mustardo

7 ms·

31.
by mustardo 5y ago
Thats my understanding, I initially thought MySQL root user as well
32.
by mustardo 5y ago
> was able to hack the low security password of a SuperAdmin, and gained access to an unsecured script, which was available only for SuperAdmins. This script allowed him to perform SQL injections and extract the data. Depending on the in
33.
by mustardo 5y ago
L.E.B. (Low End Box) https://lowendbox.com/
34.
by mustardo 5y ago
If you run your own internal DNS server: https://en.m.wikipedia.org/wiki/Split-horizon_DNS
35.
by mustardo 5y ago
My favourite was when a "helpfull" sysadmin deleted all the ActiveMQ data(base) files for a prod system (containing unprocessed queue items) I assume they got a low disk space alert and started deleting big files with no notice, r
36.
by mustardo 5y ago
You are incorrect
37.
by mustardo 5y ago
Curious how you escaped a (browser?) With JS to do "native" net send? Assume it was some activeX?
38.
by mustardo 5y ago
We kinda do a similar thing as a Jersey (Dropwizard) response filter, any internal server errors end up in a Slack channel
39.
by mustardo 5y ago
I assume they want to retain "ownership" so they can execute the extend and extinguish steps unopposed
40.
by mustardo 5y ago
Java has a few options... AWT (Abstract Windowing Toolkit) probably not recommended for new projects Swing JavaFX SWT https://www.eclipse.org/swt/ Unlike the others that draw their own widgets and don't use the OS
41.
by mustardo 5y ago
For your limited use case, ffmpeg / VLC wrapped in a small .sh or .bat script may have been an option? VLC can understand ONVIF RTSP and tile the video's into a mosaic https://www.youtube.com/watch?v=qV-S4LMePVk
42.
by mustardo 5y ago
Thats what I did, used second hand locoM2 units from a WISP for $20-40 each
43.
by mustardo 5y ago
100% correct, it's sad that we still use hopelessly insecure credit cards, a better system would have non-repudiation built in, charge backs from the customer claiming "I didnt authorise that" would go away
44.
by mustardo 5y ago
Also see: Vietnam
45.
by mustardo 5y ago
The profit margin per "Revenue" dollar is so small for a payment processor it always seemed like a strange metric to value a payments company on for me, as they are essentially just a middle man for this "Revenue" taking
46.
by mustardo 5y ago
Ha, tell that to anyone at *.microsoft.com I swear every link to a MS doc / MSDN site I have clicked 404s or goes to a home page
47.
by mustardo 5y ago
Wow such spam, and SAP wow... What trash
48.
by mustardo 5y ago
Don't modify input, sanitise output instead. The user entered <script> you should save that verbatim, but there are many output formats, HTML, SQL, PS (Post Script), XLS etc etc where you need to escape user provided values
49.
by mustardo 6y ago
Better yet how about vertical alignment?
50.
by mustardo 6y ago
Yea no runtime classpath scanning is a requirement for me, we do compile time eclipselink weaving etc which makes startups way faster
51.
by mustardo 6y ago
Totally agree, why i use https://www.dropwizard.io/en/latest/ with guice, generally waaayyy more explicit about whats going on
52.
by mustardo 6y ago
The one thing Google plus got right with "circles" IMHO
53.
by mustardo 6y ago
Oh man this makes my blood boil, another reason ill never thouch MS again is they they removed the cancel xbox live subscription button for NZ subscribers and I assume other locales where they didnt have some law forbidding it, the feature
54.
by mustardo 6y ago
In a previous life we customised some router firmware of a linksys router. One of the many issues I found was the password validation logic was `validatePassword(password) || password == "password"` via shodan I could see many of
55.
by mustardo 6y ago
Vanguard's new website is like this :-( used to be a medium dense table easy to compare records now on my 27" 4k monitor i can see only a handfull and its scroll city :-( https://www.vanguard.com.au/personal/p
56.
by mustardo 6y ago
Interested in how you forwardvthe bastion host mail ports to your home server?
57.
by mustardo 6y ago
google define: gay * "light-hearted and carefree." * "brightly coloured; showy."
58.
by mustardo 6y ago
I know your example is contrived but its amazing how complex we make the web <input type="reset" value="Cancel">
59.
by mustardo 6y ago
SSH is awesome for this, at least with a low head count. With a good SSH config (key only, rate limiting etc) bastion (jump boxes) you can go a long way. I keep meaning to try https://github.com/sshuttle/sshuttle
60.
by mustardo 6y ago
Another solution on the JVM for vehicle routing etc is Graph Hoppers jsprit https://github.com/graphhopper/jsprit

More ›