signatures in US2 people · 2 mentions · first linked 2024-06-20
- Trezor Wallets Also Compromised with Implants2 people · 2 mentions · first linked 2026-10-13
What Hacker News says?
He was mistakenly given write access by the treasury department employees in charge of managing DOGE permissions . He resigned a day later, likely before he even realized he had write access. In that short window, he accessed the system "exclusively under the supervision of Bureau database administrators", and the initial treasury department investigation did not find any misuse of said write permissions. I don't se…
Comment linking /court-documents-shed-new-light-on-doge-access-and-activity-at-treasury-department/
on “DOGE has 'god mode' access to government data”Submitted U.S. Government Disclosed 39 Zero-Day Vulnerabilities in 2023, First-Ever Report as a story · 221 points
HN discussionhttps://www.zetter-zeroday.com/court-documents-shed-new-ligh... "New court documents shed light on what a 25-year-old DOGE employee named Marko Elez did inside Treasury Department payment systems. They also provide extensive new details about which systems Elez accessed, the security precautions Treasury IT staff took to limit his access and activity, and what changes he made to the systems. The documents indicate t…
Comment linking /court-documents-shed-new-light-on-doge-access-and-activity-at-treasury-department/
on “DOGE has 'god mode' access to government data”Submitted Who Is Planting Backdoors in Ledger Crypto Wallets? as a story · 130 points
HN discussion> "After this story published, Apple told [Kim Zetter] they just posted the instruction about the DIT to their web site yesterday [MAR 21], timed to the public release of the researchers' findings, which means that developers were not told to do this fix prior to yesterday's release" [1] The mitigation for the issue was posted in coordination with the publishing of the vulnerability. Given that the mitigation only a…
Comment linking /apple-chips/
on “New vuln in Apple M-series allowing secret keys extraction can't be patched”Submitted Court Documents Shed New Light on DOGE Activity at Treasury Department as a story · 104 points
HN discussionKim Zetter has a great post walking through some details and commentary across a few sources, related to the vulnerability - https://www.zetter-zeroday.com/apple-chips/ > The cryptographic key itself isn’t placed in cache. But bits of material derived from the key gets placed in the cache, and an attacker can piece these bits together in a way that allows them to reconstruct the key, after causing the processor to d…
Comment linking /apple-chips/
on “New vuln in Apple M-series allowing secret keys extraction can't be patched”Submitted Kaspersky Lab Closing U.S. Division, Laying Off Workers as a story · 44 points
HN discussion> But i just don’t see how those state actors would benefit from this. You should never stop at obvious/superficial explanations but look at all scenarios (i.e. Game Theory probabilities) including "false flag" operations. Eg. a) What might have happened elsewhere when the world's attention was focused on this one incident? Did we miss something of greater importance? b) Was this a dry run/false flag to get business…
Comment linking /kaspersky-lab-closing-u-s-division-laying-off-workers-2/
on “CrowdStrike's Falcon Sensor also linked to Linux kernel panics and crashes”Submitted Trezor Wallets Also Compromised with Implants as a story · 35 points
HN discussion> who exactly would benefit from such a nefarious scheme State Actors, given the current Geo-Political tensions. You have to take a all-in-all broader view. I remember a while ago Kaspersky was accused of data-siphoning/spying from computers it was installed on and other nefarious activities. See New Government Ban on Kaspersky Would Prevent Company from Updating Malware Signatures in U.S. - https://www.zetter-zerod…
Comment linking /new-government-ban-on-kaspersky-would-prevent-malware-signature-updates/
on “CrowdStrike's Falcon Sensor also linked to Linux kernel panics and crashes”Submitted Did Trump Admin Order U.S. Cyber Command and CISA to Stand Down on Russia? as a story · 14 points
HN discussionI like the fancy security theatre display that the Trezor device has but turns out it initializes with a copy of the legitimate firmware then saboteurs simply overwrite the random seed generator with a predetermined seed after all the startup security checks. https://www.zetter-zeroday.com/trezor-wallets-also-compromis...
Comment linking /trezor-wallets-also-compromised-with-implants/
on “Who Is Planting Backdoors in Ledger Crypto Wallets?”Submitted Iranian Hacktivists Strike Medical Device Maker Stryker and Wiped Systems as a story · 5 points
HN discussionActual article: https://www.zetter-zeroday.com/kaspersky-lab-closing-u-s-div... ( https://news.ycombinator.com/item?id=40969919 )
Comment linking /kaspersky-lab-closing-u-s-division-laying-off-workers-2/
on “Kaspersky to shut down US operations, lay off employees after US Government ban”Submitted How the infamous APT-1 report exposing China's PLA hackers came to be as a story · 5 points
HN discussionThe interview that is linked[0] in the footnotes of the article with the person from ETSI is absolutely wild... Some excerpts: > kz (interviewer): How did it go about meeting those requirements, because that's the one they're saying has a backdoor in it. Was that the condition for export? > BM (ETSI): Backdoor can mean a couple of things I think. Something like you'd stop the random number generator being random, fo…
Comment linking /p/interview-with-the-etsi-standards
on “Backdoor found in secure TETRA radios”Submitted Nevada AG Asks Court to Ban Meta from Providing End-to-End Encryption to Minors as a story · 4 points
HN discussionSubmitted Anatomy of a Nuclear Scare as a story · 3 points
HN discussionSubmitted Fast16 Malware Was Sabotaging Nuclear Weapons Tests, Likely in Iran as a story · 2 points
HN discussionSubmitted Mystery Around Venezuelan Cyberattack Deepens, with New Highly Destructive Wiper as a story · 2 points
HN discussionSubmitted Attack Against Poland's Grid Disrupted Communication Devices at About 30 Sites as a story · 2 points
HN discussionSubmitted New Government Ban on Kaspersky Would Prevent Updating Malware Signatures in US as a story · 2 points
HN discussionSubmitted Nevada AG Asks Court to Ban Meta from Providing End-to-End Encryption to Minors as a story · 2 points
HN discussionSubmitted Tracking Peter Stokes and the Com as a story · 1 points
HN discussionSubmitted The Sad Decline of Trenchant Exec Who Stole and Sold Zero Days to Russian Buyer as a story · 1 points
HN discussionSubmitted GoFetch – Attack Vector Explained as a story · 1 points
HN discussionSubmitted Apple Chip Flaw Lets Hackers Steal Encryption Keys as a story · 1 points
HN discussionSubmitted Sophisticated StripedFly Spy Platform Masqueraded for Years as Crypto Miner as a story · 1 points
HN discussionSubmitted Standards Body Considers Uncloaking Secret Encryption Algorithms as a story · 1 points
HN discussion
