News for hackers. Stuff that matters.

usernamebias

usernamebias on Hacker News

Re:Launch HN: Resend (YC W23) – Email API for Developers Using React on Tuesday June 13, 2023 @06:55PM (#36318776)
Just use Mailgun.
Re:Vivaldi on Android bypasses restrictions to let users access Bing Chat on Thursday June 08, 2023 @10:15AM (#36242238)
Piggy backing on Breaking ToS is prob a not a good idea.
Re:What happens when a Domain Registar is down for months with no end ... on Tuesday June 06, 2023 @08:39PM (#36221180)
Edit: I contacted Tonic and they got this resolved. I' so relieved.

I searched the Internet for any Representative, to no avail.

Thank you, shagie, your link did the trick.

Re:What happens when a Domain Registar is down for months with no end ... on Tuesday June 06, 2023 @06:35PM (#36220035)
Oh dear.

Where is my domain? With Tonic or in Limbo?

Anyone have a good guess?

Re:What happens when a Domain Registar is down for months with no end ... on Tuesday June 06, 2023 @06:31PM (#36219981)
Does this mean Tonic has the ability to access Domains? Or that's not how it works.

What happens when a Domain Registar is down for months with no end in sight?

Posted by usernamebias on Tuesday June 06, 2023 @05:51PM
from the self-post dept.

The registrar is Register.To -Website has been showing same message for months.Twitter account is silent since January.What options do I have?I would love to login and transfer my domains, but I am unable to login. Since page is completely down.The TLD belong to the Republic of Tonga.This is unprecedented. And I'm at a lost.Do domains expire on said Registar regardless?I have a very Profitable...

( Read More... | 7 comments | 3 points | on HN )
Re:Register.to has been under maintenance for months on Tuesday May 23, 2023 @04:21PM (#36050325)
Anyone heard anything?

.TO domains is the TLD of Island Nation of Tonga.

Re:Show HN: Easy Docs – (HTML, JSON and Markdown) Doc Generator. For G... on Tuesday July 12, 2022 @02:36PM (#32074020)
Cheers!

Did I mention FAQ & ChangeLog support!

Re:Nano Cryptocurrency Checkout API and Vanity URL service. on Friday September 17, 2021 @11:53AM (#28566934)
Reddit Thread: https://www.reddit.com/r/nanocurrency/comments/pq1s3t/from_d...
Re:My First Synthwave Website on Thursday May 20, 2021 @11:59AM (#27222874)
Make sure to try the music icon in the top right of the website. I made the playlist. ;)
Re:Show HN: Proof of Concept – ExpressJS Web Application Firewall and ... on Wednesday April 07, 2021 @12:22PM (#26727121)
Previously on Hacker News: https://news.ycombinator.com/item?id=26719964

Dataset: https://github.com/fwd/security/blob/master/blacklist.txt

Not very big, as it's a start. Looking for folks to help me expand it!!

Keep in mind this is for NodeJS applications. Where there are not .PHP and .CGI files, etc. This dataset would not work for other applications, for obvious reasons.

Re:Ask HN: Can we collaborate on a IP Address or Regex blacklist? on Tuesday April 06, 2021 @11:34PM (#26720323)
Is there one that comes in (.txt, .csv, etc) that I can download for free? I'd like to put together a proof of concept for ExpressJS (NodeJS) tomorrow.
Re:Ask HN: Can we collaborate on a IP Address or Regex blacklist? on Tuesday April 06, 2021 @11:27PM (#26720275)
Loading a big .txt file into memory and comparing each request to it feels like a good first start. Hopefully the open source community takes it further.
Re:Ask HN: Can we collaborate on a IP Address or Regex blacklist? on Tuesday April 06, 2021 @11:25PM (#26720269)
That's beyond my capabilities. I can certainly create a big preliminary .txt file from my dataset, and hopefully the open source community can take it from there.
Re:Ask HN: Can we collaborate on a IP Address or Regex blacklist? on Tuesday April 06, 2021 @11:11PM (#26720189)
Can't do that when 404's are expected from actual customers. I need to redirect 404 to /
Re:Ask HN: Can we collaborate on a IP Address or Regex blacklist? on Tuesday April 06, 2021 @11:09PM (#26720173)
Thats a great start. But blocking entire data centers seems too aggressive for public SaaS applications.

This has lit a fire in my arse. I'm going to create a repo tomorrow for ExpressJS (I'm a NodeJS nerd).

It can be used like this

app.use(blacklist.middleware)

It will compare every request to a known .txt of strings such as '.env' and others.

Regex is NOT my forte, Can I count on some of you guys to pitch in?

Re:Ask HN: Can we collaborate on a IP Address or Regex blacklist? on Tuesday April 06, 2021 @10:45PM (#26720030)
Maybe we don't filter by ip address, and instead filter requests based on known strings (or regex). That's what i'm currently doing. Ex. If request includes '.env'. Blocked!

I'd love to implement a more aggressive strategy. Rather than a reactive one. I'm currently finding myself going through server logs, and adding new 'keywords' to the 'banned list'.

Ask HN: Can we collaborate on a IP Address or Regex blacklist?

Posted by usernamebias on Tuesday April 06, 2021 @10:33PM
from the ask-hn dept.

Hear me out.I've recently started logging pings to my services, A LOT of servers ping me constantly checking for things like '.env' and other known vulnerabilities. I currently have a JSON dataset of about 10K entries. It looks like this.{ "offense": "boaform/admin/formLogin?username=ec8&psd=ec8", "ipAddress": "125.47.68.164" },{ "offense": ".env", "ipAddress":...

( Read More... | 43 comments | 36 points | on HN )
Re:Show HN: Formsend – Serverless Website Forms on Tuesday April 06, 2021 @10:21PM (#26719889)
Hi, apologies for the delay.

The public POST endpoint has strict rate limiting. And user dashboard has custom spam filters options.

Allowing public-key owner time to realize they are getting spammed, and block the IP via dashboard.

If a more complex attack was lunched, such as IP Masking, our API middleware would trigger and deny access based on more complex conditions.

Re:Show HN: Formsend – Serverless Website Forms on Friday April 02, 2021 @05:20PM (#26676125)
Thank you! Hope you enjoy it.
Re:Show HN: Formsend – Serverless Website Forms on Friday April 02, 2021 @05:20PM (#26676119)
Hi HN,

I'm really excited to introduce this little SaaS that's been on the market for some time now, but we finally polished the UI enough to advertise it to the general public.

Use case: Instantly add forms to any website or process existing HTML forms client-side.

I personally use it for all my AWS S3 static websites.

It's built 100% on NodeJS.

Happy to answer any questions.

Older »