Top all-time · #3480
The House of Hezmatt
Personal blog · hezmatt.org/~mpalmer/blogsecurityprogramming
The House of Hezmatt is a personal blog at hezmatt.org about security and programming. Since 2011, 21 different Hacker News readers have linked it 36 times, most often “Hiltonhotels.jp SSL key publicly available”. No feed was found, so read it on the site itself.
Too few sampled comments (6) to say how often HN recommends it.?
Why HN links it
Matt Palmer's posts on Debian updates, a leaked Hilton hotel SSL key, and the Pwnedkeys Revokinator project, linked as sources or follow-ups in HN threads.
Summarised by Claude from a sample of 6 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
The House of Hezmatt
Most-linked posts?
- Hiltonhotels.jp SSL key publicly available4 people · 4 mentions · first linked 2023-06-11
- How I tripped over the Debian weak keys vulnerability2 people · 2 mentions · first linked 2024-04-09
- Pwned Certificates on the Fediverse2 people · 2 mentions · first linked 2024-01-15
- Object deserialization attacks using Ruby's Oj JSON parser2 people · 2 mentions · first linked 2025-07-26
- Not all TLDs are Created Equal2 people · 2 mentions · first linked 2024-02-13
- Why Certificate Lifecycle Automation Matters2 people · 2 mentions · first linked 2024-01-30
- Falsehoods Programmers Believe About Pagination2 people · 2 mentions · first linked 2018-12-12
- Database Encryption: If It's So Good, Why Isn't Everyone Doing It?2 people · 2 mentions · first linked 2023-04-07
What Hacker News says?
If you haven't updated your Debian in a while, 1 in 30000 apparently: https://www.hezmatt.org/~mpalmer/blog/2024/04/09/how-i-tripp...
Comment linking /~mpalmer/blog/2024/04/09/how-i-tripped-over-the-debian-weak-keys-vuln.html
on “Visualizing malicious IP addresses”Submitted How I tripped over the Debian weak keys vulnerability as a story · 339 points
HN discussionYou got it! By approximate category and in no particular order: ## MISCELLANEOUS - [Low Tech Magazine]( https://solar.lowtechmagazine.com ), a solar-powered website showcasing the amazing low-tech things you can do with a little ingenuity, - [Stephen Wolfram's Blog]( https://writings.stephenwolfram.com ) on math, compsci, and everything else, - [Cool Macrophotography]( https://www.barrywebbimages.co.uk/Images/Macro/…
Comment linking /~mpalmer/blog
on “Ask HN: Favorite Little Corners of the Internet?”Submitted Not all TLDs are Created Equal as a story · 225 points
HN discussionGenerating a new key for documentation seems incredibly easy, or even generating random base64 text. Most of all, searching Google for a random key to use as example seems easiest of all. I find it hard to believe that anyone would take their actual production key and redact it for documentation. Does the author have evidence of this in practice, or did they see example keys and assume they were redacted production…
Comment linking /~mpalmer/blog/2023/06/12/private-key-redaction-redux.html
on “Hiltonhotels.jp SSL key publicly available”Submitted Why Certificate Lifecycle Automation Matters as a story · 103 points
HN discussionThe author released another "follow-up" article today: https://www.hezmatt.org/~mpalmer/blog/2023/06/12/private-key...
Comment linking /~mpalmer/blog/2023/06/12/private-key-redaction-redux.html
on “Hiltonhotels.jp SSL key publicly available”Submitted Pwned Certificates on the Fediverse as a story · 103 points
HN discussionThanks. How about we change the URL to the more general article, which has more information and doesn't shame anybody. I've changed it from https://www.hezmatt.org/~mpalmer/blog/2023/06/12/private-key... now.
Comment linking /~mpalmer/blog/2023/06/12/private-key-redaction-redux.html
on “Hiltonhotels.jp SSL key publicly available”Submitted Information Security: "We Can Do It, We Just Choose Not To" as a story · 88 points
HN discussionIt is the Debian associated one, he talks about the project on his blog: https://www.hezmatt.org/~mpalmer/blog/
Comment linking /~mpalmer/blog/
on “The Pwnedkeys Revokinator”Submitted "Is This Project Still Maintained?" as a story · 79 points
HN discussionSubmitted Health industry company sues to prevent certificate revocation as a story · 78 points
HN discussionSubmitted SSL session caching in nginx as a story · 76 points
HN discussionSubmitted Object deserialization attacks using Ruby's Oj JSON parser as a story · 4 points
HN discussionSubmitted GitHub's Missing Tab as a story · 4 points
HN discussionSubmitted Not all TLDs are Created Equal as a story · 4 points
HN discussionSubmitted The Mediocre Programmer's Guide to Rust as a story · 3 points
HN discussionSubmitted Pwned Certificates on the Fediverse as a story · 3 points
HN discussionSubmitted Falsehoods Programmers Believe About Pagination as a story · 3 points
HN discussionSubmitted The Vicious Circle of Documentation as a story · 3 points
HN discussionSubmitted Checking for Compromised Private Keys Has Never Been Easier (2024) as a story · 2 points
HN discussionSubmitted Release Process Sucks as a story · 2 points
HN discussionSubmitted Hiltonhotels.jp SSL key publicly available as a story · 2 points
HN discussionSubmitted Discovering AWS IAM Accounts as a story · 2 points
HN discussionSubmitted Multi-level prefix delegation is not a myth as a story · 2 points
HN discussionSubmitted Falsehoods Programmers Believe About Pagination as a story · 2 points
HN discussionSubmitted It's 10pm, do you know where your SSL certificates are? as a story · 2 points
HN discussionSubmitted First Step with Clojure: Terror over insecure verification as a story · 2 points
HN discussionSubmitted Object deserialization attacks using Ruby's Oj JSON parser as a story · 1 points
HN discussion
