Hacker News Reader

robotroboton Show HN: ScaleUp City Simulator

Depends on the disaster!

robotroboton Show HN: ScaleUp City Simulator

The AGI disaster mode is particularly fun. Start a city in 2050 and deploy.

robotroboton Ask HN: Who is hiring? (April 2015)

Talis, Birmingham, UK.

EdTech 100% employee owned, SaaS software already in use in 50% of UK Universities, plus growing Oz, NZ, Malaysia, China and Norway.

Post-revenue and pre-profit (not for long). Every position comes with equity share via options scheme.

Various roles including dev, microservices architecture Node.JS, Java, AngularJS

Check out our ethos: http://careers.talis.com/

robotroboton BrowserStack Post Mortem (Shell shocked)

Hmm. Another one for your security audit. I was able to change the registered email address on our account

1) Without re-entering my creds following login 2) With no notification to the old email address that this had been done.

robotroboton BrowserStack Post Mortem (Shell shocked)

Thanks (can't reply direct to the reply for some reason)

robotroboton BrowserStack Post Mortem (Shell shocked)

Me again.

"he was only able to reach less than 1% (our estimate is 5,000 users)"

So you have 500k registered customers then? Surely not.

robotroboton BrowserStack Post Mortem (Shell shocked)

OK, I want to make sure though. How can these creds be regenerated? What happens if we had leaked them accidentally, there seems no way to regen them?

robotroboton BrowserStack Post Mortem (Shell shocked)

Another thing to mention here - we've received no direct contact from BS at all following this - if we hadn't been following this on HN (and we were a little naive) we might still not know this email was not genuine. The blog post mortem is great, but I think it's a poor show not to reach out to affected customers directly.

robotroboton BrowserStack Post Mortem (Shell shocked)

Is anyone from BrowserStack monitoring this thread? We received the email so we can assume our account was accessed by the hacker. Passwords crypted and salted (ok - changed) but what about the BrowserStack automate username and token, generated by BS themselves, that we are unable to edit or regen?

robotroboton JSON Web Tokens

We've been doing this for a while in our angular apps using response interceptors: http://engineering.talis.com/articles/elegant-api-auth-angul...

robotroboton Not for sale

This guy is crazy if he thinks an organisation with annual /revenues/ of $110M will spend $10M+ on a domain name.

robotroboton Is there some kind of tech crash happening right now?

I think those numbers are years.... :)

robotroboton One div – The single element HTML/CSS icon database

Try hitting reload - I managed to get in after a few attempts