nilsjuenemann

15 ms·

31.
Bug Bounty Hustlers: Hall of Fame(beford.net)
1 points by nilsjuenemann 13y ago|0 comments
32.
by nilsjuenemann 13y ago
Vulnerability Reward Programs are getting more and more popular. @homakov and @bef0rd made a script for collecting all people listed in a security "Hall of Fame": http://beford.net/hustlers/hustlers.html
33.
by nilsjuenemann 13y ago
There are two options: 1) He is using Windows and is not using Burp or ZAP proxy for modifying http requests. With Windows you can't use <>"= in a filename. 2) Gmail is handling emails from Google Analytics a bit different.
34.
by nilsjuenemann 13y ago
I think the most popular social network is Facebook. But as others said, people are looking for small services to solve a small problem. studiVZ wasn't cool anymore. We missed the point for a rebrand to open the plattform for other peo
35.
by nilsjuenemann 13y ago
Excactly. But you can't compete if don't have enough (and the best) people and enough budget for recruiting.
36.
by nilsjuenemann 13y ago
We had to solve scaling issues most of the time. VZ was running on a multi-tier platform with services written in Java, PHP, Erlang, C++ and Python. 17 million users with around 25 billion requests per month (without static content)... Some
37.
by nilsjuenemann 13y ago
I remeber these days. I worked at this time for studiVZ - a german social network (still exist, but nobody is using it anymore) and this leaked was caused by a misconfiguration in their Apache setup. In 2008 studiVZ was sued by Facebook. Th
38.
Thanks to Edward Snowden, humble typewriter returns to Russian bureaucracy(translate.google.com)
1 points by nilsjuenemann 13y ago|0 comments
39.
Raspberry Pi Wall Box SONOS Controller(wallbox.weebly.com)
2 points by nilsjuenemann 13y ago|1 comments
40.
by nilsjuenemann 13y ago
It's pretty bad that I have to enter my HN password.
41.
German Federal Prosecutor's office gets involved in the NSA data scandal(translate.google.com)
186 points by nilsjuenemann 13y ago|40 comments
42.
by nilsjuenemann 13y ago
This bug shows us, how bad their software really is and that all the PHP crap on their frontend can access every data from every users. If they have had a "middleware" between frontend and database, such kind of bugs weren't
43.
Google Security: Increased rewards, up to $7.500 for XSS(googleonlinesecurity.blogspot.de)
2 points by nilsjuenemann 13y ago|0 comments
44.
Yahoo, please start with a Vulnerability Reward Program(nilsjuenemann.de)
66 points by nilsjuenemann 13y ago|22 comments
45.
by nilsjuenemann 14y ago
Here some facts and numbers about Google's VRP: http://www.nilsjuenemann.de/2012/12/news-about-googles-vulne...
46.
29C3 RTPM/WMV live stream(29c3.fem-net.de)
3 points by nilsjuenemann 14y ago|0 comments
47.
My end-of-the-year review about Google's Vulnerability Reward Program(nilsjuenemann.de)
1 points by nilsjuenemann 14y ago|0 comments
48.
Eye of Gyre: Print yourself as 10cm (4 inch) 3D model for $208 (japanese)(omote3d.com)
1 points by nilsjuenemann 14y ago|0 comments
49.
by nilsjuenemann 14y ago
So it's not that MySpace lost and Facebook won. It's that MySpace won first, and Facebook won next. They'll go down in the same order.
50.
Google started competitive security bug hunting(nilsjuenemann.de)
2 points by nilsjuenemann 14y ago|0 comments
51.
Ghostbuster theme played by floppy disks(youtube.com)
1 points by nilsjuenemann 14y ago|0 comments
52.
3x XSS in Google Gmail are fixed and here's the summary(nilsjuenemann.de)
2 points by nilsjuenemann 14y ago|0 comments
53.
by nilsjuenemann 14y ago
Do you using Chrome with these two extensions? https://chrome.google.com/webstore/detail/mihcahmgecmbnbcchb... https://chrome.google.com/webstore/detail/ejidjjhkpiempkbhmp... For me these combination made a request loop (response from g
54.
by nilsjuenemann 14y ago
http://lcamtuf.coredump.cx/postxss/ It's a good writeup about the post-xss world and what kind of attacks are still exist.
55.
by nilsjuenemann 14y ago
Yes, that's true. Google made the donation and I chose the donee.
56.
by nilsjuenemann 14y ago
There are some rumours that other big players will start a bug bounty program soon. So I won't be surprised if Microsoft will pay for vulnerabilities too.
57.
How a tweet about a XSS bug within Google+ leads to XSS within InformationWeek(nilsjuenemann.de)
111 points by nilsjuenemann 14y ago|21 comments
58.
Ethiopia gets a new school - thanks to a persistent XSS in Google+(nilsjuenemann.de)
4 points by nilsjuenemann 14y ago|0 comments
59.
Google Monster Maps - KML World Map with all monsters from Dragon's Quest(map-monster.tumblr.com)
4 points by nilsjuenemann 15y ago|0 comments
60.
by nilsjuenemann 15y ago
Collection of some monsters in 8-bit maps: map-monster.tumblr.com/?hn

More ›