mh0pe

6 ms·

1.
by mh0pe 2y ago
Fun fact, ping 0 works because 0 is the IP decimal notation of 0.0.0.0. One of my favorite age-old WAF bypass since it doesn't match octet notation regexes that are often in place.
2.
by mh0pe 2y ago
Screenreaders pronounce it "line".
3.
LoanDepot cyber incident ongoing, preventing closings(loandepot.cyberincidentupdate.com)
1 points by mh0pe 3y ago|0 comments
4.
LoanDepot Lending Systems Down(loandepot.com)
1 points by mh0pe 3y ago|0 comments
5.
by mh0pe 3y ago
It looks like you still have this kind of capability. You might need to adjust settings and supply KYC info as requirements change. From the Fraud Guard docs, "You can mark known phone numbers using the Safe List feature so they are
6.
by mh0pe 4y ago
Moving from cold to hot wallets in an environment with regulatory requirements, redundancy, multiple partial keyholders, and offsite storage could easily take days to weeks and require scheduling access to the physical vault holding the col
7.
by mh0pe 4y ago
I work in conjunction with this segment of the industry. You can do it, but don't be surprised when you can't recover anything in a termination suit.
8.
by mh0pe 4y ago
I would absolutely use this if it existed.
9.
by mh0pe 5y ago
As a member of the Security community, it's disappointing to hear that this is the perception on the table, because our community can and should do much better than that. In my experience and goals, the best Info/AppSec/SecE
10.
by mh0pe 5y ago
In their defense, they kind of crush the competition. https://www.integromat.com/en/help/integromat-comparison-to-...
11.
by mh0pe 5y ago
I've been referring to it as "make.com" and it's worked well for me so far.
12.
by mh0pe 5y ago
This looks to be an activist project focused on shutting out Airbnb, check out the about page.
13.
by mh0pe 5y ago
It looks like it dropped a few months after TFC[1] with a bunch of additional features. At least these days, Teams supports Sentinel, and in personal use cases, I've had TFC be backend and threw a git pre-commit hook at it for Sentine
14.
by mh0pe 5y ago
If you really want access to the execution engine, looks like one team found a way. https://orca.security/resources/blog/aws-cloudformation-vuln...
15.
by mh0pe 5y ago
I never understood this sentiment. Hashicorp offers Sentinel for free [1], publicly. The documentation is also open [2]. There's also open rulesets for CIS benchmarks [3] (minimal but demonstrates what Sentinel can do), and a ton of
16.
by mh0pe 5y ago
I have not, I've been lucky enough to remedy most of those issues but I may give EMDR a crack. Thanks!
17.
by mh0pe 5y ago
My stance is that YAML is a good format for configuration management and generation -- it's wonderful at filling gaps as your deployment model increases in complexity to provide a mechanism to "render" your configuration -- m
18.
by mh0pe 5y ago
I have a near-photographic memory that's been tested as I grew up, and personally, it's a mixed bag. I have a solid and clear recollection of the good, which is useful from a business management and engineering career perspective.
19.
by mh0pe 5y ago
Prior eng from Tinder/Match Group here. Opinions are my own, not my previous or current employers'. I haven't worked there for a few years but I can tell you with strong confidence that doing something like this would throw
20.
CatLight – View the state of all your pipelines at once(catlight.io)
2 points by mh0pe 5y ago|0 comments