brunoTbear

31 ms·

91.
by brunoTbear 8y ago
I've yet to encounter a situation where this auth method isn't gating a free for the guest wifi setup. I do not support defrauding hotel guests, merely defrauding hotels ;)
92.
by brunoTbear 8y ago
I thought this was going to be a cool kit for brute-forcing room number/last name pairs which seems to be an increasingly common hotel wifi auth method. My guess is most hotel wifi access pages lack anti-automation (I've seen CAPT
93.
by brunoTbear 8y ago
This is a rare paper published on the topic. https://link.springer.com/chapter/10.1007%2F978-3-319-07536-...
94.
by brunoTbear 8y ago
A relatively successful company in the area is Shape Security. Their marketing is a bit painful, but they invented the concept of cred stuffing. Disclaimer: I worked there for four years.
95.
by brunoTbear 8y ago
I think you may be giving people more credit than they deserve, but I'm willing to accept that they're making that argument. Even if that's their argument, that their personal habits around password use and being attentive to
96.
by brunoTbear 8y ago
Background: I spent years developing a product that currently defends F500 websites against automated attacks. If you live in the US you've more than likely used my software this week without knowing it. Rate limiting is completely ine
97.
by brunoTbear 8y ago
You're right. I was shortsighted and self-centered.
98.
by brunoTbear 8y ago
It's surprising to me how many users on HN can only think as far as their own browser. Really the question here is not "what's the harm of JS across the web" but rather what is the specific privacy cost of running JS on
99.
by brunoTbear 8y ago
ITT: people dramatically under-estimating the risk to their accounts from credential stuffing and dramatically over-estimating their security benefits from not running JS. They're probably right that not running JS is privacy accretive
100.
by brunoTbear 8y ago
Some of my favorite and most ethical friends work everyday at FB to protect against these kinds of attacks and others. You're making an incredibly global statement about an organization where a more tailored statement would carry your
101.
by brunoTbear 8y ago
One important piece of Stripe's margin story that differentiates it from commodity processing is their marketplace and platform product, Connect. Without saying too much (I am a former Stripe), this product enables both processing of c
102.
by brunoTbear 8y ago
I captured a series of still images of one passing through Orion with an old dSLR a few years ago. https://www.youtube.com/watch?v=zd288ct92pk
103.
by brunoTbear 9y ago
I quite like the way Google has drawn the map here-since no cables reach from India to Europe, they've split the map there making the paths easier to trace between Asia and NA. https://2.bp.blogspot.com/-QvF57n-55Cs&#x2
104.
by brunoTbear 10y ago
What's surprising to me is there wasn't a way to get the ride data other than paying somebody to scrape it.