MrBruh

6 ms·

31.
by MrBruh 3y ago
I had my blog be on the front page for ~6-8 hours racking up 100k+ unique loads. It also managed to survive just fine on a $5 VPS so I would hope that other sites could survive.
32.
by MrBruh 3y ago
Ah my bad, misinterpreted it
33.
by MrBruh 3y ago
I don't think comparing a 2017 phone to a 2023 one is a fair comparison by any stretch. If you want something more similar I would suggest the standard "Samsung galaxy S23" which has 8Gb compared to the IPhones 6Gb
34.
by MrBruh 3y ago
Sure but it's FOSS, so audits are pretty easy. Plus as part of the pentesting I watch the network stack in Firefox sometimes so I would tell if it was trying to exfiltrate date
35.
by MrBruh 3y ago
To clarify the dates, the vulnerability was discovered on a Saturday (Friday evening) their time. It was reported on Tuesday (Monday their time) The only email listed on their site was for the sales team which would not be checked on a week
36.
by MrBruh 3y ago
Don't worry, it was only a couple passwords for their admin accounts.
37.
by MrBruh 3y ago
Thank you, the kindness goes a long way!
38.
by MrBruh 3y ago
Shouldn't anymore, was a "pushing to production" moment. I wanted analytics since my site was getting flooded \w traffic.
39.
by MrBruh 3y ago
It is using the Avif format (for images) for a 2x compression bonus over PNG while still maintaining a higher quality over JPG. If you can't view the images then it means you are likely using an outdated browser, all current versions o
40.
by MrBruh 3y ago
New Zealand GMT+13 Moment
41.
by MrBruh 3y ago
I feel I should clarify, the writeup was not the blog but rather than vulnerability disclosure report (PDF) I sent to them directly.
42.
by MrBruh 3y ago
> any account on any one of their existing customers had full access to every row in the database. Correct. :/
43.
by MrBruh 3y ago
> Good Samaritan The web is insecure enough as it is, I just want to do my part to make it that little bit safer :)
44.
by MrBruh 3y ago
loud buzzer Sorry, but supabase has a similar issue. Another blog going over that has or will be made by Eva (referenced on the site)
45.
by MrBruh 3y ago
That's my lovely cat, Jingles. She is getting a bit old so I thought I would immortalize her on the homepage of my site.
46.
by MrBruh 3y ago
It was posted earlier today (NZ Time). If they do end up reaching out though, I will amend that part with a revised statement :)
47.
by MrBruh 3y ago
Much appreciated, I am always open for further feedback too! (If there are ways I can improve my writing)
48.
by MrBruh 3y ago
> I thought there was a US law now where breaches like this have to be reported? Yes. > Will they report it? Probably not (unless forced imo).
49.
by MrBruh 3y ago
Probably yeah, although it just comes down to if they get Sued or not I guess. NOTE: I am not a legal professional, just making my guess.
50.
by MrBruh 3y ago
It exposed PII of the managers & employees of ~half of the most popular fast food companies. Personally I feel the title is justified but I understand and respect your viewpoint. Also keep in mind that trying to clarify the such would a
51.
by MrBruh 3y ago
I wasn't expecting a bug bounty, but not even a 'thank you' does hurt my soul :(
52.
I pwned half of America's fast food chains simultaneously(mrbruh.com)
1081 points by MrBruh 3y ago|474 comments
53.
The Up Phone Is a Fucking Disaster(mrbruh.com)
3 points by MrBruh 3y ago|0 comments
54.
by MrBruh 3y ago
My guess would be to prevent smoking or vaping
55.
by MrBruh 3y ago
cough monero cough
56.
by MrBruh 3y ago
How many hours of battery life with standard use?
57.
by MrBruh 3y ago
MrBruh.com Only one article, but I'm looking to expand upon that
58.
by MrBruh 3y ago
The source (is cool to have) but it does not include any installation instructions in the slightest. Also it sounds like you would still need to "sign in" even if you built it from source.
59.
by MrBruh 3y ago
Where can I download an executable binary I can run directly on my system, ideally without having to make an account either? Those are two pretty important things for me
60.
by MrBruh 3y ago
Nah you need to think about it in terms of computing power compared to each other. According to the screenshots of XMRig for android you only get about ~35H/s while my laptop does ~2400. That's 68x faster so if it took my laptop 2

More ›