News for hackers. Stuff that matters.

cardz

Show HN: Goalstack – A to-do app based on life goals

https://goalstack.app

I've been building Goalstack part-time since December. It's a to-do app designed around life goals, helping users break them down into milestones and tasks, while tracking progress along the way.This is an early version, but it's already usable, and I'd love to get some feedback.I also used this project as a learning opportunity, I built it using Leptos (a Rust web framework) and I used a...

( Read More... | no comments | 2 points | on HN )

Ask HN: What do you use to track new vulnerabilities in your stack?

I’m building a notifications service for CVEs (https://hacktrack.info) and I’m curious to know what tools, methods, or platforms you are currently using to track new CVEs.Do you rely on feeds, manual searches, or automated systems? Are there any pain points you've encountered in keeping up with new vulnerabilities?

( Read More... | no comments | on HN )
Re:The Ethics of Posting Exploits on Public Forums on Monday October 21, 2024 @10:26AM (#41904537)
I have seen many companies getting hacked through vulnerabilities that had recently released exploits, while I was working with an incident response team. I believe in most case the CVE was available for some time before the exploit code was made public but no one was aware of the CVE and its implications so they didn't apply the patches. I don't think the researcher is inviting trouble but once the exploit becomes public there is a greater chance of the vulnerability being actively exploited.

Shameless plug: I've been working on a project called https://hacktrack.info, that lets the user track the software they use and get an email alert when new CVEs are released for their stack.

Show HN: Hacktrack.info – Email Notifications for New CVEs Affecting Your Stack

https://hacktrack.info

I've been working part-time on https://hacktrack.info, a SaaS that alerts you when new CVEs or exploits are published for the software you use. By subscribing to assets in the CVE database, you'll receive email notifications whenever a new vulnerability or exploit is released that impacts your stack.Alongside notifications, we provide users with an AI-generated analysis of each CVE, including...

( Read More... | 1 comment | 2 points | on HN )
Re:Ask HN: What are you working on (August 2024)? on Saturday August 24, 2024 @07:35PM (#41342833)
I am working on https://hacktrack.info a SaaS that alerts you when a new CVE or exploit is published for the software you use. The idea came to me while working on an incident response team, where I noticed that many companies were hacked due to using software versions affected by recently published CVEs or exploits. Most of the similar solution I know of are really expensive or part of a larger product suite.
Code: The Hidden Language of Computer Hardware and Software by Charles Petzold.
Like others have mentioned, immersion was a key factor. I also read from Practical Vim by Drew Neil[0] every day and created a bunch of type in the answer and cloze deletion Anki cards with the different commands. [0] https://pragprog.com/titles/dnvim2/practical-vim-second-edit...
Re:Pine64: Introducing the PinePhone Pro on Friday October 15, 2021 @10:12AM (#28877873)
Link to the pre-order page: https://www.pine64.org/pinephonepro/