chasemiller
Joined 14 years ago
Karma
52
Submissions
28
Member since
May 14
Recent submissions
Comment · 1 year ago
"ETHICAL hacker"
...yeah... I don't think those words mean what you think they mean...
Comment · 1 year ago
yeah, google likes to have fun with the Bug Bounty program. See: https://bughunters.google.com/about/rules/google-friends/662...
Comment · 1 year ago
Yes, it's a failure on DankStartup's part.
Not really much different than a user buying dankstartup.net, setting up a catch-all email, observing what comes in, and performing password resets for those accounts, allowing for account takeovers.
Calling it a vuln in oauth may be a bit hyperbolic, but Google could help prevent it.
Comment · 2 years ago
OLEs were a phisher's dream
Comment · 3 years ago
@danwilkerson, were you driving around the north hills ~1 hour ago?
Just passed one of these and thought to myself, huh, that's pretty neat, only to come home to see this post.
Comment · 4 years ago
This.
Comment · 4 years ago
And? Just people sharing their Ethereum Name Service (ENS) names. Still some of the biggest players in the crypto/NFT space on that list.
Comment · 5 years ago
I think it's important to differentiate between domain name squatters and domain name investors. Squatters are typically registering trademarked names with the hopes of flipping them to the trademark holder, or registering accidentally expired domains names with the hopes of selling them back to the previous registrant (as in OP's case). This is wrong.
Legitimate domain name investors are typically investing in generic words, brandables, or exact search term match domains.
I used to get mad about domain investors having every name I wanted to use for a project, until someone analogized it to real estate investing. Everybody would open their store on Fifth Ave. in New York City if they could afford it. Unfortunately, storefronts there are very limited. This is basically what generic, one-word .com domains are (frequent sales of $1M+). Domain names are just digital real estate.
Comment · 5 years ago
This explains the 30% 24hr growth of Stellar. Stellar has been working in this area for years and is built to facilitate exactly these types of transactions. I think they are probably the best positioned to take this on.
Also, Stellar USDC support was already slated for February.
Comment · 6 years ago
I... just... wow.
Comment · 7 years ago
Completely agree. We're working on an idea to handle the boring stuff as part of YC's Startup School 2019. GDPR, HIPAA, CCPA, PCI, etc. compliance + penetration testing and risk assessments.
We'll be building it at: https://secquity.com or if anyone has any specific questions, feel free to reach out at [email protected]
Comment · 7 years ago
Bug bounties are a great way to get your feet wet. I've seen many devs (especially web devs) have a lot of success hacking on websites that are built with frameworks they are familiar with. I would recommend checking out Bugcrowd or Hackerone to get started.
Besides that, there are a ton of great online courses such as PWK/OSCP, and labs (HacktheBox).
Comment · 7 years ago
tweetdeck.twitter.com
[ my public key: https://keybase.io/chasemiller; my proof: https:/ /keybase.io/chasemiller/sigs/XOA13MPxmbdKnQ2gd63OPpS-mFiX-YyoN9Z-ejod9xA ]