News for hackers. Stuff that matters.

anon223345

That’s what I did and shouldn’t have. I did very well in tech and ended up not going back and finishing.

Now that I didn’t finish my degree 12 years later it makes me so 2x the effort to move ahead now that I’m a manager

It’s a ridiculous feeling when your subordinates have masters and you don’t even have a bachelors. Just my $0.02, I ended up fine but work twice as hard, if I’d just stayed that extra 2 years

Now I have a family and am taking a year long leave of absence to finish my degree, after spending over 10 years doing it in my side time, I have a year left. It’s is unnecessarily nerve racking

The data links can be hacked or jammed that’s why they use pilots
Re:Career Progression on Thursday June 15, 2023 @01:22PM (#36343787)
I strive to become a Hashira
The best example is my iPhone charging cords. It was $5, and didn’t work. It was so cheap that rather than the dog and pony show of doin g a return, I ordered another one from another vendor that also didn’t work

I then ordered official apple one that worked

And the HDMI splitter I bought sings to me

And the baby toys, it’s almost comically bad grammar on the box, and the kids songs are Chinese accents

My $100 battery charger, takes half a day to charge

Mark McGwire
I actually cancelled prime because Amazon products these days suck, it’s become literally flea market shit

I probably would use Amazon cell phone service, but would be good if I could just buy that, not all of prime

Update #3 Got an honorable mention from Google Bug Hunters

They said they’re gonna see if it’s worth fixing and will get back to me. They didn’t award a bug bounty, but I’ll take the kudos.

Re:Ask HN: Lots of AWS credits expiring soon, ideas? on Thursday June 01, 2023 @12:37PM (#36153664)
Mine a Bitcoin
I’m sure the customers who were affected will get the bulk of that compensation.
Hey! I sent you a friend request in LinkedIn, it didn’t let me message you directly without having LinkedIn premium

Can send you the whole 9 yards over there

It seems they actually responded to the bug bounty request, I put the response up above
Update #2 - they actually responded to my bug bounty request. Seems they think it may be worth fixing but not a big enough deal to pay out a bounty to me. Obviously I’d like the bounty but if I got any recognition that would be awesome

—- Hi,

Thanks again for your report.

I've filed a bug with the responsible product team based on your report. The product team will evaluate your report and decide if a fix is required. We'll let you know if the issue was fixed.

Regarding our Vulnerability Reward Program: At first glance, it seems this issue is not severe enough to qualify for a reward. However, the VRP panel will take a closer look at the issue at their next meeting. We'll update you once we've come to a decision.

If you don't hear back from us in 2-3 weeks or have additional information, let us know!

Regards, Google Security Team

I filed a bug bounty! If this is working as expected then so be it…

I didn’t even know this hit front page till you said something

I’m just gonna leave the other orgs alone and not doing anything in there until I can figure out a strategy to delete this google group (which I am actually using to manage my own accounts) my accounts are just hobby accounts more than anything, it’s crazy I logged in and found these full-blown business accounts lol

Just insane to me that I don’t have to confirm on my end that I should be the admin, or billing role lol, they can just one way add you…

I think they meant to add their service account and instead added my google group, the URLs are kind of similar

That’s awesome lol
I’ll try that I suppose, it sounds like I’m going to have to delete that google group which is going to be a pain because I actually use it…

I did file a bug bounty hopefully that goes somewhere

UPDATE: I have just submitted a bug bounty request

That would really help my career and life if I get that!

I won’t do anything with the accounts I accidentally have access to

I’m just going to delete the group
Thank you will try that…
What it’s doing is actually useful, using a group to easily add people to roles is great

Not making the group do confirmation, or even acknowledging the addition is super stupid

Good call, the problem is I use the group for my own projects…

I will painstakingly change that to not use groups and then delete the group if it lets me

It’s just kinda stupid people are allowed to just add my group with my group not even confirming

Yes exactly, it’s a group with just a generic name I made many years ago…
Ha! This is exactly what I’m seeing…

I’m looking through these comments to see how I can reach out to google cloud from these links

I do not even want this access…!!!

Ya I’m not doing anything, I saw these random orgs on my console and just clicked and it took me to those pages

Didn’t poke around, was more like what the heck is this?

I only noticed because I logged in and the page defaulted to Spanish (it picked the first org, which happens to be a Spanish car company)

Then I noticed in the drop downs. I actually thought I was hacked, then realized what was going on.

Still trying to find a way to get ahold of Google lol

I have gained admin access to numerous GCloud Organizations by accident

in Google Cloud, you can assign admin, billing, etc to a google group.Years ago I made a google group for google cloud administrationA company in Spain, a bunch of startups, etc have added that google group (by accident) as an IAM user with varying level of roles attachedI now have billing access to one account, admin access to another, can just hop into the database of at least two of the...

( Read More... | 122 comments | 2 points | on HN )
This is one of those things that sounds cool at first but in reality, the sheer volume of edge cases because the real problem

I bet this is gonna raise funding though

Good call, I’m going to try this actually
A bird in the hand is worth two in the bush.

Not 1.2 or 1.4 birds in the bush

The startups they’re finding lately all seem pretty lame

“Help revolutions the sales cycle”

“Build developer tools”

“Block chain in your build chain”

Robots.txt is mostly ignored btw
Re:Ink: React for interactive command-line apps on Monday May 08, 2023 @07:02PM (#35868054)
If postman is just a fancy Ui for curl

Now I’m wondering your thoughts on Burpsuite

And wondering if you feel GitHub is just a fancy UI for git lol

Older »