atom_enger

Joined 12 years ago

Karma

758

Submissions

120

Member since

Nov 27

View on Hacker News

Recent submissions

Comment · 6 years ago

This used to be true but we are now 95%~ in Google Cloud.

Comment · 6 years ago

You'd suspect right :) I've had a huge number of bounties from this as a result of finding the pattern first on Reverb.

Comment · 6 years ago

I remember reading this when I was the sole Infrastructure Engineer for Reverb.com. I knew we were being attacked and I knew we had issues but I didn't have any idea where to start. This article sparked my interested in Cyber Security and helped me find a bug in the website that allowed me to set the CEO's credit card as a primary card on my account in production. That was an amazing day.

All I had to do was modify a post parameter in flight and the backend would accept it. Turns out this is what is known as an "unscoped find". More info here: https://brakemanscanner.org/docs/warning_types/unscoped_find...

Thanks to the author of the article for inspiring me to dig in the rails codebase and find vulnerable patterns that I could exploit. Thankfully I was able to pivot into a cyber security focused career and I credit this article for starting me down that path.

Rails has a few things going for it that other languages and frameworks don't but it still lets you shoot yourself in the foot if you're not careful. I ended up writing a blog article about preventing XSS in rails as a direct inspiration from the OPs article: https://product.reverb.com/stay-safe-while-using-html-safe-i...

Just because this article is old doesn't mean it's not useful. Thanks for posting!

Comment · 6 years ago

This exact scene played out in my mind as I was reading the article. Couldn't believe what I was reading and here I was wondering if the show would age well..

Comment · 6 years ago

Not many people would believe that you can be a better parent after consuming cannabis. I'm a much better parent after consuming cannabis. I listen more, play harder and can let go of the parental thoughts that silently occupy my brain when I'm sober and playing with my kids. Cannabis really helps me let go of parental world and enter theirs for just a little while..

Comment · 6 years ago

I agree. I felt that way when my friends started doing dabs and telling me how amazing it was. It kind of scared me to be honest. I've switched from smoking to making my own cannabis tinctures and have been using that for years. I've found that a minimal dose of cannabis in the morning really helps me dial the knob on my radio just right. They're really easy to make and so much more efficient than smoking.

Comment · 7 years ago

Out where I'm at in Campton Hills we're seeing business owners asking for the ban to be lifted. I hope it isn't:

https://www.kcchronicle.com/2019/01/11/campton-hills-residen...

Comment · 8 years ago

Do we know how the calls are being intercepted?

Comment · 8 years ago

nice thanks for the assist Zach!

Comment · 8 years ago

In a corporate setting: At Etsy we use OSQuery on all of our corp machines(macOS) to help with malware/virus detection. We use community rules: https://github.com/facebook/osquery/blob/master/packs/osx-at...

In addition to community rules we also curate a bunch of rules in house from malware we've discovered across our fleet. We then aggregate this info into ELK and alert on it.

At Home: OSQuery as well + tiny elk stack + Elastalert. Overkill for a typical home setup but I like it.

Comment · 8 years ago

Matt - if you see this I'm terribly sorry for your loss. I just married my best friend in December and I'd be so lost without her. I can't imagine how you're feeling. I don't know what else to say besides that I'm sending you love and support from across the net. Stay strong my friend, your blog has powered many of my adventures into SEO and beyond.

Comment · 8 years ago

So if you disagree with them they can deal with you one way or another? I've always thought that was the real reason: to dissuade dissidence.

Comment · 9 years ago

Intel's historical response has been run it hotter when AMD introduces something that's competitive.

Comment · 9 years ago

Does this remind anybody of Intel Pentium 4 Prescott?

https://en.wikipedia.org/wiki/Pentium_4#Prescott

  Intel claimed that NetBurst would allow clock speeds of up to 10 GHz in future chips; however, severe problems with heat dissipation (especially with the Prescott Pentium 4) limited CPU clock speeds to a much lower 3.8 GHz