Secjuice

secjuice.com · Group blog · on HN since 2017

Community publication on information security, with articles on exploits, vulnerability proofs of concept, OSINT and security conference events.

What HN saysHN commenters cite it mostly for its article claiming Mastodon is used to spread child abuse material, and for its Defcon hotel security report.
31HN people shared it
11linked it in comments
23stories submitted
908story points
2 years agolast shared
2017people per year2026

Most-shared posts

  1. 1
  2. 2
  3. 3
    How to Bypass CSP by Hiding JavaScript in a PNG Image
    3 people · 9 points · first shared 2020 · 1 comments on HN
  4. 4
  5. 5
  6. 6
  7. 7
  8. 8
    Osint Amateur Hour
    1 people · 77 points · first shared 2020 · 24 comments on HN
  9. 9
  10. 10
  11. 11
  12. 12
  13. 13
    How to Use the Internet Safely – Secjuice
    1 people · 2 points · first shared 2018 · discussion on HN
  14. 14
  15. 15

What HN people wrote when they linked it

meroes · 2024-08-13
Wrong. https://www.secjuice.com/defcon-hotel-security-fiasco/ 2018, so as part of the same new security since the mass shooting. > Hotel security are also confiscating attendees lock picks, although we can kind of see why they would do that. The sight of a hacker with lock picks in your five star hotel must scare the bejeesus out of any security guard. But still, lockpicks are part of hacker culture and organizers are trying to get them back for you. > Its not just confiscating items that they can see in rooms, there are reports of hotel security going through attendees personal belongings too, they have very clearly been searching through suitcases, an unnaceptable violation of their guests privacy.
_heimdall · 2023-03-04
Search on Mastodon is broken on purpose. Anyone running a server sits in a tricky gray area of potential liability from hosting user-provided content. Specifically for content that is considered illegal to poses or distribute in some countries. For a more thorough explanation https://www.secjuice.com/mastodon-child-porn-pedophiles/ And for a github discussion where some of the Mastodon devs and hosts discussed this at length https://github.com/mastodon/mastodon/issues/1847
biosboiii · 2023-01-26
Mastodon already has "censorship" options, and still people use it big time to distribute CP. https://www.secjuice.com/mastodon-child-porn-pedophiles/ If I were to run such a node in Germany, and someone would use it to distribute CP with it, I face from 1 to 10 years in prison. Yeah, no thanks.
eddhead · 2023-01-08
No centralised moderation means the platform is a hotbed for nefarious activities, which reinforces certain accusations about the left's priorities (and Twitter's past inaction on the matter) https://www.secjuice.com/mastodon-child-porn-pedophiles/
waihtis · 2022-12-18
There is a definite knee-jerk reaction here from Elon, but there's also something else to consider before hyping up mastodon: https://www.secjuice.com/mastodon-child-porn-pedophiles/
EGreg · 2022-11-30
I mean, if people wanted to track visitors without cookies, they’d just use etags… https://www.secjuice.com/etag-entity-tag-tracking/ Has Apple’s ITP closed this particular loophole by ignoring etags in third party iframes and capping them to 7 days etc. ? It seems browsers will want to restrict ALL first party cookies to 7 days unless the visitor explicitly allows some domain to store their identity. Frankly speaking, identity can be done better without cookies. Look at Web3 sign-ins, we need something built into the browser and seamless. For now maybe an extension. Then browser makers can have a privacy mode that retires cookies, entirely. But how are you supposed to do caching without storing and sending identifying data equivalent to cookies? Thoughts?
sandreas · 2022-01-15
Wayland is a protocol - not an implementation. It tries to minify latency by merging together some of the components X11 had and tries to do this in a slim and faster way eliminating "design flaws". The implementation of the protocol may differ, but I know for example MUTTER, that is used in GNOME (https://gitlab.gnome.org/GNOME/mutter) This article has nice and not too complex visualisations and explanations: https://www.secjuice.com/wayland-vs-xorg/
amingilani · 2019-03-22
Thank you for the idea! But in general, it'd nice to be less mysterious when helping people ;) but you're right, there really are many ways to uncover the origin IP[0] [0]: https://www.secjuice.com/finding-real-ips-of-origin-servers-behind-clo…
TechBro8615 · 2023-01-02
There is a story [0] from November doing the rounds on Twitter today (but which was flagged on HN) that does a good job of expanding on why there is no search function on Mastodon. Namely, it's* full of child porn, or "lolicon" which is drawn child porn, illegal in many Western nations but not in Japan. In the words of Mastodon Founder Eugen Rochko: > Lack of full-text search on general content is intentional, due to negative social dynamics I guess you could frame this as a privacy argument, but I don't buy that as the primary reason people were upset with "Fedisearch." They were upset because it exposed their communities of lolicon enthusiasts. Do they deserve privacy or is that more of an excuse to keep their content off the radar of law enforcement and out of reach of polite society? I did find this 2017 GitHub issue [1] to be slightly less inflammatory and full of fruitful discussion about legal implications of caching strategies for media content on Mastodon instances. [0] https://www.secjuice.com/mastodon-child-porn-pedophiles/ [1] https://github.com/mastodon/mastodon/issues/1847 * "It" being the wider fediverse, where the 2nd and 3rd most popular instances allow "lolicon" content (which is illegal in many jurisdictions). Of course not all of Mastodon is filled with this, but all it takes is an obsessive minority to poison the grapevine with a large amount of content. Also, you can expect generative AI to lead to even more of this stuff.

Keyboard shortcuts

/Search
j kNext / previous blog
EnterOpen selected blog
vVisit the blog site
fFollow / unfollow
lSwitch grid / list view
dSwitch dark mode
g hHome
g pTop posts
g tTopics
g fFollowing
g lLiked
g yHistory
g qFAQ
EscBack / close