3 ms·
Hello friends, I'm one of the founders. Zero-days are exciting but we're especially good about the things that don't stay on the top of HN all day. Silent kill
by phillmv 11y ago
Hello friends,
I'm one of the founders. Zero-days are exciting but we're especially good about the things that don't stay on the top of HN all day. Silent killers as it were.
Today we support Ruby and Ubuntu but we're expanding quickly! And if you're interested but don't have the time to try us out today, we also made http://isitvulnerable.com/ http://isitvulnerable.com/ to demo what we can do.
Cheers,
- aaroncray 11y agoSo how are you finding the exploit signatures you don't know about? Is your claim that you are trying to take purchased 0day and creating a signature profile then doing a tripwire-esque agent on the machine? What is the claim here? "We protect against zero day" makes me think "how?" If I find a way to attack a well known service that gains me access to a system and you don't know about that flaw... that's a 0day so how are you possibly going to protect against that attack?
- iheartmemcache 11y agoCan you talk about the internals of your system without giving away your secret sauce? I.e., are you doing anything more than pulling CVE notifications, comparing the vuln against what the server is running, and if there's an intersection, inform the end user? (Not to belittle your product -- patio11 made a living, and more importantly a brand, off of a Bingo Card app. Your product certainly offers value, and its particularly underpriced if you ask me. Still, I'm genuinely curious if you're doing any heuristic analyses, fuzzing, or other server-specific things to determine whether or not you're vulnerable to said exploit.)