Darknet

darknet.org.uk · Group blog · on HN since 2008

Darknet is a news site covering hacking tools, security vulnerabilities, and penetration testing topics.

What HN saysHN links it for security news, such as the LastPass Chrome extension password leak, and for a repost of the classic worm-writing article.
27HN people shared it
9linked it in comments
29stories submitted
46story points
7 years agolast shared
2008people per year2026

Most-shared posts

  1. 1
    Dan Kaminsky & Kevin Mitnick Hacked
    2 people · 5 points · first shared 2009 · discussion on HN
  2. 2
  3. 3
    Writing Worms for Fun or Profit
    2 people · 2 points · first shared 2011 · discussion on HN
  4. 4
    Lastpass chrome extension leaking passwords
    2 people · first shared 2017
  5. 5
    Google to Reveal Youtube Viewing Details to Viacom
    1 people · 3 points · first shared 2008 · discussion on HN
  6. 6
    Crackle – Crack Bluetooth Smart Encryption (BLE)
    1 people · 3 points · first shared 2017 · discussion on HN
  7. 7
  8. 8
    Windows Help Vulnerability Exploited In The Wild
    1 people · 2 points · first shared 2010 · discussion on HN
  9. 9
    TempRacer – Windows Privilege Escalation Tool
    1 people · 2 points · first shared 2016 · discussion on HN
  10. 10
  11. 11
  12. 12
    SNIFFlab – Create Your Own MITM Test Environment
    1 people · 2 points · first shared 2017 · discussion on HN
  13. 13
  14. 14
  15. 15
    Nat Probe – NAT Detection Tool
    1 people · 1 points · first shared 2009 · discussion on HN

What HN people wrote when they linked it

peterwwillis · 2010-09-23
https://wiki.softwink.com/bin/view/Main/SaganFAQ#Why_Sagan http://www.darknet.org.uk/2010/07/sagan-real-time-system-event-log-sys… Pretty good system to correlate different events to get a better picture of a potential intrusion. If you're familiar with Snort I recommend checking it out.
kaushikt · 2019-06-19
This - https://www.darknet.org.uk/2017/03/lastpass-chrome-extension-leaking-p… Although, they weren't completely hacked it seems. They were fixing a major vulnerability.
drdrey · 2018-01-06
Reminds me of Writing Worms for Fun and Profit by lcamtuf: https://www.darknet.org.uk/2006/12/writing-worms-for-fun-or-profit/
mirimir · 2017-04-08
Sure, but http://www.darknet.org.uk/2017/03/lastpass-chrome-extension-leaking-pa… So maybe, "use a local password manager"?
drieddust · 2011-11-11
I am open source agnostic but I will not allow someone else to control what apps I can install. Scammy stuff will still exists and only difference will be that customer will never know about it[1] and is going to live under false security.Companies will try to ban every person trying to expose vulnerabilities. [1]http://www.darknet.org.uk/2011/11/apple-bans-security-researcher-charl… Do you thing a small set of employees sitting in a company's approval department are experts of every single thing that can be ever conceived by a developer? I am not against the idea of sand-boxing if it is built in the OS API. How approving a sand-boxed application is going to improve the security?
rexyo · 2010-10-28
GSM was cracked a long while ago, but now after Karsten Nohl has published his 1.7 TB rainbow tables via torrents, script kiddies will eventually be able to hack into your phones.. http://www.darknet.org.uk/2010/08/gsm-hacking-coming-to-the-masses-scr… Has anyone thought of what is gonna replace our broken A5/1 GSM privacy the next couple of years? Will we need new handsets to provide us with the next-gen cellphone encryption?
wmf · 2010-03-25
We've known that this is possible for years (http://crypto.stanford.edu/ssl-mitm/ http://www.darknet.org.uk/2009/08/sslsniff-v0-6-released-ssl-mitm-tool… but the fact that it's now a commercial product indicates that it is actually happening for real.
grumpyfart · 2010-02-12
There is a high possibility that Google's server is 10 times more secure than any average Joe's mail server. Even more secure than a security expert's server as well: http://www.darknet.org.uk/2009/08/dan-kaminsky-kevin-mitnick-hacked/ Do you have time to manage and keep your server secure? Can you patch a new 0day in an hour, possibly not. On the other hand when men-in-black asks to Google yes they might give it away, which is another story.

Keyboard shortcuts

/Search
j kNext / previous blog
EnterOpen selected blog
vVisit the blog site
fFollow / unfollow
lSwitch grid / list view
dSwitch dark mode
g hHome
g pTop posts
g tTopics
g fFollowing
g lLiked
g yHistory
g qFAQ
EscBack / close