News for hackers. Stuff that matters.

whiskeykilo

Re:Ask HN: What have you built with LLMs? on Tuesday February 06, 2024 @02:07PM (#39278979)
Even more ominous that it's free
Re:Disclosure: Unlimited Chase Ultimate Rewards Points on Wednesday November 04, 2020 @04:30PM (#24993252)
It's slow going but we'll get there eventually. NIST made a recent revision to SP 800-53 that includes responsible disclosure as a recommendation: https://csrc.nist.gov/publications/detail/sp/800-53b/final
Signal cares so much about UX that they're starting to agitate security/privacy diehards. They've implemented features like stickers and message reactions that the diehard community calls "useless". And they recently implemented PINs with the intention of storing your encrypted profile and settings for easy recovery on a new device.

I applaud the direction they've taken. These are the kinds of features that will acquire and retain a broader user base.

Re:$100M in bounties paid via HackerOne to ethical hackers on Wednesday May 27, 2020 @06:08PM (#23330691)
Not sure what you’re looking to get into specifically but here’s some resources you can look at in no particular order:

Hack the Box Try Hack Me Pentester Lab Hacker101 Portswigger Web Security Academy Linux Academy Bugcrowd University Hacksplaining Cybrary Malware Unicorn bugbountyguide.com CTFtime root-me.org MalwareTech Nahamsec The Cyber Mentor

Exactly. Most people didn't even get picked for payment. I don't want a shitty monitoring service I want to see Equifax bleed
Re:Slack account takeovers using HTTP Request Smuggling on Friday March 13, 2020 @12:55PM (#22568853)
It's a free market. Don't like the payout? Don't submit the bug. Someone else probably will anyway
Re:Apple News No Longer Supports RSS on Friday December 27, 2019 @05:04PM (#21895149)
As someone who grew up on Windows when I initially started working on a Mac daily this drove me absolutely nuts. It could be worded much better.

The way Finder sets the default view is equally unintuitive

Re:Setting up a home VPN server with WireGuard on Friday November 01, 2019 @05:05PM (#21423684)
Not quite yet. But also like another user said, DuckDNS

"Note: Starting January 1st, 2020, GCP will charge for VM instance external IP addresses. However, under the Free Tier, in-use external IP addresses will be free until you have used a number of hours equal to the total hours in the current month. Free Tier for in-use external IP addresses apply to all instance types (not just f1.micro instances)."

Re:Setting up a home VPN server with WireGuard on Friday November 01, 2019 @05:04PM (#21423676)
That's true, I forget about that bc I use it so sparingly

"1 GB network egress from North America to all region destinations per month (excluding China and Australia)"

Re:Setting up a home VPN server with WireGuard on Friday November 01, 2019 @03:07PM (#21422601)
I've never heard of this. Is this exclusively a Digital Ocean issue?
Re:Setting up a home VPN server with WireGuard on Friday November 01, 2019 @03:06PM (#21422595)
I set one up using a free GCP instance and it's been working great so far. Would definitely handle your described usage and save you $5 a month
Re:Ghidra, NSA's reverse-engineering tool on Wednesday March 06, 2019 @10:54AM (#19319804)
I suspect they're just trying to expand US cyber capabilities and recruiting.

“If I go to the next capture-the-flag contest and I see some college students using Ghidra, I will be really excited” - Rob Joyce, senior cybersecurity adviser at NSA

Source: https://www.cyberscoop.com/ghidra-nsa-tool-public/

The Trail of Bits piece kinda ignores the amount of time invested however: https://www.techrepublic.com/article/bug-bounty-programs-eve...
Anyone on HN understands the implications of this. But does your average user? I doubt it. They just know they can install a little box and get paid. Digital privacy means nothing to far too many people
That just sounds like AdGuard. Plenty of consumer routers offer VPN server capability for free. That combined with DuckDNS or a similar free service would be a better option I think