News for hackers. Stuff that matters.

badideaprojects

Re:Rideshare operations are being suspended in California on Thursday August 20, 2020 @02:44PM (#24226958)
Can confirm. I drove from Austin to Nuevo Laredo for dental work. Park up, walk across the bridge, get dental work for a fraction the of the US price and walk back. Most painful part of the process is going back though US border control.
Re:How I grew my Shopify micro-SaaS on Saturday July 04, 2020 @05:42PM (#23735100)
Lots of parts of the world where people with families live for less than 1.5k USD a month.
https://sendnoodz.io | Spam your friends with MMS of noodles

Strangely not because of the content, rather because there are lots of inconsistencies/imperfections in the design and it doesn't make enough to justify fixing them.

I like the debate about whether it’s irresponsible due to covid-19 or not when this latest run had an 106 mph average speed.
Re:Tell HN: TSLA Crosses $400 on Thursday December 19, 2019 @06:18PM (#21840295)
I’ve never understood why (stock|crypto|asset) pricing seemingly attracts so many people to make absolute statements that should be phrased as predictions.

Are you positive that profit taking will take place soon? If so, will you bet your entire net worth?

Rjukan (the town from the article) is also a great destination for ice climbing. Lots of frozen waterfalls only a stones throw from the road.

Only a couple of hours drive from Oslo.

In case you need an excuse to visit.

Re:VC Starter Kit on Thursday March 21, 2019 @10:29PM (#19459167)
Arc’teryx gear is annoyingly good quality and well thought out. I don’t want all my gear to be Arc’teryx but it’s such a safe go to.
Re:The Intercept cuts back on Sunday March 17, 2019 @11:18AM (#19414446)
You might like this tool https://github.com/x0rz/tweets_analyzer

Primarily designed with OSINT in mind but covers tweet frequency, among other functions:

- Average tweet activity, by hour and by day of the week

- Timezone and language set for the Twitter interface

- Sources used (mobile application, web browser, ...)

- Geolocations

- Most used hashtags, most retweeted users and most mentioned users

- Friends analysis based on most frequent timezones/languages

It just all seems like cosplay. Time, expense and inconvience in order to gain anonimity from casual twitter followers?

Will this protect him against a slightly funded and half motivated actor? Probably not.

“Announcing Jameson Lopp as a speaker at Baltic Honeybadger 2019 Bitcoin conference #bh2019, (link: https://bh2019.hodlhodl.com) bh2019.hodlhodl.com”

https://twitter.com/hodlhodl/status/1099286199783481350

Unless he is making a virtual appearance, just follow him or grab him there.

EDIT: I should make it clear I’m not just referencing the article but also the twitter conversations I’ve seen from th author (swatting is a good reason to take some of these steps obviously). For example, https://twitter.com/lopp/status/920669889064570880. He even comments himself in that thread “Local PD isn't going to send out the SWAT team again without calling me first”

This post demonstrates detecting the difference between a user piping the output from curl to bash OR curl to stdout.

https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...

Re:2FA on the command line on Thursday February 28, 2019 @04:36PM (#19275454)
Here’s a PHP library to achieve the same https://www.idontplaydarts.com/2011/07/google-totp-two-facto...
Several steaks currently
Re:Ask HN: How Do I Get Started in the Field of Cyber Security? on Saturday February 23, 2019 @11:43PM (#19237173)
All good advice above and below.

I’d personally pay for OSCP if anything. CREST only offers a syllabus with no real direction about what to expect on the exam or training labs. Also, the prices are rather extorinate just for sitting an exam. Even worse than that, you take the exams in Slough...

Any of the companies listed above will pay for your exams if you work for them.

Learn to write reports quickly to save yourself!

Haha I would like to display replies but obvious privacy concerns!

Was also considering setting up a number that just displayed replies / posted to Twitter. Something you could hand out in a bar to someone pushy. Maybe auto reply with a few pieces of set text like this art project that messages Tinder matches with passages from Lady Chatterlys lover.

http://libbyheaney.co.uk/lady-chatterleys-tinderbot/

You’re right about the blocking. If someone is going to do it, it’s usually after the second message.

I didn’t handle that exception from Twilio when I first wrote it, so when the first person blocked texts it broke delivery for 2 days before I realised.

This got used at light speed
Focussed procrastination

Here’s a promo code: KXPK2-RDJQY-VNH1N

You can use @ /promo-code.php

Ask HN: Tools to Manage Shell Processes from the Browser(Start/Stop/View Output)

I’m sure this exists. We have legacy command line scripts that run continuously to support various internal processes.I’m looking for a web based solution to do the following:- Start whitelisted processes - Stop whitelisted processes - Live output from the processes in the browser while they are running - Authentication (optional, can hide behind SSH or use client certs if required) - Audit...

( Read More... | no comments | on HN )
You cannot stay on the summit forever; you have to come down again. So why bother in the first place? Just this: What is above knows what is below, but what is below does not know what is above. One climbs, one sees. One descends, one sees no longer, but one has seen. There is an art of conducting oneself in the lower regions by the memory of what one saw higher up. When one can no longer see, one can at least still know.

Rene Daumal

Lou Rudd is also currently making the same journey, partly in memory of Henry Worsley who he knew.

https://m.facebook.com/louis.rudd.7

Him and Colin set off on the same day, 1 mile apart on the ice.

Re:Ask HN: Mind blowing documentaries? on Monday October 22, 2018 @06:10PM (#18278998)
McConkey Trailer: https://www.youtube.com/watch?v=XiFo-osFHwQ Brilliant documentary about the life of Shane McConkey and his progression from skiing, BASE jumping and ski wingsuiting.
Re:Ask HN: What are some of the best documentaries you've seen? on Thursday September 27, 2018 @10:51PM (#18090618)
McConkey

Trailer: https://www.youtube.com/watch?v=XiFo-osFHwQ

Brilliant documentary about the life of Shane McConkey and his progression from skiing, BASE jumping and ski wingsuiting.

Re:Hacking law firms with abandoned domain names on Monday August 27, 2018 @04:40AM (#17850211)
This is known as typo-squatting and is not always done accidentally.

An interesting related technique is known as bit-squatting where you register domain names of a target company 1 bit different from the original.

It can be used for receiving emails, phishing sites, capturing internal DNS requests that have gone rogue due to bit errors (due to anything from hardware errors to cosmic rays).

There is a really good talk by Artem Dinaburg from Blackhat about it (first talk about it? I think) https://media.blackhat.com/bh-us-11/Dinaburg/BH_US_11_Dinabu...

I’m assuming the cost of themselves as a developer which seems perfectly reasonable.

How much would you charge per hour to develop a similar service and how long would it take you?

Hi HN,

Built this to have a go at interacting with Stripe and Twilio. Didn't realise what a pain recording an iPhone screencap would be.

Resubmitting because the first submission (completely understandably) triggered spam rules and was silently dropped.

Open to any suggestions.

Re:Ask HN: Side project you're working on? on Monday April 23, 2018 @05:11PM (#16907437)
https://sendnoodz.io

Solving big picture problems ....

Send pictures of noodles via MMS when someone asks for nudes.

Built because I wanted an excuse to setup twilio/stripe and thought goat attack was great.