Type and topic
Essays & writing about Security & privacy
Every link here is both Essays & writing and about security & privacy.
- Hall of Fame
- 22
- Candidates
- 42
- Median span
- 5.2 yrs
- First seen
- 2009
observed on HN
oldest HN appearance
Strongest Hall records
22 itemsRecently resurfaced
latest 20+ point returnCandidates
Browse 42 candidates
NSA's Backdoor Key from Lotus Notes (2002)
Needs:5 submissions
564max pts
How do I give our security auditor the information he wants? (2011)
Needs:2 breakout events 720+ days apart
204max pts
Write your passwords down (2010)
Needs:5 submissions
116max pts
Parsing JSON is a Minefield
Needs:5 submissions
559max pts
Remove my password from lists so hackers won't be able to hack me
Needs:2 breakout events 720+ days apart
504max pts
Why Static Websites Need HTTPS
Needs:2 breakout events 720+ days apart
328max pts
Inside a low-budget consumer hardware espionage implant
Needs:5 submissions
591max pts
How I attacked myself using Google and I ramped up a $1000 bandwidth bill
Needs:5 submissions
775max pts
Reasons Not to Use Google
Needs:5 submissions
182max pts
Wacom tablets track every app you open
Needs:5 submissions
1594max pts
The curious case of the Raspberry Pi in the network closet (2019)
Needs:5 submissions
799max pts
Flatpak – a security nightmare
Needs:5 submissions
377max pts
Stop Using Encrypted Email
Needs:2 breakout events 720+ days apart5 submissions
475max pts
1.1.1.1 for Families
Needs:2 breakout events 720+ days apart5 submissions
414max pts
I don't trust Signal
Needs:5 submissions
523max pts
The Linux Security Circus: On GUI isolation
Needs:2 breakout events 720+ days apart
126max pts
Let them paste passwords
Needs:5 submissions3 active years
694max pts
How is NSA breaking so much crypto? (2015)
Needs:5 submissions
586max pts
JavaScript Cryptography Considered Harmful
Needs:2 breakout events 720+ days apart5 submissions
127max pts
Beg Bounties
Needs:5 submissions
280max pts
JSON Web Tokens should be avoided
Needs:5 submissions
386max pts
Defending a website with Zip bombs
Needs:5 submissions
631max pts
Cliff Stoll, the mad scientist who invented the art of hunting hackers
Needs:5 submissions3 active years
384max pts
The Moral Character of Cryptographic Work
Needs:2 breakout events 720+ days apart
240max pts
We Should All Have Something To Hide
Needs:5 submissions
438max pts
Why JWTs Suck as Session Tokens (2017)
Needs:5 submissions
173max pts
LinkedIn: The Creepiest Social Network
Needs:2 breakout events 720+ days apart5 submissions
334max pts
Stealing sensitive browser data with the W3C Ambient Light Sensor API (2017)
Needs:2 breakout events 720+ days apart3 active years
113max pts
A better zip bomb
Needs:5 submissions3 active years
483max pts
Reverse engineering a camera protocol for fun and profit
Needs:3 active years
479max pts
Modern C++ Won't Save Us
Needs:5 submissions3 active years
326max pts
If OpenSSL were a GUI
Needs:5 submissions3 active years
744max pts
Operation Luigi: How I hacked my friend without her noticing
Needs:2 breakout events 720+ days apart
242max pts
Russians Engineer a Slot Machine Cheat that Casinos Can't Fix
Needs:2 breakout events 720+ days apart5 submissions
391max pts
The second operating system hiding in every mobile phone
Needs:5 submissions
1036max pts
Target="_blank" – An underestimated vulnerability (2016)
Needs:2 breakout events 720+ days apart5 submissions
264max pts
Show HN: Porting OpenBSD Pledge() to Linux
Needs:2 breakout events 720+ days apart5 submissions
571max pts
How the CIA used Crypto AG encryption devices to spy on countries for decades
Needs:5 submissions3 active years
962max pts
The most backdoor-looking bug I’ve ever seen (2021)
Needs:5 submissions3 active years
173max pts
/bin/false is not security
Needs:2 breakout events 720+ days apart5 submissions
140max pts