News for hackers. Stuff that matters.

utefan001

Re:NoSnoop – Find out if your HTTPS traffic is being monitored on Saturday November 02, 2019 @02:29PM (#21429210)
FYI, if you google mitm check you should see a link to this site. A service provided by the caddy server devs. https://mitm.watch/
Sharing for anyone who didn't know there is a very good dataset you can use now. If you don't have a nvme ssd in your computer, I highly recommend getting one for fast i/o.

http://commoncrawl.org/ http://commoncrawl.org/the-data/ http://index.commoncrawl.org/

related.. Mark's blog is amazing and worth more than any data science degree imho.

https://tech.marksblogg.com/petabytes-of-website-data-spark-... https://tech.marksblogg.com

The sad truth is Congress is the biggest offender of poor network security practices. Every time they bring in Equifax, DHS, etc to explain why they didn't practice basic IT security due diligence or due care I am reminded of the time smart people were hired to implement basic network security for Congress. Once they realized Joe in IT (who was hired to keep hackers out) can see Congressman Bob has a foot fetish, fish fetish, whatever, Congress told IT to turn everything off.
Re:The Tragedy of Baltimore on Tuesday March 12, 2019 @08:17PM (#19374422)
Spaces (like wework) has 3 floors here. This area near Ravens Football stadium is definitely getting better. But it is one of the areas that the city cares about over other areas unfortunately.

https://bit.ly/2XRl0fu (google maps)

Building the skills to bypass it is a win. That is also learning.
Main goal is to get children under twelve to go outside, jump in puddles, ride their bikes. My daughter did 10 rounds of this once, 10 hours of youtube with 5 multiplication problems each hour and eventually decided youtube wasn't worth it. It helps children to disconnect for a couple minutes and re-evaluate their summer day life choices.
In case Netflix is dominating your time... This is my Free Chrome plugin that will block Netflix after 1 hour and wait for you to commit something on Github to keep Netflix and Chill'n. Other options like Khan Academy are suppported.

https://chrome.google.com/webstore/detail/studycity/jhehahil...

Re:Ask HN: How did you learn MetaSploit? on Sunday November 04, 2018 @08:25PM (#18379118)
Vulnhub has hundreds of virtual machine images you can download and practice with, such as metasploitable. Hack the box is great. If you want to read a blog post describing how to get admin or root on a box, google boxname walkthrough with vulnhub or hack the box in the search as well. Ippsecs's 90+ youtube videos are excellent. Check out metasploit minute videos. I also heard pentestlabs is good. Good luck!
Re:U.S. Robocall Data on Friday October 12, 2018 @09:26PM (#18205865)
I bought this last month for our land line and it has been awesome.

CPR Call Blocker Protect - White List Call Blocker - Protect Vulnerable Adults - Block All Apart From Who You Want To Speak To.

https://www.amazon.com/CPR-Call-Blocker-Protect-Vulnerable/d...

Fair question. There are a number of differences between apps like Freedom and StudyCity. We are aware of the recent VPN rules. StudyCity simply needs a gate to direct the student / child to take a couple of minutes to earn points on Khan Academy or another supported site. The gate can be implemented in many ways. At the moment, this is all the detail I can provide.
My iOS app studycity may provide what you are looking for. If not, we might be able to modify it to provide some of the features freedom did.
One way to use this plugin would be to break tasks down into manageable pieces. It is usually easier to motivate yourself to knock out a 15 min task than to do a 4 hour task.
This is not production perfect yet, but it integrates with Github, DuoLingo, and several education sites to offer similar help to develop better habits. Target market is children, but we added a github option to measure progress as an alternative to the learning sites.

https://chrome.google.com/webstore/detail/studycity/jhehahil...

Re:US breaks up IRS phone scam operation on Tuesday July 24, 2018 @03:12AM (#17598752)
I either disagree or am ignorant about SS7. See my other post on this page. Interested to read others thoughts about implementing a "opt-in, call back only or GTFO system".
Re:US breaks up IRS phone scam operation on Tuesday July 24, 2018 @03:08AM (#17598728)
I don't know enough about SS7 to understand if this is feasible, but it is clearly time for a call back based system. Millions of people signed up for the do not call registry. I am sure millions would sign up for a system where incoming calls trigger a call back. If your out bound call system doesn't support call back, don't worry because nobody wants to talk to anyone hiding behind the cloak of invisibility.
I never have asked this in 10 years on this site. Can the downvoter(s) clarify the reason? I have spokenwith 1,000+ parents and teachers individually. Easily 90% are very excited about it. It is simply a tool. I don't think every child should use it. In fact, I hope children that use it eventually stop because they have developed better study and time management habits.
This is our twitter account. This link has a few tweets that explain more about it.

https://twitter.com/DnsLearningOrg/with_replies

If you have time, please give our free iOS app studycity a test. It will block fun sites after 1 hour. In order to get access back the user has to earn 5+ points on khan, duolingo, code combat, prodigy, Tynker etc. Our servers will log in as the child or make an API call on the learning site to verify.

It works by using a dual mode DNS (learn and play modes). Note the app requires vpn approval, but we only control the DNS. If you want to avoid that you can manually set up the phone after a free signup on our studycity org website.

Re:Twitter engagement rates (2.7% good?) on Thursday June 07, 2018 @09:27PM (#17261850)
I am new to social media marketing. From what I have read online, 2.7% is very good, but I don't think the few blogs I read are authoritative sources on this.
Basically creating a minor leagues of devops recreating famous or no so famous mistakes that have been made in the last 40 years. "Hey Carlos my emails won't work over 500 miles"
Not necessarily, as a Oregon based non profit / a "real" company we can add the interns to the staff web page, we can tweet or blog that Carlos / Carla made this thing or solved this problem the company or software had. When a college emails to verify the internship offer we are able to confirm so that the student gets as much credit as his friend interning at a larger company. We could even have a shitty slow timecard system and have a guy who emails you like the world is ending if your timecard is late. Then we could practice not doing all the wrong things during our daily conference call meetings. Older interns could give really ackward and irrational performance reviews. Why wait to show them what an incompetent boss is like if they could experience it as an unpaid intern? Also practice the many IT nightmares that senior people have been burned by. "Hey can you restore the S drive you have been responsible for backing up?" "Damn, no files below 100 nested levels are here! Did you test the backups to see if they were restoring everything?" "All files are replicated to the mirror sure, cool, looks like accidental deletes are also replicated"

Ask HN: Market need for unpaid remote internships to gain experience?

In the past week I have had 8 people say they are interested in doing an unpaid remote internship in order to gain experience.Long explanation, but context is important.. Considering my side project (studycity dot org) involves helping children gain knowledge and confidence through "encouraging" them to visit education sites, detecting the points earned, and rewarding them by granting another...

( Read More... | 3 comments | 2 points | on HN )
Thanks Scott. I totally agree. Most frustrating challenge is that I have had many people (250+) say "this is amazing" etc. But it has been very difficult to convert that interest to a significant user base. Part of the challenge is at one end of the scale, parents don't care and at the other end of the scale parents have the issue under control. Even if parents love the concept, getting them to become users is way more difficult than I imagined.
I am thinking seriously about open sourcing this. It will log into sites to check for point progress and restore access after some points are earned. My daughter only needs 2 or 3 minutes of khan academy to earn enough points to get youtube back. I am proud of what my friend Kris and I built, but getting tired of managing a side project / playing startup.

https://itunes.apple.com/us/app/studycity/id1339396223?mt=8

website is studycity dot org

Ask HN: How do I find an organization to take 55% of my education “startup”?

During the last 2 years, I joined the "play startup" club. I am very proud of where the project is. Our iOS app is not perfect, but it works very well. I have come to a point where I need to set it free (no cost) to give it a better chance to grow.See this link for a quick picture of how the StudyCity iOS app...

( Read More... | no comments | 4 points | on HN )
Re:AT&T updates firmware to block access to 1.1.1.1 on Thursday May 03, 2018 @01:33AM (#16983564)
Shameless plug.

Older »