Hacker News: _zeta

Losing my email account locked me out of my Digital Life

_zeta — Wed, 25 Mar 2026 11:59:28 +0000

Article URL: https://appsec.space/posts/email-lockout/

Comments URL: https://news.ycombinator.com/item?id=47516184

Points: 1

# Comments: 0

New comment by _zeta in "Blog Feeds"

_zeta — Sat, 04 Oct 2025 22:11:00 +0000

I use my blog to mainly write about stuff I do that I really don't want to forget about, like interesting vulnerabilities I found or projects I want to share, reach is ~30k visits/month (still no idea how since I think it's kinda niche) but so far is working.

I consider it also a good way to force myself to keep thoughts in order and to do a recap on the activities I do that most of the time are very chaotic.

I would probably consider integrating messages also to receive feedbacks.

I use hugo with the backend hosted on GitHub Pages, so far is a pretty solid setup that requires minimal effort since I just wrote an action to build pages every time a commit is done on the main branch

In case you are interested: https://appsec.space

New comment by _zeta in "This House is Haunted: a decade-old RCE in the AION client"

_zeta — Tue, 26 Aug 2025 16:05:57 +0000

Exploring how AION’s old housing system, introduced over 10 years ago, left the client vulnerable to remote code execution through Lua scripting. Even though official servers removed the feature years ago, it’s still alive (and exploitable) in legacy versions. Write-up: https://appsec.space/posts/aion-housing-exploit/

This House is Haunted: a decade-old RCE in the AION client

_zeta — Tue, 26 Aug 2025 16:05:57 +0000

Article URL: https://appsec.space/posts/aion-housing-exploit/

Comments URL: https://news.ycombinator.com/item?id=45028440

Points: 2

# Comments: 1

Debloating the Onyx Boox Go 10.3 eink tablet

_zeta — Tue, 06 Aug 2024 19:36:54 +0000

Article URL: https://appsec.space/posts/onyx-boox-go-10.3/

Comments URL: https://news.ycombinator.com/item?id=41174425

Points: 2

# Comments: 0

Ask HN: What's Your Company's Repository Naming Convention?

_zeta — Thu, 14 Sep 2023 21:55:29 +0000

I'm curious about how different companies approach the repo creation task (can you create infinite private repos? Do you have to ask for permission? etc..) and how many have a fixed naming convention.

Comments URL: https://news.ycombinator.com/item?id=37515359

Points: 2

# Comments: 3

New comment by _zeta in "Ask HN: Could you share your personal blog here?"

_zeta — Tue, 04 Jul 2023 19:22:01 +0000

https://appsec.space

I talk about application security and other stuff (common pitfalls from working on the field, career advices etc). I have yet to migrate the content from my old blog, but a new post will be released soon™.

An introduction is available here: https://appsec.space/posts/long-time-no-see/

New comment by _zeta in "Ask HN: How do you secure your Windows PC?"

_zeta — Fri, 19 Apr 2019 13:13:33 +0000

- Don't disable Secure Boot, Windows Defender and Windows Firewall

- If you really think updates are annoying shift the monthly updates by one month BUT always confirm the security updates

- If you have a PRO license give a try to VBS [0] and Controlled Folder access [1] (spoiler: this will be a little annoying at the beginning but will became almost perfect with a well configured whitelist)

- Also from the next (major) patch you should use Windows Sandbox [2] to run untrusted software(still a PRO feature)

[0] https://www.microsoft.com/security/blog/2018/06/05/virtualiz...

[1] https://docs.microsoft.com/en-us/windows/security/threat-pro...

[2] https://techcommunity.microsoft.com/t5/Windows-Kernel-Intern...