fmavituna

37 ms·

331.
by fmavituna 16y ago
Metasploit mostly focuses on Infrastructure and exploiting known vulnerabilities. Netsparker is solely focused on web application security (detection & exploitation). For example Netsparker can crawl AJAX/Javascript apps, support form a
332.
by fmavituna 16y ago
Same guys hit Sun.com via SQL Injection as well - http://tinkode27.baywords.com/sun-com-sun-mycrosystems-vulne... Shameless self plug: Netsparker ( My startup: http://www.netsparker.com/ ) could have identified both of these vulnerabi
333.
by fmavituna 16y ago
I think Rapportive is doing this wrong though and unless they pivot or get acquired I don't think they can go anywhere like this. There is a huge gap between email and CRM, Rapportive is the perfect candidate for the job yet they only suppo
334.
by fmavituna 16y ago
Pretty much everywhere, For UK - http://en.wikipedia.org/wiki/Computer_Misuse_Act_1990 I'm sure US got an equivalent of this
335.
by fmavituna 16y ago
Same thing happened in my friend's company and they fired the engineer who identified and exploited the permanent XSS in their competitor's website. Personally I would do the very same thing. 1. It's against the law 2. Extremely unprofessio
336.
by fmavituna 16y ago
Looks like they learned their lesson from Google Buzz privacy fiasco. Instead of making them public by default they'll delete it.
337.
by fmavituna 16y ago
I removed it, thanks.
338.
by fmavituna 16y ago
Good job guys and thanks a lot to you and HN. By using Remote Jobs we filled a position which we couldn't fill via websites such as Stack Overflow Careers (for the last ~6 months)
339.
by fmavituna 16y ago
Sending me an email so I can go to the website and submit my email again so I can get another email later on, it just seems a bit redundant :) Since conference is quite soon anyway I thought it would be a better move to just open the regist
340.
by fmavituna 16y ago
(I just got this from email) and it sounds like a really bad idea to send emails (or any kind of promotion) when there is no way to take an actual action on the website yet.
341.
by fmavituna 16y ago
In theory yes, but in practice not really. Consumer doesn't care, doesn't know. On a side note, In theory if you are EU company you cannot use a CRM which hosts your data outside of the EU. For a USA CRM company only way to get around thi
342.
by fmavituna 16y ago
Isn't it clear from the article? "It clearly makes UK companies less competitive because sites we build will need to be plastered with warnings – and our competitors will not. It is a well known fact that at each stage of a signup process y
343.
by fmavituna 16y ago
In my book $119 well spent (also gzip+caching etc., it's possibly much less in reality)
344.
by fmavituna 16y ago
I think this is a smart move. Zendesk already figured out that Uservoice alike "feature request management" is a must in a help desk system and they added this feature to Zendesk couple of months ago. We were using Uservoice and Zendesk, di
345.
by fmavituna 16y ago
.NET Developer, remote position (anywhere in the world) We are developing a black-box web application security scanner (Netsparker). Also posted to: http://remote-jobs.com/jobs/34_Senior__NET_Developer
346.
by fmavituna 16y ago
:) It's amazing to see how most developers are clueless about SSL, quite a while ago I even wrote an FAQ about it: http://ferruh.mavituna.com/ssl-implementation-security-faq-o...
347.
by fmavituna 16y ago
Here is the PDF - http://ps3crunch.com/wp-content/uploads/2011/02/psn.pdf You'll notice this: "Even if a connection is SSL encrypted, companies are aware of the big risk behind custom CA ﬁles and it's possibilitie" So AFAIK, Sony uses SSL
348.
by fmavituna 16y ago
Nice and short interview with Red Gate CEO about this : http://www.youtube.com/watch?v=TKnEjiSGZLA which explains commercial reasons and why they thought it was possible to keep it free and why they changed their mind
349.
by fmavituna 16y ago
This is perfect for my parents. They don't use address book, they won't read or write SMS (need to click too many buttons) and they need to use glasses to see the buttons. I'm really tempted buy 2 for them. Although it's unnecessarily expen
350.
by fmavituna 16y ago
That's a good point :) It doesn't
351.
by fmavituna 16y ago
HTTP referrer header will be stripped from HTTPS to HTTP according to RFC so it solves one of the problems. Also there is a Chrome extension for Google SSL Web search: https://chrome.google.com/extensions/detail/lcncmkcnkcdbbanb...
352.
by fmavituna 16y ago
Just for the record that Google announced that they allow certain checks - http://googleonlinesecurity.blogspot.com/2010/11/rewarding-w... (actually encourage and reward - better than people publicly releasing these for sure) but even for
353.
by fmavituna 16y ago
.NET Developer - Anywhere in the world, remote working: http://careers.stackoverflow.com/Jobs/8804/senior-vb-net-dev... We develop a quite cool black-box web application security scanner.