xSwag

Isn't Thiel a billionaire? I don't understand why he would do so much to promote a £9.99 book.

Brilliant, I can finally implement one of my bandwidth intensive ideas! Thanks Steven!

I've just read their main website. Out bandwidth at $0.01 per GB? Has anybody tried this? Looks too good to be true.

IMO there should be some sort of header like

    x-whitehat: autopatch

which gives white-hats the opportunity to patch your system without exploiting. The why I see it, a malicious person is going to exploit your server anyway. This way white-hats could patch your system and not be prosecuted. With this, someone who discovered the patch could scan the internet, look for servers that say "yes, please patch me" and deploy a quick patch and nothing else.

Why a $1 plan? What if that user asks for support, would you value 15 or 30 mins of your time at $1?

> The all-you-can-eat is capped (small print) at a "fair usage" of 25 Gb/month.

I can tell you that this is wrong, I've personally had months where I've used 100GB+ of data over 3G and had no problems (this is on a £15 top-up). I don't know if they throttle or not, I've never really noticed it.

> Tethering is disabled while roaming overseas on "feel at home", but not prevented at home.

I didn't get my handset from Three but I've been able to tether in Paris and used at least 2GB when I was there.

$5 per 1k US visitors? How do you do that?

Why is this website not banned yet? They're very well known plagiarists.

http://attrition.org/errata/charlatan/infosec_institute/

1. Get loan

2. Don't pay it back

3. Ask debt collector friend to buy debt

4. Pay him off

Why would this not work?

StartSSL has an issue with Apple computers. I'll be getting a better SSL cert once I get more customers and revenue.

Hi, thanks for the feedback. I've asked for credit card details to prevent the abuse of this service since you can scan any website.

However, I'm currently in the process of working with the Google Analytics API to provide free scans for verified websites where the user can prove ownership -- this should roll out in about a week or so. Would you like me to drop you a PM when I release this feature?

Sorry about that, server got knocked offline. Should be back soon.

Hi everyone, this is the MVP I have been working on. It's almost 5am in the UK right now and I just wanted to launch as soon as possible and stop procrastinating (and waiting for my A-level results). It's funded entirely by my Google bug bounties, so thank you Google. I have not done any design stuff for it yet -- the site is very bare bones but functional.

Current solutions to vulnerability scanning such as WPscan are good but not user-friendly -- which is what I believe what WordPress users want. I've already got my first 5 customers prior to launch that wanted this product which I think is a good start, hopefully there is a market for this stuff.

I would love to hear any sort of feedback.

Anybody else more interested in when Dr.Dre is going to release Detox? I'd love to hear him rap about multi-billion deal

So who's buying the IPO? Seems much better investment than SV companies with little or no profit.

I wonder how it will affect YHOO -- Probably worth buying Jan 2015 $40 calls since Yahoo owns 24% stake, maybe even short AMZN on day of IPO.

Counterpoint: Most quant jobs require a Phd in a STEM subject.

I built a security scanner that scans WordPress installations for threats (plugin vulns, outdated installs, theme vulns, xss, sqli etc) without any installation or code knowledge required. I posted it on Reddit and got a few sign ups, after that I just got bored and I'm not sure what to do next. I'm thinking about partnering with WordPress tutorial websites and give them a recurring revenue cut or something. I really wish I was better at marketing products. Maybe I should just sell it or something. Any WordPress related websites with good amount of traffic please contact me if you're interested in partnering.

Yes let's arm ourselves with pitchforks based on an anecdotal experience of a stranger on the internet.

No.

Simple logic: The defacement was amature at best. If the group has a 0-day in a hypervisor they would have gone to multiple hosting companies and multiple attacks would have taken place, there are many more targets that are worth much more than openSSL.

Most likely, the administration panel of the hosting company was comprimised through malware/phishing. Seriously, if a group like this had a 0-day in hypervisor then they would be doing much much more damage.

There is an easier way to solve this issue: Bug Bounty.

It worked for Google, it worked for Facebook and its working for Yahoo! Infact, it worked so well for Google that they recently increased the rewards. A venture-backed startup like Snapchat that stores private pictures (even temporarily) should have no trouble paying out $5k a few times for vulnerabities.

This blog is not hosted by the Skype but on WordPress VIP. This means that, most likely, the blog was not broken into using a software exploit of any sort since the security on VIP blogs is professional. Knowing that this is the Syrian Army, this attack was most likely done using phished credentials.

If they had any sort of system access they would have defaced the entire subdomain or the main site. So most likely, this is nothing to worry about. Your account data most likely still in safe hands.

TL;DR: In the DigitalOcean web panel you can check the "scrub data" checkbox when destroying a VM. When using the API this option is not ticked. This can lead to other customers being able to retrieve your data.

The author thinks that this is a security issue because this option should be enabled by default. However, (I assume) it's not in Digital Oceans interest to do full disk scrub because it reduces the lifespan of their SSD.

If a user forgets to log out of Facebook on a public computer, is it Facebook's responsibility? Similarly, if a user does not correctly delete data on a budget host, is it the hosts fault?