S
Silent Signal Blog
blog.silentsignal.eu · Company blog · on HN since 2014
Silent Signal, a Hungarian security firm, writes about penetration testing, IBM i hacking, exploits, and vulnerability tools.
What HN saysHN commenters link it for technical security write-ups, such as UUID weaknesses in standard libraries and hacking the Java debug wire protocol.
21HN people shared it
2linked it in comments
37stories submitted
214story points
3 months agolast shared
2014people per year2026
Most-shared posts
- 1Bake your own EXTRABACON3 people · 8 points · first shared 2016 · discussion on HN
- 2The Cipher Behind QSYRUPWD: Reconstructing IBM i Password Hashes2 people · 2 points · first shared 2026 · 1 comments on HN
- 3Poisonous MD5 – Wolves Among the Sheep1 people · 110 points · first shared 2015 · 52 comments on HN
- 4Our new tool for enumerating hidden Log4Shell-affected hosts1 people · 22 points · first shared 2021 · 3 comments on HN
- 5Proxying nonstandard HTTPS traffic1 people · 10 points · first shared 2015 · discussion on HN
- 6The story of a pentester recruitment1 people · 8 points · first shared 2015 · discussion on HN
- 7Simple IBM I (AS/400) HACKING1 people · 8 points · first shared 2022 · discussion on HN
- 8Story of a Pentester Recruitment1 people · 6 points · first shared 2025 · discussion on HN
- 9Evading Cisco AnyConnect Blocking LAN Connections1 people · 4 points · first shared 2019 · discussion on HN
- 10Another Tale of IBM I (AS/400) Hacking (2022)1 people · 3 points · first shared 2022 · discussion on HN
- 11CVE-2014-3440 – Symantec Critical System Protection Remote Code Execution1 people · 3 points · first shared 2015 · discussion on HN
- 12The Curious Case of Encrypted URL Parameters1 people · 3 points · first shared 2018 · discussion on HN
- 13Decrypting and analyzing HTTPS traffic without MITM1 people · 2 points · first shared 2020 · discussion on HN
- 14From Read to Domain Admin – Abusing Symantec Backup Exec with Frida1 people · 2 points · first shared 2014 · discussion on HN
- 15An update on MD5 poisoning1 people · 2 points · first shared 2016 · discussion on HN
What HN people wrote when they linked it
dnet · 2017-06-08
It depends. I wrote a blogpost about the security implications of UUIDs back in February (https://blog.silentsignal.eu/2017/02/17/not-so-unique-snowflakes/) and it shows that not all standard libraries make secure-by-default easy for the developer. I developed a MIT licensed plugin for Burp Suite (https://github.com/silentsignal/burp-uuid) that can help pentesters and security minded developers to detect insecure UUID versions, and even in that plugin I described version 4 UUIDs as "randomly generated, although [their] entropy should be checked".