d4n
Re:Zoom has a signed binary that runs any unsigned script
on Wednesday April 01, 2020 @07:50AM (#22747727)
Hey! I posted this. Just want to be clear it still pops up and asks the user to authenticate as seen in the original post. Tried to clarify this in the thread I don’t want people to get confused and think this is worse than it is. Still really weird and follows malware patterns. Most likely not a gatekeeper bypass or anything because delivery would be difficult but seemed like a sketchy decision to basically write their own sudo tool into the pre install scripts.
CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server
Re:“We found PayPal vulnerabilities and PayPal punished us for it”
on Monday February 24, 2020 @10:34AM (#22404855)
Unfortunately, for many companies, bug bounty programs have been the best invention in silencing security research and CVEs. They promise the world, beat you down on severity / payouts, sometimes just claim duplicate or known issue with no way to verify, and then block public disclosure. Very frustrating.
Re:Ask HN: HNers, where do you hang out online in your spare time?
on Thursday February 20, 2020 @01:50PM (#22377518)
Discord, Reddit
Re:Ask HN: Does your company offer commission for engineers?
on Thursday February 20, 2020 @10:19AM (#22375634)
There's a big difference though between "I helped scope the work and talk with the prospect / demo / whatever" vs. "I was the sole source of this customer and made the introduction." I don't mind bringing something to a friend if they're likely to be genuinely interested in it, but it seems weird for sales to be like "can you introduce me to your connection on LinkedIn."
Ask HN: Does your company offer commission for engineers?
I have worked at multiple consulting service companies that offered engineers commission for bringing in new business. Now that I'm at a product company I'm being told this is not industry standard, but am still expected to leverage my personal contacts to aide the sales team. Are there other notable product companies that offer commissions outside the sales department?
Re:Rtty – Access a device’s terminal from anywhere via the web
on Tuesday February 04, 2020 @08:11AM (#22235102)
I have gotten around this by hosting SSHD on web ports before, or going through a SOCKS proxy.