_pdp_

51 ms·

811.
WhoAreThey – enum org and personal social profiles(github.com)
1 points by _pdp_ 8y ago|0 comments
812.
BountyHQ – Pre-Compiled Bug Bounty Recon Datasets(bountyhq.secapps.com)
1 points by _pdp_ 8y ago|0 comments
813.
by _pdp_ 8y ago
There is almost no information about this company. I did a passive recon and this is what I've got: https://recon.secapps.com/f/EMh9
814.
by _pdp_ 8y ago
As a developer of a extremely large code-base written in Rect ( https://launchpad.secapps.com for reference of the kind of apps we are talking about), I am not convinced that "Hooks" solves anything in particular that i
815.
by _pdp_ 8y ago
The way they killed all their other useful products?
816.
Pown Recon: open-source intelligence framework powered by graph theory(github.com)
2 points by _pdp_ 8y ago|0 comments
817.
What I learned at work this year(gatesnotes.com)
4 points by _pdp_ 8y ago|0 comments
818.
Show HN: Pown Proxy – MITM web proxy with text ui(github.com)
10 points by _pdp_ 8y ago|0 comments
819.
CVEs on GitHub(github.com)
11 points by _pdp_ 8y ago|3 comments
820.
by _pdp_ 8y ago
If you want to automate scanning your apps look no further than OpenDevSecOps's terraform scanner module ( https://github.com/opendevsecops/terraform-aws-scanner ). wpscan is currently integrated but you can also us
821.
by _pdp_ 8y ago
Sure. That will be the case in extreme circumstances like your tokens for the AWS root account, etc. The average consumer will have only two at best.
822.
by _pdp_ 8y ago
Your backup key is the second hardware token. You don't have any other backup keys :)
823.
by _pdp_ 8y ago
Clearly an improvement but let's face it - once you loose/break the keys you will have to go through an extensive verification process (up to 3 days according to google) and there is no guarantee you will pass that stage either. L
824.
by _pdp_ 8y ago
Sign up for monzo and some of the new banking apps and try to find really hard a password field anywhere.
825.
by _pdp_ 8y ago
Well this is quite bit of generalisation. My business eradicated servers and containers and replaced them with AWS Lambda Functions composed in microservices architecture backed by DynamoDB tables. The result was an order of magnitude reduc
826.
by _pdp_ 8y ago
Dynamodb can also be used as a one-time scheduler and I will say it will look also a lot simpler than this example. In dynamodb you can set TTL for a record. When the record expires it will fire event to your designated lambda. That's
827.
Continuous security monitoring for cloud infrastructures(secapps.com)
1 points by _pdp_ 8y ago|0 comments
828.
by _pdp_ 8y ago
This is deterrent for storing a plain text password in a file on your desktop. Frankly, if you are already keylogged your plain text passwords are already stollen.
829.
by _pdp_ 8y ago
I generally agree but would you place your security in the hands of some 3rd-party providers such as password managers? If you do that then their problems instantly become your problems. I am not saying that password managers are without an
830.
by _pdp_ 8y ago
Yes. There is currently pretty poor support for Safari and specifically IE but we are working on it.
831.
by _pdp_ 8y ago
Shameless plug scanner.secapps.com - tests are executed in your browser.
832.
by _pdp_ 8y ago
I cannot up-vote this more. Many people don't realise that they don't own their phone number! It is possible to own a phone number but it is not widely available just like domains are. Hence it is a stupid idea to use it as an ide
833.
by _pdp_ 8y ago
Signing will add another factor indeed. :(
834.
by _pdp_ 8y ago
Just because they are "hackers" it does not mean they know how to program. There are a lot of "hackers" that actually suck at it.
835.
Hackers just broke the iPhone X's Face ID using a 3D-printed mask(wired.co.uk)
15 points by _pdp_ 8y ago|7 comments
836.
Alt.comp.virus (15 years ago)(alt.comp.virus.narkive.com)
2 points by _pdp_ 8y ago|0 comments
837.
by _pdp_ 8y ago
Good timing! I would not say that apps are addictive. Some of them are be but not all. Yesterday I was running a thought exercises around what makes Facebook, Instagram and Twitter so popular and why people keep flocking there despite their
838.
Beyond LLMNR/NBNS Spoofing(blog.netspi.com)
2 points by _pdp_ 8y ago|0 comments
839.
by _pdp_ 8y ago
Speaking of code duplication in a traditional web app every page is an example of code duplication. How about that?
840.
by _pdp_ 8y ago
This not my point - my point is that although it is optional it is mentioned as the defacto standard. I don't think it is because it complicates things way to much. I cannot enumerate all decorators in this comment but we have one call

More ›