News for hackers. Stuff that matters.

infosecau

Re:Hacking root EPP servers to take control of zones on Tuesday June 13, 2023 @01:10AM (#36305699)
Yes, as we were able to download the database for CoCCA's web application (from the box.com backups) for any of the ccTLDs managed by CoCCA, we could decrypt the admin hash and then login to the CoCCA administration panel and modify/transfer any domain inside a ccTLD's zone.
Re:0x0: Share Files from Terminal on Saturday April 08, 2023 @05:01AM (#35491720)
I prefer bashupload.com or transfer.sh for this. Both alternatives have worked well for me.

Alternatively, you can check out magic wormhole (for a more secure transfer of files between two terminals): https://magic-wormhole.readthedocs.io/en/latest/welcome.html...

Re:Ask HN: Who is hiring? (July 2022) on Friday July 08, 2022 @03:24AM (#32023860)
Assetnote | Backend Engineer | Remote Australia

By joining our growing engineering team at Assetnote as a Backend Engineer, you will be responsible for extending the capabilities of our Continuous Security Platform through developing our security engine.

In this role, you will be required to build and maintain our distributed scanning engine, improve scalability, performance, and reliability. This role requires that you are confident with distributed systems and software architecture.

Day to day you will be interfacing directly with our API development team and security researchers.

Assetnote is a remote-first company. This position is remote with a preference for candidates located in Australia, however, we will consider strong applicants located outside of Australia.

More details and application form here: https://apply.workable.com/assetnote/j/600D953230/

Re:Ask HN: Who is hiring? (March 2022) on Wednesday March 02, 2022 @10:23PM (#30536759)
Assetnote | Site Reliability Engineer | Remote Australia

By joining our growing engineering team at Assetnote as a Site Reliability Engineer, you will be responsible for managing the infrastructure for our Continuous Security Platform.

In this role, you will be required to deploy, design, scale and maintain our infrastructure, alerting and metrics. This role requires that you are confident with modern infrastructure tooling and concepts such as AWS, Kubernetes and Terraform.

Occasionally, this role will require you to work outside regular work hours in case of emergencies.

The solutions we develop on the SRE & DevOps side are dependent on our API, Security and Discovery Engines. Day to day you will be interfacing directly with our Engine development team, API engineers, and security researchers.

Assetnote is a remote-first company. This position is remote with a preference for candidates located in Australia, however, we will consider strong applicants located outside of Australia.

More details and application form here: https://apply.workable.com/assetnote/j/0E09D3BEE4/

Re:Ask HN: Who is hiring? (February 2022) on Tuesday February 01, 2022 @02:13PM (#30167588)
Assetnote | DevOps Engineer | Remote Australia

By joining our growing engineering team at Assetnote as a DevOps Engineer, you will be responsible for managing the infrastructure for our Continuous Security Platform.

In this role, you will be required to deploy, manage and maintain our infrastructure, alerting and metrics. This role requires that you are confident with modern infrastructure tooling and concepts such as AWS, Kubernetes and Terraform.

Occasionally, this role will require you to work outside regular work hours in case of emergencies.

The solutions we develop on the DevOps side are dependent on our API, Security and Discovery Engines. Day to day you will be interfacing directly with our Engine development team, API engineers, and security researchers.

Assetnote is a remote-first company. This position is remote with a preference for candidates located in Australia, however, we will consider strong applicants located outside of Australia.

More details and application form here: https://apply.workable.com/assetnote/j/0E09D3BEE4/

Re:Ask HN: Who is hiring? (January 2022) on Wednesday January 05, 2022 @05:02PM (#29815661)
# Assetnote - Continuous Security

At Assetnote, we are building the world's best Attack Surface Management platform. Used by companies all around the world, from innovative startups to Fortune 100 companies, the platform you will be building is helping protect hundreds of thousands of assets from compromise.

Assetnote | Frontend Engineer | Remote Australia

By joining our growing engineering team at Assetnote as a Frontend Engineer, you will be responsible for designing and engineering our React based frontend for our Continuous Security Platform.

In this role, you will be required to design, implement, improve and maintain frontend interfaces in Typescript React. This role requires that you are confident with designing and engineering frontend components with user experience in mind.

The solutions we develop on the UI side are dependent on our API, Security and Discovery Engines. Day to day you will be interfacing directly with our Engine development team, API engineers, and security researchers.

Assetnote is a remote-first company. This position is remote with a preference for candidates located in Australia, however, we will consider strong applicants located outside of Australia.

More details and application form here: https://apply.workable.com/assetnote/j/A2FA4AC75A/

Assetnote | DevOps Engineer | Remote Australia

By joining our growing engineering team at Assetnote as a DevOps Engineer, you will be responsible for managing the infrastructure for our Continuous Security Platform.

In this role, you will be required to deploy, manage and maintain our infrastructure, alerting and metrics. This role requires that you are confident with modern infrastructure tooling and concepts such as AWS, Kubernetes and Terraform.

Occasionally, this role will require you to work outside regular work hours in case of emergencies.

The solutions we develop on the DevOps side are dependent on our API, Security and Discovery Engines. Day to day you will be interfacing directly with our Engine development team, API engineers, and security researchers.

Assetnote is a remote-first company. This position is remote with a preference for candidates located in Australia, however, we will consider strong applicants located outside of Australia.

More details and application form here: https://apply.workable.com/assetnote/j/0E09D3BEE4/

Re:Ask HN: Who is hiring? (December 2021) on Wednesday December 01, 2021 @07:07PM (#29410829)
# Assetnote - Continuous Security

At Assetnote, we are building the world's best Attack Surface Management platform. Used by companies all around the world, from innovative startups to Fortune 100 companies, the platform you will be building is helping protect hundreds of thousands of assets from compromise.

Assetnote | Frontend Engineer | Remote Australia

By joining our growing engineering team at Assetnote as a Frontend Engineer, you will be responsible for designing and engineering our React based frontend for our Continuous Security Platform.

In this role, you will be required to design, implement, improve and maintain frontend interfaces in Typescript React. This role requires that you are confident with designing and engineering frontend components with user experience in mind.

The solutions we develop on the UI side are dependent on our API, Security and Discovery Engines. Day to day you will be interfacing directly with our Engine development team, API engineers, and security researchers.

Assetnote is a remote-first company. This position is remote with a preference for candidates located in Australia, however, we will consider strong applicants located outside of Australia.

More details and application form here: https://apply.workable.com/assetnote/j/A2FA4AC75A/

Assetnote | DevOps Engineer | Remote Australia

By joining our growing engineering team at Assetnote as a DevOps Engineer, you will be responsible for managing the infrastructure for our Continuous Security Platform.

In this role, you will be required to deploy, manage and maintain our infrastructure, alerting and metrics. This role requires that you are confident with modern infrastructure tooling and concepts such as AWS, Kubernetes and Terraform.

Occasionally, this role will require you to work outside regular work hours in case of emergencies.

The solutions we develop on the DevOps side are dependent on our API, Security and Discovery Engines. Day to day you will be interfacing directly with our Engine development team, API engineers, and security researchers.

Assetnote is a remote-first company. This position is remote with a preference for candidates located in Australia, however, we will consider strong applicants located outside of Australia.

More details and application form here: https://apply.workable.com/assetnote/j/0E09D3BEE4/

Re:Ask HN: Who is hiring? (November 2021) on Wednesday November 03, 2021 @07:54PM (#29102094)
Assetnote | Frontend Engineer | Remote Australia

At Assetnote, we are building the world's best Attack Surface Management platform. Used by companies all around the world, from innovative startups to Fortune 100 companies, the platform you will be building is helping protect hundreds of thousands of assets from compromise.

By joining our growing engineering team at Assetnote as a Frontend Engineer, you will be responsible for designing and engineering our React based frontend for our Continuous Security Platform.

In this role, you will be required to design, implement, improve and maintain frontend interfaces in Typescript React. This role requires that you are confident with designing and engineering frontend components with user experience in mind.

The solutions we develop on the UI side are dependent on our API, Security and Discovery Engines. Day to day you will be interfacing directly with our Engine development team, API engineers, and security researchers.

Assetnote is a remote-first company. This position is remote with a preference for candidates located in Australia, however, we will consider strong applicants located outside of Australia.

More details and application form here: https://apply.workable.com/assetnote/j/A2FA4AC75A/

Re:Taking over Uber accounts through voicemail on Monday July 05, 2021 @05:19PM (#27741923)
There's not really much user interaction required. You just have to engage the victims cell phone when sending the OTP. The voicemail hack doesn't require any user interaction.
Re:Ask HN: Who is hiring? (March 2021) on Tuesday March 02, 2021 @03:53AM (#26313274)
Assetnote | Engineer (Backend & API) | Remote Australia

At Assetnote, we are building the world's best Attack Surface Management platform. Used by companies all around the world, from innovative startups to Fortune 100 companies, the platform you will be building is helping protect hundreds of thousands of assets from compromise.

By joining our growing engineering team at Assetnote as a Back End & API Engineer, you will be responsible for extending the capabilities of our Continuous Security Platform through developing our Python/Flask back end.

In this role, you will be required to build and maintain our APIs and back-end components, improve scalability, performance, and reliability, and also maintain our APIs and dependencies. This role requires that you are confident with GraphQL, PostgreSQL, using SQLAlchemy as an ORM, and be capable of engineering scalable database models.

The solutions we develop on the API side are dependent on our Security and Discovery Engines. Day to day you will be interfacing directly with our Engine development team, front-end engineers, and security researchers.

Assetnote is a remote-first company. This position is remote with a preference for candidates located in Australia, however, we will consider strong applicants located outside of Australia.

More details and application form here: https://apply.workable.com/assetnote/j/D75870A5D2/

Re:Hacking on Bug Bounties for Four Years on Friday September 18, 2020 @07:07AM (#24515276)
Paid in USD, worked remotely (conversion rates)
Re:Hacking on Bug Bounties for Four Years on Friday September 18, 2020 @04:41AM (#24514412)
Author of the blog post here. I want to make it clear that I had multiple full-time jobs along the way that paid over 200k AUD/year and it required a lot of effort to do both bug hunting and work full time. I only did bug bounty hunting full time for around a year while I was traveling around Europe. I just really love hacking. Bug bounties landed me my first job in the industry and have led to countless opportunities in my career so far.

Older »