_salmon

8 ms·

31.
by _salmon 7y ago
No one tell Louis Rossman
32.
by _salmon 7y ago
If you're going to have a 2-page login worflow, just make sure that you aren't making network calls client-side to check if the email is registered on the site. This is a super easy way for attackers to enumerate valid email addre
33.
Venmo Transaction Dataset(github.com)
2 points by _salmon 7y ago|0 comments
34.
Show HN: Miniprint – a medium interaction printer honeypot(github.com)
9 points by _salmon 7y ago|1 comments
35.
by _salmon 8y ago
Not sure if it was intentional, but unauthenticated users can see the email addresses of all non-anonymous commenters on a page. Specifically, a POST is made to " https://commento.io/api/comment/list" Mig
36.
by _salmon 8y ago
user: oskkejdjdkjd created: 9 days ago
37.
by _salmon 8y ago
> It’s another reflection of how the increasingly... I see what you did there.
38.
by _salmon 8y ago
To be fair, Markdown tables are a pain too
39.
by _salmon 8y ago
While the idea behind the app is great, that one specifically is abandoned and should be considered non-working.
40.
by _salmon 8y ago
Seems strange to call it a "zero-battery-use fridge" and then follow it with "It ties into the typical offfgrid system of a solar charge controller, battery bank, and photovoltaic panels"
41.
by _salmon 8y ago
> "But the facts are clear: we've never sold people's data." What
42.
by _salmon 8y ago
Mirror: https://web.archive.org/web/20181030190026/http://www.latime...
43.
by _salmon 8y ago
That's all well and good, but by your own admission you're still having outages nearly once a week on average
44.
by _salmon 8y ago
Just tried using this for a project last week. Whatever algorithm it uses for positioning nodes is terrible. You end up with a huge confusing spaghetti mess of a diagram.
45.
by _salmon 8y ago
I wish I could adopt Ron as my state's senator.
46.
by _salmon 8y ago
These look like they probably came from Apple's GSX (Global Service Exchange) system. Source: Was an Apple Certified Macintosh Technician
47.
by _salmon 8y ago
The Archive Team has been doing this work for at least 10 years. If you'd like to help archive the internet, they have an easy-to-use tool you just run and let work in the background. https://archiveteam.org/index.php?t
48.
by _salmon 8y ago
This idea is real and being developed by IPFS. See: https://ipfs.io/
49.
by _salmon 8y ago
What seems to work for me is getting the write keywords in my meta description lel
50.
by _salmon 8y ago
Isn't all the code on GitHub so anyone could continue working on it?
51.
by _salmon 8y ago
Through the article, I looked at Acxiom and it seems like they have an opt-out form. Who knows if they actually obey it but they probably have your data anyway so it's worth a shot: https://isapps.acxiom.com/optout&#x2F
52.
by _salmon 8y ago
I assume that's where the scanners are mounted.
53.
by _salmon 8y ago
Some of this sounds dangerously close to a keylogger...
54.
by _salmon 8y ago
https://data.medicare.gov/data/hospital-compare
55.
by _salmon 8y ago
Is there a reason this project isn't just an open-source website as opposed to a Python project?
56.
by _salmon 8y ago
Sounds like Telegram may be Domain Fronting: https://en.wikipedia.org/wiki/Domain_fronting
57.
by _salmon 8y ago
Minority Report. Literally.
58.
by _salmon 8y ago
Correct, a lot of sites have their static files hosted in s3 buckets. Also, shameless plug for my tool if you want to go bucket hunting: https://github.com/sa7mon/S3Scanner
59.
by _salmon 8y ago
Does this work for finding all objects in a bucket that match a criteria? i.e. SELECT name FROM myBucket where object.name LIKE '%.log'
60.
by _salmon 8y ago
Link to relevant docs which were weirdly hard to find: https://docs.aws.amazon.com/AmazonS3/latest/dev/s3-glacier-s...

More ›