News for hackers. Stuff that matters.

mh_

mh_ on Hacker News

Re:It's our birthday – so we built everyone this retro game on Monday September 15, 2025 @05:04AM (#45247615)
We build tools (commercial: https://canary.tools) and free (https://canarytokens.org | https://opencanary.org) that help slowdown/detect attackers.

It supports normal(ish) pacman-like activity, except some of the dots you consume might be canaries, which will slow you down/likely lead to you being detected/caught.

Re:It's our birthday – so we built everyone this retro game on Sunday September 14, 2025 @12:09PM (#45240931)
It’s our birthday - so we built everyone this retro game.

(Complete all levels, and we will send you a special 10-year edition t-shirt)

Re:Be careful of the examples you use. They stick on Monday August 21, 2023 @04:25AM (#37206776)
Heh. "You can totally put in any value here, as long as its exactly this one"
Re:Canary Tokens on Saturday December 31, 2022 @08:13AM (#34196152)
You totally can?
Re:Apples AT&T demo was a good example of pg's “relentlessly resourceful” on Sunday August 28, 2022 @05:13AM (#32626902)
Ouch. I’m super curious why you found it such a waste. I found it super interesting (I guess for all the reasons in the post)
Re:Ask HN: Can we ban Twitter links, please? on Tuesday February 22, 2022 @04:25AM (#30425742)
I wrote this about 13 years ago (a little tongue in cheek) but it held up:

https://sensepost.com/blog/2009/twitter-killed-the-infosec-b...

-snip- There’s something liberating about saying “here’s a link”, as opposed to taking the time to formulate your thoughts into a full blown posting.

We were curious if this twitter-effect was real, imaginary or only applicable to lazy people like us.. Thanks to python-twitter and a few lines of script we can look at the the blogging habits of some info-sec superstars (and maybe confuse correlation and causation to jump to conclusions while we at it). -snip-

Re:Ask HN: Will referral codes cheapen honest referrals? on Wednesday January 19, 2022 @09:45AM (#29994198)
We are already pretty ok at gifting back (our hoodies/gifts have a pretty good rep).

I kinda default to “don’t mess with it” but sometimes wish we could do more to say thanks.

Ask HN: Will referral codes cheapen honest referrals?

Posted by mh_ on Wednesday January 19, 2022 @09:15AM
from the ask-hn dept.

Last year we cleared $11 million in ARR¹ with almost 100% inbound sales (while bootstrapped).Some customers have taken us into > 9 different gigs.We are considering a Tesla style referral reward program (use this code, rewards accrue) to say thanks, but don’t want to accidentally cheapen a previously honest, organic thing.Any thoughts?__ ¹...

( Read More... | 2 comments | on HN )
Re:Good attacks make good detections make good attacks (a MySQL booby-... on Monday September 13, 2021 @03:53AM (#28508890)
You can wave the encoding away (with a tick-box) but in general, people over-estimate what attackers will "notice". In cases like this, many are as desperate to get the loot as users are when they get phished. dialogue boxes and browser warning fade into the background as they hit "accept" to move closer to their goal.
Re:We bootstrapped to $11M in ARR on Thursday March 18, 2021 @10:41AM (#26503190)
I think it would depend on how those experts roll.

For infosec for example, i think if your product did "X amazing thing", then you'd definitely get a seasoned experts attention if you tweeted "hey, we built a thing that does X amazing thing, give me 5 minutes and i'll show it to you"

I think theres a part of this that means your products has to convince them in the 5 minutes they give you (or at least has to convince them to give you 5 minutes more)

Older »