Hacker News Reader

thomasvendettaon Learn from your attackers – SSH HoneyPot

I too would love to hear more about this, unfortunately this article on FreeBSD Jail Management Tools [1] seemed to be the most relevant thing I could come up with.

[1] https://blather.michaelwlucas.com/archives/2291

thomasvendettaon Golang SSH Redux

Agreed, this brings to mind one of my favorites has never felt quite right:

> require 'logger'; Logger.new("| cat ~/.ssh/id_rsa.pub")

thomasvendettaon Over 30% of Official Images in Docker Hub Contain Security Vulnerabilities

So if you rebuild your docker containers every time you deploy, and you deploy daily, security updates should happen on a daily basis. Correct?

thomasvendettaon Traction Book – A Startup Guide to Getting Customers

I've thoroughly enjoyed and learned from every bit of Traction Book thus far, highly recommend to anyone who is considering purchasing.

I originally posted this on the GH AMA but my account was pending moderation and I got skipped... so.. while you're both here:

Do you have any recommendations on using the traction channels to solve the chicken and the egg problem? Or any other specific reading towards solving the C&E problem?

Do you have any methods for tracking conversions in offline channels or is it basically just talking to your customers and asking how they heard about you?

thomasvendettaon Judge Sentenced to 28 Years for Selling Kids to the Prison System (2013)

His sentence should have been longer, but why are we giving this guy any more time of our day? This happened last year.

thomasvendettaon Ask HN: Freelancer? Seeking freelancer? (August 2014)

SEEKING WORK (Ruby, PHP, JavaScript) - Remote - EST

http://goskyscraper.com

thomasvendettaon Ask HN: How do I know if the startup I'm working at is dysfunctional?

> Part of the problem is that I'm not THAT good.

Not with that attitude, you're not :)

thomasvendettaon Prominent GitHub Engineer Quits, Alleging Gender-Based Harassment

I have a question. Her tweets were posted multiple times last night to HN. They were up voted and commented on, yet within 20-30 minutes each time, they were flagged as dead and no longer on the front page.

On some, there were newly created accounts commenting in defense of Github and claiming her comments and reasons were fraudulent.

What's up with that?

thomasvendettaon Ask HN: who can i hire to hack my platform

+1 for homakov. Dude knows what's up.

http://www.sakurity.com/

thomasvendettaon Mark Zuckerberg addresses PRISM

I wish the people who have knowledge of implementing these things would come forward with a leak of some sort. Surely, somewhere their are citizens of this type, right?

thomasvendettaon Disclosure timeline for vulnerabilities under active attack

I wonder if this has anything to do with the 3rd party software used to compromise drupal.org?

thomasvendettaon Yahoo buys GeoCities (1999)

Holla: http://web.archive.org/web/20010124071800/http://expage.com/...

thomasvendettaon Comcast injecting JS

Dont forget a $70,000 fine.

thomasvendettaon Extra security measures for next week's releases

And now the bad guys know there is a very serious vulnerability, somewhere.

thomasvendettaon Sendgrid is down

Not confirmed, but definitely possible: http://venturebeat.com/2013/03/20/playhaven-developer-fired-...

thomasvendettaon “The AT&T Hacker” Sentenced To 41 Months In Prison

I can see where you're coming from saying something like that... But it is a mistake in my eyes. It was an unwise decision that he probably would not have made had he known he faced 3+ years in prison.

That being said, this guy is obviously not a saint. I don't want to sound like I'm defending his affiliation with GNAA or the fact that he went to Gawker with it.

If it had been someone who gives to community, is polite, and respectful, and instead had gone to the NYT or another publication, they still could lose 3+ years of their life. To a mistake.

thomasvendettaon “The AT&T Hacker” Sentenced To 41 Months In Prison

Precisely that. Sure, he made a mistake, but so did AT&T, and now because of it he's potentially going to spend 41 months of his life in jail. Life is too short as it is.

thomasvendettaon “The AT&T Hacker” Sentenced To 41 Months In Prison

Absolutely disgusting, AT&T.

thomasvendettaon SimCity UI Code + DRM

I can't really speak for how common it is, but the Battlefield Play4Free server browser is written in Javascript [1].

[1] http://documentcloud.github.com/backbone/#examples-battlefie...

thomasvendettaon Another Ortiz case

Carmen Ortiz sounds like nothing more than a state-sponsored terrorist.

thomasvendettaon Simple launches Android app

For anyone looking for an invite to Simple, I've got three available. Shoot me an e-mail (in profile).

I've been using Simple for the past 6 months and I've got to say I don't miss my brick and mortar bank one second. These guys are the perfect example of doing it right.

thomasvendettaon Petition To Fire Aaron Swartz’ Prosecutor Reaches Goal

Petition to fire accomplice Steve Heymann still needs 22k more: https://petitions.whitehouse.gov/petition/fire-assistant-us-...

thomasvendettaon Wayback Machine: Now with 240,000,000,000 URLs

Ahhh! Homestead. Thank you for reminding me. I need to check there for archives, too!

thomasvendettaon Anonymous R.I.P Note for Aaron Swartz

It is however generating conversation, which is a start.

thomasvendettaon Aaron Swartz commits suicide

Rest in peace Aaron. Someone I looked up to in more ways than words any words can explain.

thomasvendettaon Wayback Machine: Now with 240,000,000,000 URLs

Obviously I live on the wild side.

thomasvendettaon Wayback Machine: Now with 240,000,000,000 URLs

Seriously, the Wayback Machine is awesome. Just last week I used it to find a website I made twelve years ago at the ripe age of 10. If there are any maintainers/developers reading this, thank you.

The fact that they were able to preserve a masterpiece like this means a lot to me: http://web.archive.org/web/20010124071800/http://expage.com/...

thomasvendettaon Metasploit Rails 3 Remote Code Execution Hours Away

Can anyone confirm whether or not I still need to add ActionDispatch::ParamsParser::DEFAULT_PARSERS.delete(Mime::XML) to an initializer if my apps have been updated to rails 3.2.11?