jwcrux

30 ms·

271.
by jwcrux 13y ago
It was eating wheat for me as well. Once I started eating according to the ketogenic diet, I no longer needed naps during the day.
272.
Show HN: Rapportive API to Find Anyone's Email Address(github.com)
3 points by jwcrux 13y ago|0 comments
273.
Automated Recon Using Rapportive(jordan-wright.github.io)
3 points by jwcrux 13y ago|0 comments
274.
by jwcrux 13y ago
I actually wrote a post a while back doing this exact thing: http://jordan-wright.github.io/blog/2013/10/14/automated-soc... You can find the full script automating the Rapportive API here: https:/
275.
by jwcrux 13y ago
> .cfm Looks like coldfusion to me, which has had a host of vulnerabilities pop-up in the past couple years. Wouldn't be surprised if that was an easy entry point.
276.
Wireless Attacks With Python: Part One - the "Dnspwn Attack"(jordan-wright.github.io)
81 points by jwcrux 13y ago|1 comments
277.
by jwcrux 13y ago
Pretty neat, and I'm certainly all for gaining new knowledge, but couldn't the author just have decompiled the .NET binary (using a tool such as JetBrain's dotPeek) to see what it was doing without having to sign the NDA?
278.
by jwcrux 13y ago
You don't if you disclose it before reporting it. This is why I was so impressed. The contacted me after I published the post, and yet they still sent me a token of their appreciation. That to me showed a ton of class.
279.
Linkedin's Response to My "Phishing with Intro" Post(jordan-wright.github.io)
144 points by jwcrux 13y ago|46 comments
280.
by jwcrux 13y ago
Yes - they need to perform what's called a Man in the Middle Attack (MiTM) to inject HTML into your email. Normally, your iPhone (and other clients) retrieve email from Gmail's servers using the IMAP protocol. To inject content, L
281.
by jwcrux 13y ago
That's the thing, though. I didn't try it, but my guess would be that even if they patch the CSS issue, I believe it would still be possible to set the visibility to hidden (notice they never set the visibility :), and use absolut
282.
by jwcrux 13y ago
Sorry - I tried to keep the post to a reasonable length. I'll be following up with a more detailed post later. :) The separate IMAP account is likely so that they wouldn't ever touch the user's Gmail credentials. This way, th
283.
Phishing with Linkedin's Intro(jordan-wright.github.io)
219 points by jwcrux 13y ago|67 comments
284.
Automated Social Engineering Recon Using Rapportive(jordan-wright.github.io)
1 points by jwcrux 13y ago|0 comments
285.
by jwcrux 13y ago
Can't you do the same thing with Github pages?
286.
Mapping Tor Relays and Exit Nodes(raidersec.blogspot.de)
1 points by jwcrux 13y ago|0 comments
287.
Mapping Tor Relays and Exit Nodes(raidersec.blogspot.com)
1 points by jwcrux 13y ago|0 comments
288.
by jwcrux 13y ago
> Epic automatically routes your searches through its proxy to protect them. Sounds sketchy.
289.
by jwcrux 13y ago
Small suggestion - please load all resources over HTTPS, including the gravatar images. :)
290.
by jwcrux 13y ago
I completely agree. It's not like Facebook didn't pay just because they didn't feel like it. They couldn't pay without rewarding a blatant violation of their ToS. If they paid once, then they would have to start paying
291.
by jwcrux 13y ago
This needs to be answered.
292.
by jwcrux 13y ago
Why can't users just change their browser settings to download files to the locally synced Dropbox folder? Wouldn't this accomplish the same thing?
293.
by jwcrux 13y ago
|and I decided to give it a go. Never gets old.
294.
by jwcrux 13y ago
Off topic, but am I the only one who noticed "spies aren'y" in the image?
295.
by jwcrux 13y ago
> Use SSL for the requests which makes it harder to sniff the API. Won't help - it's trivial to setup a proxy to MITM the traffic. > Use a specific User Agent string and check for that. Won't help - it's easy to ma
296.
by jwcrux 13y ago
I've already done analysis of most of the major browsers. It even hit the HN front page a couple months ago: http://raidersec.blogspot.com/2013/06/how-browsers-store-you...
297.
by jwcrux 13y ago
Just a small request - it would be way cool to have a "site:" filter like in Google searches. A lot of the results found are irrelevant to me as it is. Cool site - great work!
298.
by jwcrux 13y ago
Don't worry - they already heard it while you were making it.
299.
by jwcrux 13y ago
Like many others have said, it would be best to consult an attorney if you're concerned. However, while you may not be able to distribute software which uses the API, I think many people would enjoy/benefit from a post describing
300.
by jwcrux 13y ago
Request: http://mock.isssues.com/{RESPONSE}/{MESSAGE}

More ›