News for hackers. Stuff that matters.
Re:Your Mechanic (YC W12) Wins TC Disrupt by newman314 on Thursday September 13, 2012 @01:08AM (#4514874)
Some config issues?

curl -I https://www.yourmechanic.com

  HTTP/1.1 404 Not Found
  Server: nginx/1.2.2
  Date: Thu, 13 Sep 2012 05:05:23 GMT
  Content-Type: text/html
  Content-Length: 168
  Connection: keep-alive
  Vary: Accept-Encoding
Re:Your Mechanic (YC W12) Wins TC Disrupt by staunch on Thursday September 13, 2012 @01:16AM (#4514891)

  $ curl -I -A Mozilla https://www.yourmechanic.com
  HTTP/1.1 200 OK
  Server: nginx/1.2.2
  ...snip...
They're "blocking" curl for whatever reason.
Re:Your Mechanic (YC W12) Wins TC Disrupt by newman314 on Thursday September 13, 2012 @02:05AM (#4514985)
Interesting.

I wonder how this is configured in nginx.

Edit: http://www.cyberciti.biz/faq/unix-linux-appleosx-bsd-nginx-b...

On a different note, I think it's rather odd they find the time to block user agents but do not have HSTS set.

Re:Your Mechanic (YC W12) Wins TC Disrupt by alexchamberlain on Thursday September 13, 2012 @02:45AM (#4515069)
That is broken still. I doubt they can justify UA sniffing for the homepage.