ebfe1

9 ms·

61.
by ebfe1 4y ago
I hope their desktop app is better now, last time i took a look, the whole vault is decrypted in memory and even when it timed out and request user for password, I was still able to inspect memory and retrieve the plaintext passwords
62.
Ask HN: Hacking Facebook account seems easy in Vietnam
2 points by ebfe1 4y ago|0 comments
63.
by ebfe1 4y ago
Why the negativity here? What people mostly worry about (fossil fuel being used to produce electric then produce hydrogen in the background) is simply explained in this line in the article "The carbon-free rigs will pack 50 kilos of h
64.
by ebfe1 4y ago
Add ClickHouse for analytic, columnar use case and you have everything.... Oh wait, Cloudflare already pointed that out XD: https://about.gitlab.com/blog/2022/04/29/two-sizes-fit-most-...
65.
by ebfe1 4y ago
I run openvpn on 53 udp and 80tcp... works like charm in most cases and sometimes enough to bypass hotel portal. :)
66.
by ebfe1 4y ago
big corporation with everyone working in a building, 100% achievable but with everyone working from home these days, it's a big challenge to have all users' internet traffic through a single gateway in some sort of VPN is not sca
67.
by ebfe1 4y ago
Unfortunately much like every nice thing on the internet, once it is being abused, it gets axed... Domain fronting (having Host header differ to SNI in TLS) is a powerful way a malware author could send payload into organisations.. imagine
68.
by ebfe1 4y ago
I think, firstly, you need to start working on yourself, ask your partner to help you navigate through this difficult time. Proactively find ways to get your productivity and passion to learn back....Get a standing desk if you have not alr
69.
by ebfe1 4y ago
and it seems his micro blog code is here if you follow his github url on the page :) https://github.com/millworks/miter/blob/main/index.php was wondering how he protects his site _SESSION and it turned o
70.
by ebfe1 4y ago
I did something similar for personal use with cloudflareworker that would trigger and send it to a personal slack (probable not the best storage but works for now). The best part i found was I learnt Progressive Web App to be able to "
71.
by ebfe1 4y ago
we need more shameless plug on this thread ... the more benchmark, the better! I think this would be a fun weekend afternoon :)
72.
by ebfe1 4y ago
This is cool...Totally reminded me about several tools pop up on HN every now and then in the past for similar task so i did a quick search: clickhouse-local - https://news.ycombinator.com/item?id=22457767 q - https:/
73.
by ebfe1 4y ago
love the bounty proposal but may I suggest creating a bounty target specifically for this and share it with everyone so whitehat folks can have a crack at it without raising concerns about hacking customers accounts? :)
74.
by ebfe1 4y ago
Aye!
75.
by ebfe1 4y ago
Agree... I'm blessed that my company is remote first and people are super chill but I guess my worry comes from a sudden realisation when I looked back at my chat and felt somewhat embarrassed for excessive use of emoji... I'm sur
76.
Ask HN: What are your thought about emoji on work slack messages?
2 points by ebfe1 4y ago|4 comments
77.
by ebfe1 4y ago
Sure - You can find my script here https://gist.github.com/santrancisco/9d14e0105316cfa15f98f0f... After that, it's just the matter of putting a crontab job to run archive job every night. Note that i have no way
78.
by ebfe1 4y ago
Since everyone here like scripting, May I suggest, if you have not used it already, checkout Xbar ( https://xbarapp.com/ ) for Mac and Argos ( https://argos-scripts.github.io/ ) for Linux. I have used these 2 o
79.
by ebfe1 4y ago
I love taking screenshots and even wrote a script a while back to take screenshot when there is mouse movement periodically when handling incidents, i also have crontab job to compress and gpg encrypt the folder with my key at the end of t
80.
by ebfe1 4y ago
A more sneaky use case is for reverse shell payload when you have code execution :)
81.
by ebfe1 4y ago
As for me, I put together some spaghetti bash functions for taking note while using the terminal (eg run tnote function will let me select one of the last 10 commands, type a description of what it does and move on with my day...i can come
82.
by ebfe1 4y ago
This is also why I like to put honey credentials everywhere, including in my .aws/credentials... You will never know when it might save you XD If you cant be bother with setting up cloudtrail+metric alert, canarytokens peeps can genera
83.
by ebfe1 4y ago
Thanks, Perhaps I was paranoid but I have had several users reported to me "I have never shared my phone numbers with Linkedin or on social media". The data is very current afaik since I have had users who only recently joined get
84.
This may be how your number is exposed for phishing(rocketreach.co)
1 points by ebfe1 4y ago|3 comments
85.
by ebfe1 4y ago
Hi all, A while back I had to deal with some sms phishing sent pretending to be our CEO. Many people received the text said they never exposed their mobile phone on linkedin or social sites, I went on a hunt and stumbled across this website
86.
by ebfe1 4y ago
Oh wow! I didn't know this reply got so much like, thank you! Sendlight.ml looks awesome and on that note, to make things easy to share between devices, i made a simple "tunnel" mode as well, you can try it here: https:&#x2F
87.
by ebfe1 4y ago
100% this but note that the user entered password is not included in the anchor tag so if you add a password, recipient still needs to enter the password to be able to decrypy and download ;)
88.
by ebfe1 4y ago
Aha that is a great question! There are 2 parts of the key, one is the anchor tag key (the part behind # that you see in download url) and your password. The anchor tag key part is ALWAYS generated randomly in the browser so that your file
89.
by ebfe1 4y ago
If anyone is interested, after firefox send shutdown, i wrote https://www.relaysecret.com , its footprint is extremely small (1 lambda function that does all signing for s3 upload/download, simple frontend code that does enc
90.
by ebfe1 4y ago
Noice! I am keen to give this a go.. the broker code are small and seems easy enough to implement for different backends. having a quick glance, it does remind me a lot of que-go ( https://github.com/bgentry/que-go ) tha

More ›