j_lagof
Re:Reviewing host companies - Which one is more secure?
on Thursday September 02, 2010 @01:42PM (#1656947)
Hint: Rackspace lost badly (21% of the sites they hosted got blacklisted in the last 90 days). Netsol won with only 1% of sites blacklisted...
Re:TELL HN: Many sites at Bluehost got hacked today (including their C...
on Monday June 28, 2010 @08:02AM (#1467638)
You mean yesterday?
Re:Microsoft by the Numbers
on Monday June 28, 2010 @08:00AM (#1467634)
Apple has been doing way worse things and nobody (of importance) seems to care.
Google top 1000 sites: Interesting stats about them
Re:Platforms are for Suckers: Why you shouldn't build your business on...
on Wednesday June 02, 2010 @04:58PM (#1399356)
It is funny that Windows is a proprietary platform and nobody (government) ever allowed them this kind of control/restriction.
Now Apple/Twitter/Facebook is going crazy and nobody does nothing...
Re:OSSEC v2.4 released
on Monday April 05, 2010 @01:33PM (#1242454)
OSSEC is a powerful open source HIDS. If you are not using it on your servers, you should be.
OSSEC v2.4 released
Re:Apache.org defaced - Security archive case study
on Sunday March 07, 2010 @06:37PM (#1174266)
More like a lessons learned from the Apache defacement.
Apache.org defaced - Security archive case study
Foursquare Just Made Your Location History A Lot More Interesting
Re:The Importance of logging for web applications - Security talk
on Thursday March 04, 2010 @01:18PM (#1167593)
Very good article and awesome mention of OSSEC. Good to see it gaining some attention.
Removing malware from a Wordpress blog - Case study
Re:Fingerprinting web applications (Wordpress, Joomla and Mediawiki)
on Friday January 29, 2010 @10:07PM (#1088158)
Very interesting research describing a simple way to detect which version a web app is running.
They just fingerprint a few css/js files, get their md5sums and create a list of them for each version...
Fingerprinting web applications (Wordpress, Joomla and Mediawiki)
Re:Google offers $500 reward for finding out security related Chromium...
on Friday January 29, 2010 @10:03PM (#1088152)
Great initiative. Note that for 3l33t (severe) bugs found they will pay $1337 instead.
Re:Ask HN: Is a .net domain good enough?
on Tuesday January 19, 2010 @10:10AM (#1062260)
I agree, it is the same thing as buying a piece of land and waiting for the area to become more popular and sell later...
The issue comes from the fact that buying domains are very cheap and easy, but that's other problem.
*btw, I am not saying that I approve people with 1000s of domains just waiting for someone interested, but the business idea is the same.
Re:Top 6 Web Browsers You Probably Haven’t Heard Of
on Tuesday January 19, 2010 @10:06AM (#1062250)
Most of these look like just extensions of the "big" ones, optimized for specific purposes...
Honeypot analysis - Looking closer at SSH scans (user and passwords used)
Tell HN: Watch out for scams exploiting Haiti earthquake
It seems to be common now, so watch out if you plan to donate any money to help..Some links: http://isc.sans.org/diary.html?storyid=7987 http://isc.sans.org/diary.html?storyid=7978
Re:Ask HN: Where do you host your startup web services?
on Thursday January 14, 2010 @02:08PM (#1053317)
I will recommend Linode, for me it has been working great, no downtimes, good support ,etc.
I also having a good experience with GoDaddy, but it seems that I am an exception and not the rule, since everyone complains about it.
Good luck!
Closer look at IIScan - Traces a web scan leaves in your logs
Interview: Arch Linux Team
Re:Ask HN: Spam fighting with bogus lead gen nowdays?
on Tuesday January 12, 2010 @08:26AM (#1047390)
I really think email spam is a problem already solved (at least for most end users). I use gmail, yahoo and hotmail (for different accounts) and I rarely get any spam.
Now, I know the anti-spam tools are working very hard to stay updated, but using the spammers tactic is too much. Why change if the current research/defense tools are working?
Re:Ask HN: Monetizing a mailing list
on Tuesday January 12, 2010 @08:22AM (#1047385)
But is there any company offering that? Tracking that via a mailing list is much harder...
Ask HN: Monetizing a mailing list
Hi HN,I run a few popular mailing lists (in their respective areas) and I was thinking on adding small ads at the bottom of every post (related to the topic of the list).Is there such a service anywhere? Something like adsense for emails? ( not necessarily mailing lists) Maybe another ideas on how to monetize it?
Re:Passwords Aren't As Secure As We Think - How to Fix That
on Monday January 11, 2010 @04:34PM (#1046083)
I agree. What I said is that I do something similar to it, not exactly the same.. I have a little shell script that I run:
./pass-site.sh http://facebook.com
" #!/bin/sh
SITE=$1 stty -echo read UPASS stty echo PASS=`sha1 "$SITE $UPASS"` echo "PASS: $PASS" "
Easy DNS BIND Sinkhole Setup
Re:Unusual Software Bugs
on Monday January 11, 2010 @03:51PM (#1045965)
usual software bugs: One that the developer can't fix and will blame the user for that :)
Re:Passwords Aren't As Secure As We Think - How to Fix That
on Monday January 11, 2010 @03:48PM (#1045951)
I still prefer schemes without any kind of software for my passwords... Something like that:
http://blog.sucuri.net/2009/10/password-security-without-pas...
A javascript app for that would be good, btw :)