d4n

6 ms·

1. 1.▲
   The Powerful HTTP Request Smuggling(medium.com)

   3 points by d4n 6y ago|0 comments
2. 2.▲
   by d4n 7y ago

   Hey! I posted this. Just want to be clear it still pops up and asks the user to authenticate as seen in the original post. Tried to clarify this in the thread I don’t want people to get confused and think this is worse than it is. Still rea
3. 3.▲
   CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server(thezdi.com)

   91 points by d4n 7y ago|20 comments
4. 4.▲
   by d4n 7y ago

   Unfortunately, for many companies, bug bounty programs have been the best invention in silencing security research and CVEs. They promise the world, beat you down on severity / payouts, sometimes just claim duplicate or known issue wit
5. 5.▲
   by d4n 7y ago

   Discord, Reddit
6. 6.▲
   by d4n 7y ago

   There's a big difference though between "I helped scope the work and talk with the prospect / demo / whatever" vs. "I was the sole source of this customer and made the introduction." I don't mind brin
7. 7.▲
   Ask HN: Does your company offer commission for engineers?

   12 points by d4n 7y ago|11 comments
8. 8.▲
   by d4n 7y ago

   I have gotten around this by hosting SSHD on web ports before, or going through a SOCKS proxy.