mag00

3 ms·

1.
by mag00 3y ago
> E.g address X sends $100MM worth of bitcoin to two addresses, with ~$1k going to address Y and the rest going right back to address X. What you are likely looking at is not fraudulent and is a characteristic of bitcoin's UTXO desi
2.
A Decade of Account Takeover(ato.watch)
1 points by mag00 6y ago|0 comments
3.
by mag00 9y ago
If you're a OneLogin customer trying to figure out what you're supposed to do now, this is what you're supposed to do: https://support.onelogin.com/hc/en-us/articles/115002695483?... (A logged
4.
by mag00 10y ago
Yep, fixing
5.
by mag00 10y ago
I don't like the idea of keeping secrets in ENV and limiting it to config, though it's the kind of thing I'd ask other folks about myself to understand any tradeoffs. I see Kubernetes and other things supporting secrets in en
6.
by mag00 10y ago
Hi, I wrote this! To continue a discussion: - How does your engineering team track new "debt" after releasing code? (if at all, and why not) - Do you pay anyone for centralized logging, or wish you didn't? Are you makin
7.
by mag00 11y ago
I'm curious how typo and bit squatting would come into play here, and if attacks leveraging them could collect private keys at a dangerously high rate before people can patch their clients. Products like heroku, or the stripe CTF, or o
8.
by mag00 12y ago
Coinbase, San Francisco, CA Hi - I'm Ryan, I'm with Security @ Coinbase. We're trying to make BTC easy to use. https://coinbase.com/mission We're building out our security and engineering teams. We are b
9.
by mag00 12y ago
Yep, that's on the way!
10.
by mag00 12y ago
Hi, Ryan here - We've moved over to hackerone.com/coinbase, and emailed everyone at the whitehat@ address about the transition. We'll be getting in touch for the details and will get an autoresponder up on whitehat@. We don&#
11.
by mag00 12y ago
https://hackerone.com/coinbase
12.
by mag00 12y ago
Because Coinbase has moved the program out of email and into here: https://hackerone.com/coinbase
13.
by mag00 13y ago
Hi - I built Facebook's Bug Bounty program with a few other FB folks. There's a couple things I want to add to the conversation about how we look at rewards. (Also, in 2009 it was just myself and a couple others running our disclosure progr