jwcrux

16 ms·

1. 31.▲
   by jwcrux 8y ago

   You're absolutely right, and I highly recommend Duo Insight! While I developed Gophish, I also work at Duo so I'm happy to discuss the differences between the two. :) While my experience with Gophish was one of the things that bro
2. 32.▲
   by jwcrux 8y ago

   I think I can still do a better job of pointing people who hit the repo first back to the website for more information. Right now, it’s linked, but it could be more clear. I’ll take that as an opportunity for improvement. Thanks so much for
3. 33.▲
   by jwcrux 8y ago

   Thank you for the feedback! It’s really appreciated. Just out of curiosity, does the copy on the main website [0] give a better indication or does that still not make for a clear description? I ask because, while the repo was linked in this
4. 34.▲
   by jwcrux 8y ago

   Guilty as charged :) in this case, I thought it made for a nice name, giving a nod to the old card game “Go Fish”.
5. 35.▲
   by jwcrux 8y ago

   Nice! While Gophish is a personal project, as part of $dayjob I do security research. Recently, I did some analysis on phishing kits at a pretty large scale that sounds like it’d be of interest to you [0] [0] https://duo.com&#x2F
6. 36.▲
   by jwcrux 8y ago

   Thank you so much! I view Gophish as a way to volunteer and give back to the larger security community. I love engaging with the Gophish community and seeing people use the software to measure their own exposure to phishing. That said, ther
7. 37.▲
   by jwcrux 8y ago

   Hi everyone! What a happy surprise to see my project on HN :) My name is Jordan, I've been developing Gophish [0] for a few years now. The goal of the project is to let companies of all sizes perform high-quality phishing simulation re
8. 38.▲
   Anatomy of Twitter Bots: Fake Followers(duo.com)

   1 points by jwcrux 8y ago|0 comments
9. 39.▲
   Hunting Twitter Bots at Scale(duo.com)

   2 points by jwcrux 8y ago|0 comments
10. 40.▲
    by jwcrux 8y ago

    I highly recommend reading The Idea Factory . It's a fascinating historical account of Bell Labs and how they performed research.
11. 41.▲
    by jwcrux 8y ago

    Or have a link at the top of search results for something like "not finding what you want?" or similar so that suggestions can be provided at the time of searching instead of having to context switch to a different help page.
12. 42.▲
    by jwcrux 8y ago

    I thought this was going to be very different than what it was.
13. 43.▲
    Show HN: Purl – Command Line URL Parser(github.com)

    1 points by jwcrux 8y ago|1 comments
14. 44.▲
    by jwcrux 9y ago

    Do you have references for this? I've had nothing but good experiences with HIBP in the past.
15. 45.▲
    Hunting and Analyzing Phishing Kits at Scale(duo.com)

    3 points by jwcrux 9y ago|0 comments
16. 46.▲
    by jwcrux 9y ago

    I also recommend MailHog[0]. I've had nothing but good experiences with it, and it was dirt simple to install. [0] https://github.com/mailhog/MailHog
17. 47.▲
    The Realities of Being a FOSS Maintainer(caddy.community)

    215 points by jwcrux 9y ago|120 comments
18. 48.▲
    by jwcrux 9y ago

    I hope they do. Wouldn't that be incredible? Having _native_ U2F/UAF built right into the browser. The hard part is that there's another more subtle chicken and egg problem when it comes to software implementations and consum
19. 49.▲
    by jwcrux 9y ago

    U2F/UAF/Webauthn are a really interesting chicken/egg problem. Right now, not too many providers support these auth protocols, even though they are more secure than current 2fa alternatives and provide a better user experienc
20. 50.▲
    Hunting Malicious npm Packages(duo.com)

    2 points by jwcrux 9y ago|0 comments
21. 51.▲
    by jwcrux 9y ago

    I believe their characterization is accurate. Not just anyone can download files from VT. You have to have access to their private API which is a premium billed (and anecdotally very expensive) service.[0] That, to me, qualifies the term &q
22. 52.▲
    by jwcrux 9y ago

    I disagree. I think Carbon Black's disclaimer is more than sufficient: The screenshot in Carbon Black's response clearly says that VirusTotal "makes the binaries available for download to their partners". And here's
23. 53.▲
    Hunting for Malicious npm Packages(duo.com)

    2 points by jwcrux 9y ago|0 comments
24. 54.▲
    by jwcrux 9y ago

    I run the Twitter account @dumpmon[0] that HIBP gets the data from. This is an interesting decision and I applaud Troy for, as always, doing what's best for his users. He's a great example of the kind of person we need more of in
25. 55.▲
    by jwcrux 9y ago

    Congrats on shipping this! Personally, I wish that social networks themselves offered bulk export of public assets for academic purposes instead of having people re-invent the wheel every time. Just a heads up, IANAL, but make sure that you
26. 56.▲
    by jwcrux 9y ago

    The Chrome Devtools API is really useful. However, if you're wanting to use Selenium, a coworker of mine wrote this up to show how to use headless Chrome with Python + Selenium https://duo.com/blog/driving-headless
27. 57.▲
    by jwcrux 9y ago

    How is this different than the more robust https://github.com/gztchan/awesome-design ?
28. 58.▲
    Driving Headless Chrome with Python(duo.com)

    1 points by jwcrux 9y ago|0 comments
29. 59.▲
    by jwcrux 9y ago

    Whoa that looks awesome. Nice work!
30. 60.▲
    by jwcrux 9y ago

    Hi everyone, author of the post here. Happy to answer any questions.