Fidus Information Security
fidusinfosec.com · Company blog · on HN since 2017
Fidus Information Security, a UK security consultancy, publishes vulnerability research on routers, IoT devices, DRM and consumer software.
What HN saysHN links it as the original write-up for vulnerability disclosures such as the Virgin Media VPN unmasking, and commenters point to it as the better source.
16HN people shared it
6linked it in comments
10stories submitted
19story points
5 years agolast shared
2017people per year2026
Most-shared posts
- 1Unmasking Virgin Media VPN Users in Seconds3 people · 4 points · first shared 2021 · discussion on HN
- 2Exploiting 10k Devices Used by Britain’s Most Vulnerable3 people · 3 points · first shared 2019 · discussion on HN
- 3Fslabs flight simulation labs dropping malware to combat piracy3 people · first shared 2018
- 4Rumble in the Jungo (CVE-2018-5189)2 people · 2 points · first shared 2018 · discussion on HN
- 5OnePlus Checkout Hacked? The Dangers of On-Site Payment Processing2 people · 2 points · first shared 2018 · discussion on HN
- 6A Primer on Widevine and How It Can Be Abused to Download Encrypted Movies/Shows1 people · 5 points · first shared 2019 · 2 comments on HN
- 7A Curious Tale of Remote Code Execution, the TP-Link Story – CVE-2017-137721 people · 2 points · first shared 2017 · discussion on HN
- 8Forgive Me Father for I Have Hacked – An eRosary Story1 people · 1 points · first shared 2019 · discussion on HN
- 9Oct 2017.png1 people · first shared 2018
What HN people wrote when they linked it
mastazi · 2018-02-20
More context in case you didn't follow the issue, there is an exe that will dump all your Chrome passwords and send them back to the dev issuing a POST request, unsecurely (no https, just plain http. Yes, really, all your passwords sent over http): https://www.fidusinfosec.com/fslabs-flight-simulation-labs-dropping-ma…
afrcnc · 2021-09-20
A better write-up is the available in the actual source here: https://fidusinfosec.com/silently-unmasking-virgin-media-vpn-users-in-…
driverdan · 2021-09-20
Should be switched to the source: https://fidusinfosec.com/silently-unmasking-virgin-media-vpn-users-in-…
paraxisi · 2018-02-20
Sent base64'd to a non-secure endpoint with open RDP... ouch.
https://www.fidusinfosec.com/fslabs-flight-simulation-labs-dropping-ma…
moviuro · 2018-02-20
> We installed spyware on your PC, but trust us, we didn't use it, we only used it on the people we didn't like...
And, yes, your AV is showing a false positive ;) [0]
Also, piracy doesn't seem to have a huge impact (if any) on sales[1]
[0] https://www.fidusinfosec.com/wp-content/uploads/2018/02/Oct-2017.png , from https://www.fidusinfosec.com/fslabs-flight-simulation-labs-dropping-ma…
[1] https://juliareda.eu/2017/09/secret-copyright-infringement-study/ https://juliareda.eu/wp-content/uploads/2017/09/displacement_study.pdf see page 79 for games