hkr_mag

8 ms·

31.
by hkr_mag 10y ago
Lot's of stories happening right away. Don't get the reason for the negativity. Though here is a recent story — critical XXE with remote file reading at LinkedIn ( http://blog.wallarm.com/post/145883562288&#x2F
32.
by hkr_mag 10y ago
Guys, here is a story of how we got the the idea of Wallarm We started as a team of white hat hackers. Ivan (CEO) is a respected researcher known for his articles and talks at international security conferences (BlackHat, Hack In the Box, e
33.
by hkr_mag 10y ago
When we started working on Wallarm we really wanted to make it real magic :) So we did everything automatically (profiling of applications, tuning rulesets, etc.) It turned out that security guys (like we are) more likely to understand how
34.
by hkr_mag 10y ago
Actually, for startups with no or small revenue, we give a license free of charge. If you need more than four nodes, the price is more than flexible. Also, we always try to understand better customer infrastructure and, case by case, give n
35.
by hkr_mag 10y ago
No magic here :) Sure, we need to terminate SSL. Either before traffic is going to Wallarm proxy node, either by Wallarm Node itself.
36.
by hkr_mag 10y ago
Frankly speaking, I don't know what is pricing for IBM Datapower. Is it really only $1k per month? I am pretty sure that it's a kind of good option for some enterprises. But most of our customer has high volume applications deploy
37.
by hkr_mag 10y ago
Just a few examples of the attacks that other security products can't catch. 1. A very complicated things going through XML/JSON APIs. Wallarm really parse XML, understand the structure and catch even complicated exploitation atte
38.
by hkr_mag 10y ago
Mod_security is a good option proven with time. Especially, if you know how to "cook" it (read this book by Ivan Ristić to learn: https://www.feistyduck.com/books/modsecurity-handbook/ ). But mod_security
39.
by hkr_mag 10y ago
- Seems too black-box-y to me. I'd like to see something more to the point. Then again I'm an engineer but typically for products like this I've found you need at least some engineer buy-in to sell it to a company. Could you
40.
by hkr_mag 10y ago
> Why do I have a "permissions":["admin"] in my profile? :) Congratulations! :) You're admin of your company. You can add another admin who can deploy nodes or can add analyst guys who can only view data on attac
41.
by hkr_mag 10y ago
# Password and registration Almost the whole team is almost paranoid about the passwords. But I totally agree that requirement for the password are not clear now. Will make it work smoother.
42.
by hkr_mag 10y ago
BinaryIdiot — thanks for a great feedback! I'll answer in several posts. # What's Wallarm Cloud? A very good question! We can't run machine-learning stuff on the Nodes as it is performance consuming thing. But we can get all
43.
by hkr_mag 10y ago
Yeah! We would say the same if someone propose us to use this :) 1. We share the source code of Wallarm Node (nginx-based filter instance) with the companies after signing NDA. 2. Will run 3rd party audit of the code and share the report. 3
44.
by hkr_mag 10y ago
Borski — thanks for sharing this! I heard once about Tinfoil Security at BlackHat last year. Are in touch with the guys? We'd like to talk more with them.
45.
by hkr_mag 10y ago
Doh! Good catch! I thought we figured it out! Sorry for that. We're not native speakers. The thing is that "n-jinks" is how Russian NGINX team pronounce it. X is pronounced as iks, not ex, in Russian.
46.
by hkr_mag 10y ago
Chdir thanks! We were OK with the artifacts. But it turned out some people don't like them at all. Will work it out!
47.
by hkr_mag 10y ago
Glad you noticed it! Thibault Koechlin is a valuable advisor who shares his feedback about the product. Also, we'll hopefully give some talks at hacker conference soon. But naxsi and wallarm are too different products; they still have
48.
by hkr_mag 10y ago
NAXSI is a great tool to use! Always recommend it for companies who want to use only opensource and like NGINX. BTW, Thibault Koechlin, author of naxsi, is at Wallarm advisory board.
49.
by hkr_mag 10y ago
I also like personal projects as Show HW here. But we talked to the guys from YC. And it turned out, show HN works for all projects which can be interesting for HN community.
50.
by hkr_mag 10y ago
Hey guys, Stepan and Ivan, co-founders here. Thanks for all the feedback! Answering all of this now.
51.
Huawei plans in-house mobile OS(arstechnica.com)
2 points by hkr_mag 10y ago|0 comments
52.
Linux CVE-2016-4997 (local privilege escalation) and CVE-2016-4998(openwall.com)
3 points by hkr_mag 10y ago|0 comments
53.
Apple EFI firmware passwords and the SCBO myth(reverse.put.as)
177 points by hkr_mag 10y ago|36 comments
54.
Why a Palantir IPO might not be far off(techcrunch.com)
3 points by hkr_mag 10y ago|0 comments
55.
How many calories you may burn standing at work versus sitting, strolling(arstechnica.co.uk)
1 points by hkr_mag 10y ago|1 comments
56.
Critical LinkedIn vulnerability (XXE) proactively resolved(blog.wallarm.com)
5 points by hkr_mag 10y ago|0 comments
57.
Rest in Hell, Java Plug-In(gizmodo.com)
15 points by hkr_mag 11y ago|2 comments
58.
A Simple BGP: BGP protocol fixed from route leaks(radar.qrator.net)
30 points by hkr_mag 11y ago|5 comments
59.
NGINX Plus with a machine-learning based WAF built-in(blog.wallarm.com)
3 points by hkr_mag 11y ago|0 comments
60.
by hkr_mag 11y ago
None of solutions you've mentioned works in the cloud! But yep. If you're looking for WAF for NGINX, these are good options. BTW, mod_security is now compatible with NGINX too.

More ›