Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
BCharlie
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
5 ms
·
1.
▲
Democracy and Mass Skepticism of Science
(papers.ssrn.com)
1 points
by
BCharlie
5y ago
|
1 comments
2.
▲
Security Bug Hunting with Proxies
(nullsweep.com)
1 points
by
BCharlie
6y ago
|
0 comments
3.
▲
NoSQLi – A Fast NoSQL Injection Framework Written in Go
(nullsweep.com)
3 points
by
BCharlie
6y ago
|
0 comments
4.
▲
by
BCharlie
6y ago
I mention that the data that appears to be used for those purposes is sent again in a separate request to a separate end point, so we have two types of requests: last read location, and reading analytics. Sorry it wasn't clear, I'
5.
▲
by
BCharlie
6y ago
That's a great idea! It looks like the 'bad' stuff goes to unagi-na.amazon.com
6.
▲
by
BCharlie
6y ago
Though I haven't analyzed other devices (because I don't own them), they could easily have similar issues. I personally really want an open e-ink device, but I haven't seen one for sale unfortunately. For now, I do Calibre OD
7.
▲
Kindle collects a surprisingly large amount of data
(nullsweep.com)
545 points
by
BCharlie
6y ago
|
379 comments
8.
▲
Defcon 2020 Live Notes
(nullsweep.com)
1 points
by
BCharlie
6y ago
|
0 comments
9.
▲
Secrets Management for Developers
(nullsweep.com)
1 points
by
BCharlie
6y ago
|
0 comments
10.
▲
Government Surveillance of Protestors
(nullsweep.com)
1 points
by
BCharlie
6y ago
|
0 comments
11.
▲
by
BCharlie
6y ago
Yikes! Maybe that's the next thing I will take a look at...
12.
▲
by
BCharlie
6y ago
That makes a lot of sense. I assumed it was somehow for anti-fraud, though I still don't like it.
13.
▲
Why Is This Website Port Scanning Me?
(nullsweep.com)
1294 points
by
BCharlie
6y ago
|
430 comments
14.
▲
My Favorite InfoSec Learning Resources
(nullsweep.com)
2 points
by
BCharlie
6y ago
|
0 comments
15.
▲
by
BCharlie
7y ago
Perhaps calling it an heroic effort would suit your taste more? "Those teams rebuilt around 4,000 servers and 45,000 PCs and other devices" over 10 days (according to another article), while the company "ground to a halt"
16.
▲
by
BCharlie
7y ago
I completely agree. I was only pointing out that even extreme cases don't seem to lead to proper valuations. Many companies do things in a way where miracles aren't required - but the values perceived by those departments still do
17.
▲
by
BCharlie
7y ago
I wish I knew of some way to change this paradigm. I have repeatedly seen IT/Engineering teams pull out miracles that save a business, or deliver the critical edge for growth, only to have the business value that same team close to zer
18.
▲
A Better Way to SSH in AWS
(nullsweep.com)
3 points
by
BCharlie
7y ago
|
0 comments
19.
▲
Subdomain Reconnaissance
(nullsweep.com)
2 points
by
BCharlie
7y ago
|
0 comments
20.
▲
Deploying Docker Securely
(nullsweep.com)
2 points
by
BCharlie
7y ago
|
0 comments
21.
▲
A NoSQL Injection Primer (With Mongo)
(nullsweep.com)
2 points
by
BCharlie
7y ago
|
0 comments
22.
▲
by
BCharlie
7y ago
Thanks for this response - lot's of new information here that I'll have to read up on!
23.
▲
by
BCharlie
7y ago
You are right on this - I thought you could set multiple sites by setting multiple headers, but it doesn't work that way, which I should have known because headers don't work that way in general... The recommended way to do multip
24.
▲
by
BCharlie
7y ago
Thanks for the feedback! I did link the official site, but it's kinda buried in the paragraph and maybe not obvious. I added some text to the x-frame-options to note the CSP rules - it's a great addition.
25.
▲
by
BCharlie
7y ago
Great point! I added a sentence to say that the default is all that's needed.
26.
▲
by
BCharlie
7y ago
That is true! I do set frame-ancestors in the sample CSP for this reason. I could probably do a dedicated post on CSP to do it justice, but don't want to overwhelm anyone who just wants to start setting headers. One good reason to set
27.
▲
by
BCharlie
7y ago
I think it's a good point which is why I set the time low, even though many other resources set it to a week or longer. I just don't like very long cache times for anything that can break, so that site owners have a little more fl
28.
▲
HTTP Security Headers – A Complete Guide
(nullsweep.com)
709 points
by
BCharlie
7y ago
|
78 comments
29.
▲
Show HN: Firefox Plugin Privacy Test Database
(nullsweep.com)
10 points
by
BCharlie
7y ago
|
0 comments
30.
▲
Digging Through Someones Past Using Osint
(nullsweep.com)
3 points
by
BCharlie
8y ago
|
1 comments
More ›