News for hackers. Stuff that matters.

gunal2

We developed a cybersecurity learning app after 4.5 years

Hi all,For about 4.5 years, we have been providing browser-based training and have now decided to offer something similar for smartphones. We realized that many people are considering a career in cybersecurity but aren't sure yet. They want a general understanding without investing heavily in time and money.So, we prepared free lessons (all of them are free) of about 5 minutes each and various...

( Read More... | no comments | on HN )
Yes, the reason is we changed the domain. We had to that, because people couldnt login the app they paid.
It's "infected". Like all the other services.
Google is doing the same business with VirusTotal.com. We're hosting malware as zipped files, and providing passwords to users. It's not possible to accidentally run the malware as user.

And the problem is not about this, we removed all the files and Google said you didnt. They're not saying you're not trustable website, they said you still have the files but we haven't.

Yes, for Google Oauth. I'll try again, but the domain is completely new. We just moved another domain.
They review the website and continued to marking as harmful. Why do you think this is misleading?
They didnt marked just the URLs, marked the domain as harmful.
As i mentioned before, i know hosting these files on our local server is not the best practice. There are other businesses doing this thing and Google is not marking them harmful. All files are zipped with a password, we provide the password to users.

Also, the filename is not a unique indicator the identify a file as malware. I can put the filename as "Google Chrome.exe" and that doesn't mean this is a malware.

The second issue is, we just changed the our domain name and when i try to add it to "Authorized redirect URIs" for Oauth getting this error: "The request has been classified as abusive and was not allowed to proceed". So, i have no idea about what is going on about my domain.

That's right. It's not the best practice, i totally agree with that. The problem is, i already removed the files but Google is not accepting that. And also they are doing the same business with VirusTotal, but its working really well.

They're just clicking the decline button, and its affecting our business.

We just moved our API domain to another domain. That's why it's working well now. I have the same opinion, maybe their system is cached but it's affecting our business. And if you get declined one time, they're not responding to you quickly again.

Google has marked my website as harmful for a file that does not exist

Background: Recently, I encountered an issue where Google flagged my website as potentially harmful due to the presence of malware samples. These samples were uploaded, securely encrypted within a zip file, for the purpose of facilitating malware analysis by cybersecurity experts (Like virustotal (owned by Google), malware bazaar, etc.).Actions Taken So Far: Upon discovering the situation, I...

( Read More... | 29 comments | 6 points | on HN )
is it possible to bypass SSL forcing with sslstrip ?
Re:Security Operation Center Simulation for Beginners on Thursday October 15, 2020 @04:37PM (#24793594)
You can create an account for free with limited access. If you worried about your personal information, you can use different name and surname
Re:Security Operation Center Simulation for Beginners on Thursday October 15, 2020 @02:06PM (#24791682)
Can you please share with me which mail service are you using? And i tested login page, it looks ok. Can you create new user? Probably you are trying wrong password.