Skip to content
HomeVideosBooksBlogs
AllTop postsTopics
Podcasts
HistoryListsWatch laterLiked videosFollowing

The videos, books, blogs and podcasts Hacker News keeps recommending, all in one place.

VideosBooksBlogsPodcastsAboutPrivacySettings

Data from Hacker News, HackerTube, HackerBooks, HackerBlogs and Open Library. Credits · Not affiliated with Y Combinator.

HomeVideosBooksBlogsPodcasts
Ctrl K
    P

    Pierre Kim

    pierrekim.github.io · Personal blog · on HN since 2015

    Pierre Kim is a security researcher who publishes vulnerability findings on routers, fiber network equipment, and ISP devices.

    Visit blogRSSHN submissions
    SecurityNetworking
    What HN says

    HN commenters cite it for its GPON FTTH insecurity research, using it to show that ISP-provided fiber equipment can have weak authentication and weak secrets.

    Stats for nerds
    21HN people shared it
    20linked in comments
    400story points
    Jan 2026last shared
    2021people per year2026

    Top posts on HN

    1. 1
      Why I stopped using StartSSL (Hint: it involves a Chinese company)
      1 person · 216 points · first shared 2016 · 180 comments on HN
    2. 2
      Pwning the Dlink 850L routers and abusing the MyDlink Cloud protocol
      1 person · 84 points · first shared 2017 · 21 comments on HN
    3. 3
      GPON FTTH networks (in)security (2016)
      4 people · 66 points · first shared 2016 · 16 comments on HN
    4. 4
      Multiple vulnerabilities found in Quanta LTE routers
      2 people · 8 points · first shared 2016 · 1 comments on HN
    5. 5
      Studying the Internet Censorship in South Korea
      2 people · 7 points · first shared 2016 · 1 comments on HN
    6. 6
      Backdoor accounts discovered in 29 FTTH OLT devices from Chinese vendor C-Data
      1 person · 5 points · first shared 2020 · Discussion on HN
    7. 7
      Multiple vulnerabilities found in Quanta LTE routers (backdoors, RCE, weak WPS)
      1 person · 3 points · first shared 2016 · Discussion on HN
    8. 8
      Multiple vulnerabilities found in the Dlink DWR-932B
      1 person · 3 points · first shared 2016 · Discussion on HN
    9. 9
      DLink firmware patches fail to actually close security holes
      1 person · 2 points · first shared 2017 · Discussion on HN
    10. 10
      2-Byte DoS in Telnetd
      1 person · 1 points · first shared 2022 · Discussion on HN

    What HN people wrote when they linked it

    • zinekellerAug 2021

      Regardless of monentary charges (and I'm very aware of them, APNIC is even considering grants to help in IPv6 because it's in limbo for so long), even if we activate IPv6 synchronously there's still many, many problems with it, even when you permanently dual-stack it.

      One is connectivity. Even theoretically we should have the same network connectivity (so to speak), you can feel the pettiness when Hurricane-Electric and Cogent fought exclusively on IPv6 (https://www.theregister.com/2018/08/28/ipv6_peering_squabbles/) I can't believe I'm saying this, but IPv6 isn't free (or at least costs the same as IPv4).

      Second is security. Yes, the world is no longer scannable, but consumer routers are a dud when it comes to IPv6 security. This router (https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html) has serious problems at IPv6 security, and because it's suffix is always at ::0000:0000:0000:0001 and you've eliminate around 18 bits more because of how networks are laid, you've got yourself an IPv6 botnet, which speaking by, how do you block them? A /64 would be a good start, but OVH provides a single address per server (https://www.ovhcloud.com/vps/compare/). That's it. Don't forget that fiasco with MAC addresses (https://datatracker.ietf.org/doc/html/rfc8981), but at least that's solved.

      Third, IPv6 should just work as you said. I wish that's true, but embedded devices will trip you up badly. Some don't fallback to IPv4 and instead try and try again…

    • progbitsJan 2026

      Usually yes, but it depends:
      https://pierrekim.github.io/blog/2016-11-01-gpon-ftth-networks-insecurity.html

      Also the authentication might rely on weak secrets. I know my ISP provided FTTH router has a six letter password and a guessable username (derived from my last name), and I can't change either.

      Though the research is quite old now. Couldn't find anything recent specifically for DT.

    Related

    Ben Cox (benjojo)blog.benjojo.co.uk121 people

    Writing userspace USB drivers for abandoned devices

    Ben Cox (benjojo)
    Personal · last shared 2026
    Stéphane Bortzmeyerbortzmeyer.org17 people

    Observations about the attack on WikiLeaks

    Stéphane Bortzmeyer
    Personal · last shared 2024
    Cloudflare Blogblog.cloudflare.com2.9k people

    We Stood Up to a Patent Troll and Won

    Cloudflare Blog
    Company · last shared 2026
    Krebs on Securitykrebsonsecurity.com1.4k people

    Whistleblower: Ubiquiti Breach “Catastrophic”

    Krebs on Security
    Personal · last shared 2026
    Ilya Grigorikigvita.com177 people

    Chrome DevTools could do that?

    Ilya Grigorik
    Personal · last shared 2026
    Matthew Garrettmjg59.dreamwidth.org306 people

    I stayed in a hotel with Android lightswitches and it was as bad as you'd think

    Matthew Garrett
    Personal · last shared 2026
    Dan Kaminskydankaminsky.com52 people

    The cryptographically provable con man

    Dan Kaminsky
    Personal · last shared 2024
    Securelistsecurelist.com368 people

    Operation Triangulation: What you get when attack iPhones of researchers

    Securelist
    Company · last shared 2026