Ask HN: Where I can find the latest security exploits?

https://news.ycombinator.com/item?id=1206307

by Mafana0 • 16 years ago

5 9 16 years ago

news.ycombinator.com

What are the best security sites that lists systems security exploits?

Thanks?

cperciva3• 16 years ago

Wrong sort of hacker. We build stuff people want, not break it.

sophacles• 16 years ago

I was unable to understand "secure coding practices" (beyond buffer overflows and sql escaping anyway) until I started examining real exploits to understand them. Why do you assume that the OP wants only to break things?

cperciva3• 16 years ago

Why do you assume that the OP wants only to break things?

Because he's new here, and when new people wander in here looking for security vulnerabilities, it's usually because they've misunderstood what the site is about.

Also, he specifically asked for the latest security exploits -- if your goal is to learn rather than attack, it doesn't matter if a vulnerability has been fixed already. (In fact, it's better if it has, since that way you can see both how the attack works and how to prevent it.)

statictype• 16 years ago

Does HN get a lot of these types of posts?

I'm actually surprised that I haven't seen more of it, but maybe they're just getting flagged\killed early.

cperciva3• 16 years ago

I think I've seen a dozen or more over the past couple of years. Enough that it's a persistant irritant, but not so much to make it a major problem.

Mafana02• 16 years ago

I'm not looking for info to break systems, I'm just trying to learn the potential exploits to protect my own software, by learning the best security practices.

Sorry if the question isn't very convenient here...

hatchack• 16 years ago

If you're really interested in security and not just looking for 1337 5ki11z, start here:

http://www.google.com

http://www.securityfocus.com/archive/1

http://cve.mitre.org/

ig1• 16 years ago

Bugtraq and vuln-dev for the more whitehat side, irc and zeroday forums (often invite only) for the blackhat side.

Ask HN: Where I can find the latest security exploits?

Related Stories