whiskeykilo

5 ms·

1.
by whiskeykilo 3y ago
Even more ominous that it's free
2.
by whiskeykilo 6y ago
It's slow going but we'll get there eventually. NIST made a recent revision to SP 800-53 that includes responsible disclosure as a recommendation: https://csrc.nist.gov/publications/detail/sp/800-53b
3.
by whiskeykilo 6y ago
Signal cares so much about UX that they're starting to agitate security/privacy diehards. They've implemented features like stickers and message reactions that the diehard community calls "useless". And they recentl
4.
by whiskeykilo 6y ago
Not sure what you’re looking to get into specifically but here’s some resources you can look at in no particular order: Hack the Box Try Hack Me Pentester Lab Hacker101 Portswigger Web Security Academy Linux Academy Bugcrowd University Hack
5.
by whiskeykilo 6y ago
Exactly. Most people didn't even get picked for payment. I don't want a shitty monitoring service I want to see Equifax bleed
6.
by whiskeykilo 7y ago
It's a free market. Don't like the payout? Don't submit the bug. Someone else probably will anyway
7.
by whiskeykilo 7y ago
As someone who grew up on Windows when I initially started working on a Mac daily this drove me absolutely nuts. It could be worded much better. The way Finder sets the default view is equally unintuitive
8.
by whiskeykilo 7y ago
Not quite yet. But also like another user said, DuckDNS "Note: Starting January 1st, 2020, GCP will charge for VM instance external IP addresses. However, under the Free Tier, in-use external IP addresses will be free until you have us
9.
by whiskeykilo 7y ago
That's true, I forget about that bc I use it so sparingly "1 GB network egress from North America to all region destinations per month (excluding China and Australia)"
10.
by whiskeykilo 7y ago
I've never heard of this. Is this exclusively a Digital Ocean issue?
11.
by whiskeykilo 7y ago
I set one up using a free GCP instance and it's been working great so far. Would definitely handle your described usage and save you $5 a month
12.
by whiskeykilo 8y ago
I suspect they're just trying to expand US cyber capabilities and recruiting. “If I go to the next capture-the-flag contest and I see some college students using Ghidra, I will be really excited” - Rob Joyce, senior cybersecurity advis
13.
by whiskeykilo 8y ago
The Trail of Bits piece kinda ignores the amount of time invested however: https://www.techrepublic.com/article/bug-bounty-programs-eve...
14.
by whiskeykilo 8y ago
Anyone on HN understands the implications of this. But does your average user? I doubt it. They just know they can install a little box and get paid. Digital privacy means nothing to far too many people
15.
by whiskeykilo 8y ago
That just sounds like AdGuard. Plenty of consumer routers offer VPN server capability for free. That combined with DuckDNS or a similar free service would be a better option I think