Skip to content
HomeVideosBooksBlogs
AllTop postsTopics
Podcasts
HistoryListsWatch laterLiked videosFollowing

The videos, books, blogs and podcasts Hacker News keeps recommending, all in one place.

VideosBooksBlogsPodcastsAboutPrivacySettings

Data from Hacker News, HackerTube, HackerBooks, HackerBlogs and Open Library. Credits · Not affiliated with Y Combinator.

HomeVideosBooksBlogsPodcasts
Ctrl K
    D

    Daeken

    daeken.com · Personal blog · on HN since 2009

    Cody Brocious (Daeken), a security researcher and hacker, writes on hardware hacking, web security, crypto flaws, and JavaScript demos.

    Visit blogHN submissions
    SecurityHardware & ElectronicsProgramming
    What HN says

    Commenters call his web security primer quite good and cite him for JS demo packing, HMAC canonicalization bugs, and an essay on global progress.

    Stats for nerds
    21HN people shared it
    32linked in comments
    1.8Kstory points
    May 2015last shared
    2009people per year2015

    Top posts on HN

    1. 1
      Breaker 101: An intensive online web security course
      1 person · 286 points · first shared 2013 · 112 comments on HN
    2. 2
      So You Want To Be A Breaker, Part 1: Web Security
      2 people · 261 points · first shared 2013 · 83 comments on HN
    3. 3
      Further Freedom Attacks
      1 person · 191 points · first shared 2010 · 64 comments on HN
    4. 4
      The Hardware Hacker Manifesto
      3 people · 135 points · first shared 2010 · 29 comments on HN
    5. 5
      Confusing Crypto Blobs
      2 people · 102 points · first shared 2012 · 40 comments on HN
    6. 6
      Show HN: Super simple static blog generator, Benjen
      1 person · 90 points · first shared 2013 · 45 comments on HN
    7. 7
      Superpacking JS Demos
      5 people · 63 points · first shared 2011 · 11 comments on HN
    8. 8
      Onity's plan to mitigate hotel lock hack
      1 person · 62 points · first shared 2012 · 16 comments on HN
    9. 9
      Responsible Disclosure Can Be Anything But
      1 person · 60 points · first shared 2012 · 35 comments on HN
    10. 10
      Injecting Arbitrary Python Into EVE Online
      1 person · 57 points · first shared 2009 · 18 comments on HN

    What HN people wrote when they linked it

    • alnayyirApr 2011

      There's a difference between a flake, and moving between things that obviously aren't going to work.

      Nothing ever gets shipped from him, nothing failed quickly to begin with. ( I don't just mean Alky, either. )

      Stop parroting community tropes.

      Examples:

      Alky

      http://daeken.com/daeken-discount-program

      https://github.com/daeken/RenrakuOS - 2010

      https://github.com/daeken/EveInject - 2009

      Quote from his blog:

      """

      What have you built and what are you building?

      Product-wise, I haven't built much; the biggest thing I've built was Alky, which allowed the conversion of Win32 binaries to run natively on OS X and Linux. It was a marginal success, although it ended up failing later for business reasons.

      These days, I'm working on a few things:

      Renraku: http://daeken.com/renraku-future-os This will eventually be combined with OpenBAMF/IREctive: Reverse-engineering platform and module store (My primary for-profit project right now)

      Books

      The Emulator's Handbook: A book on building an emulator from start to finish. There's simply nothing there yet, which is a damn shame -- we need to get people involved here.

      So far unnamed: A book on reverse-engineering game protocols and emulating them.

      In the future, I'd like to be developing and selling Eyetaps and other hardware around Renraku.

      """

      This isn't fail-fast, it's ship-nothing. It only bothers me because he keeps attention-whoring for every little idea he gets and ends up disappointing anybody who thought it was cool.

    • jjarmocApr 2015

      I first learned about this technique from Cody Brocious' post (http://daeken.com/superpacking-js-demos) about his WebGL demo 'Magister' (http://demoseen.com/windowpane/magister.html). That file has a .html extension, but it's also a valid PNG. In his post, he discusses this technique as well as others.

      Cody's goal was to compress already minified WebGL code and achieve some pretty impressive results from a ridiculously small file for a demo contest. He also put the JS loader (which is much smaller than the linked decoder) in a custom chunk on the PNG itself. By doing it that way, you can have a PNG that when renamed also contains a web page and/or more Javascript.

      It's an interesting technique, for sure, but I've never been able to find a real use for it beyond the compression. With a content-type sniffing vulnerability or something, it could be an interesting way to deliver content to browsers, but otherwise it's really just a curiosity as best I can tell.

    • XuzzJan 2011

      Incredibly relevant: Daeken's Hardware Hacker Manifesto: http://daeken.com/the-hardware-hacker-manifesto

      Sony probably has the upper hand legally here. The DMCA seems to be pretty explicit about these kind of this, at least from my non-lawyerly reading of it. Even so, this is quite unprecedented. Apple and Nintendo have both had devices hacked, often by these same people (there's at least two iPhone Dev-Team members there, four members of Team Twiizers, and, of course, geohot), but they never took any kind of legal action.

      (Somewhat unrelated, but funny: even Nintendo found out "bushing"'s real name and phone number. I wonder why Sony didn't go through that trouble and referred to him pseudonymously.)

    • rsxziFeb 2014

      This technique has been around since prior to 2008 at least, the biog entry below introduced the code[1], along with providing a tool to compress your js into an image using ruby [2].

      The technique has a legitimate use as a suave compression method and was termed "super packing" in 2011 [3]

      [1]http://blog.nihilogic.dk/2008/08/imageinfo-reading-image-metadata-with.html

      [2]http://www.nihilogic.dk/labs/canvascompress/

      [3]http://daeken.com/superpacking-js-demos

    • knowaveragejoeNov 2014

      Actually, the statistics today are largely better than at any point in history we have statistics for.

      Here's a nice aggregate:

      http://daeken.com/2014-04-16_Spoiler__The_World_Isn_t_On_Fire.html

      There is a shitload of good things going on in the world. You just have to pull your head out of the negativity echochamber present in a lot of Internet communities, most notably parts of reddit.

    • chanuxJul 2009

      Why I see people talking about OSes a written in high level languages a lot lately?

      Remember the C# one came on HN? http://daeken.com/renraku-future-os

      I think an OS written in an OO language will demonstrate why some people were actually worried about OOP. http://www.geocities.com/tablizer/oopbad.htm

    Related

    Demoseendemoseen.com20 people

    Fl0wer.png.html

    Demoseen
    Personal · last shared 2018
    Matthew Bryantthehackerblog.com48 people

    Taking control of all .io domains with a targeted registration

    Matthew Bryant
    Personal · last shared 2024
    Root Labs Rdistrdist.root.org72 people

    Stuxnet was embarrassing, not amazing (2011)

    Root Labs Rdist
    Publication · last shared 2026
    freeCodeCampmedium.freecodecamp.org582 people

    A hacker stole $31M of Ether – how it happened, and what it means for Ethereum

    freeCodeCamp
    Publication · last shared 2025
    Soatoksoatok.blog131 people

    The insecurity of telecom stacks in the wake of Salt Typhoon

    Soatok
    Personal · last shared 2026
    Naked Securitynakedsecurity.sophos.com740 people

    Serious Chrome zero-day

    Naked Security
    Company · last shared 2023
    Dan Luudanluu.com1.2k people

    We only hire the trendiest

    Dan Luu
    Personal · last shared 2026
    Aphyraphyr.com551 people

    Hexing the technical interview (2017)

    Aphyr
    Personal · last shared 2026