obisw4n
Joined 14 years ago
Karma
28
Submissions
27
Member since
Nov 6
Recent submissions
Comment · 7 years ago
I'm not surprised in the least, they have a Bugcrowd program and I've submitted atleast one P2 that took months to fix, and best of all - they don't pay bounties! what a joke if you ask me.
Comment · 10 years ago
Doh.. this guy recently came to me and swooped an up .io I owned. I gave it to him for what I paid for it thinking it was just an individual, should of asked for more lol.
/me facepalms
Comment · 10 years ago
Migrated a complex Jenkins setup to Deploybot in 2015, saves our company a ton of time managing deploys. I'd highly recommend deploybot to anyone.
If I could critique even just one thing it would probably be its pricing structure for personal use, I can't justify $15/m just for deployments. I'd love if they had some kind of personal "developer" tier with support for more repos. On the business side, $15/m is ridiculously cheap for what service we're getting.
Comment · 10 years ago
I think more cloud providers should do something like what Google Compute Cloud does, they have SSHGuard on their images by default so IPs get blocked after too many failed attempts.
Comment · 10 years ago
Does anyone know how the MySQL migration & replication works under the hood? How is Amazon doing all this remotely via just a DB connector?
Comment · 11 years ago
Its funny the author mentions all the Google Play stuff about installing apps to users phones without them ever even knowing.. I actually found a company exploiting this in the wild using browser extensions, I wrote about it on this blog:
http://extensiondefender.com/blog/
I'm not sure if the news I released had any effect, but they rapidly pivoted from a "desktop to mobile" ad network: https://web.archive.org/web/20141209085229/http://vulcun.com...
To some kind of e-Sports betting site: https://vulcun.com/
Oddly enough I submitted a bug report to google telling them they should set a content-security-policy on play.google.com, and was basically told "wont-fix" so the vulnerability to play store still exists.
Comment · 11 years ago
I've created an anti-adware/malware extension called Extension Defender which has a free and paid offering, the paid offering has made around ~$750
https://www.extensiondefender.com/
https://chrome.google.com/webstore/detail/extension-defender...
I've had a few emails about our Enterprise offering but I have not had to the time to really land the sales. I know there are alot of people on HN looking to acquire projects, if someone is interested in the project, you can contact me at [email protected]
Comment · 11 years ago
Would it be possible to constantly scan the DOM for new iframes and add the attribute with JS? Seems like there might be a small window of opportunity though for bad things to happen, if it would even work.
Comment · 11 years ago
Thats an aweful lot of work to roll out your own router. What does this have over, say installing pfsense to a box?
Comment · 11 years ago
"we also had one of his passwords."
Sorry, but you should not have your customers plaintext passwords, so very unprofessional.
Time to submit Empireflippers to plaintext offenders list?
Comment · 11 years ago
Chrome extensions can do some really nasty things.. Just last year while doing adware research for extensions, I actually came across an extension monetization company who was silently installing google android apps to the users phone with no human interaction what so ever, I wrote a break down of this on my blog:
http://extensiondefender.com/blog/red-alert-dangerous-exploi...
Comment · 11 years ago
I've been in contact with someone from Google Security and this was their answer:
"I spoke to the team that maintains that list and they don't have plans to make it public, if you would be willing to share some ideas on how to better protect people from this unwanted software I would be happy to pass it on but due to the nature of the work (trying to stay one step ahead of bad guys) we probably won't be able to share anything back."
I'm the author of this anti-adware addon called "Extension Defender" and it would greatly help my users if I could use their list, because while they extensions were removed from the Webstore, does that mean it was forcibly removed from their PC? Probably not.
Plug: https://chrome.google.com/webstore/detail/extension-defender...
Comment · 11 years ago
I actually got really confused on the examples page, it took me a moment to realize there was a dropdown box with all the features.. I think displaying them all in a column on the left/right like bootstrap docs do, would make it easier to know whats going on.