Defplex
defplex.wordpress.com · Personal blog · on HN since 2017
Defplex is a security-focused blog documenting ISP injection, scams, point-of-sale hacks, Cellebrite and crypto sock puppets.
What HN saysHN links it for the post on a South African ISP tampering with traffic, which a commenter says ISP interception is far from unheard of.
17HN people shared it
1linked it in comments
17stories submitted
69story points
4 years agolast shared
2017people per year2026
Most-shared posts
- 1How a South African ISP Hacks Its Subscribers Each Month2 people · 43 points · first shared 2017 · 50 comments on HN
- 2Time Is the Ultimate Hacking Tool2 people · 5 points · first shared 2019 · discussion on HN
- 3Dodging a Cellebrite2 people · 2 points · first shared 2019 · discussion on HN
- 4Alistair Peterson: The Hacker That Was Just a Hack1 people · 3 points · first shared 2018 · discussion on HN
- 5The Credicorp Scam Hive1 people · 2 points · first shared 2019 · discussion on HN
- 6Going Deeper with Osint Profiling: Instapression1 people · 2 points · first shared 2019 · discussion on HN
- 7Breaking a Point of Sale in under a minute1 people · 2 points · first shared 2018 · discussion on HN
- 8Sock Puppets in the Cryptoverse1 people · 2 points · first shared 2021 · discussion on HN
- 9Intercom Fun1 people · 2 points · first shared 2020 · discussion on HN
- 10Playing with a Covert Clock Camera1 people · 1 points · first shared 2018 · discussion on HN
- 11Clipbanker Malware1 people · 1 points · first shared 2022 · discussion on HN
- 12Municipal website leaks 25k residents-personal-details1 people · 1 points · first shared 2018 · discussion on HN
- 13The Human Tripwire for a LUKS Nuke Partition1 people · 1 points · first shared 2018 · discussion on HN
- 14Reverse Engineering A Barcode For Research (or free parking)1 people · 1 points · first shared 2021 · 1 comments on HN
- 15Woebot Is Here for You1 people · 1 points · first shared 2020 · discussion on HN
What HN people wrote when they linked it
rocqua · 2018-02-16
ISP's intercepting HTTP traffic to modify it is far from unheard of.
In the best case, this is to notify customers of required changes.
This is actually used by comcast [1].
In the worst case, this is a service sold to advertisers, or a service that includes arbitrary java-script injection. For something close to the worst case, see [2] (previously discussed on HN [3]).
[1] https://tools.ietf.org/html/rfc6108
[2] https://defplex.wordpress.com/2017/08/15/how-a-south-african-isp-hacks…
[3] https://news.ycombinator.com/item?id=15423393