Hacker News Reader

thwaysecon One-Click RCE in Asus's Preinstalled Driver Software

Might have been there since the beginning, but doesn't make it less surprising or bad. That's a _ridiculously_ bad thing to allow. Any website to talk with just about ANY port on your local machine. Incredible.

thwaysecon One-Click RCE in Asus's Preinstalled Driver Software

The browser is allowing remote code to talk with 127.0.0.1

thwaysecon One-Click RCE in Asus's Preinstalled Driver Software

Seems I was wrong. I am utterly surprised at the lack of security in modern browsers. Yes, that backend is misconfigured, but why this request is even allowed to take place in the first place is utterly mindblowing to me.

thwaysecon Ask HN: Who wants to be hired? (April 2023)

  Location: Europe
  Remote: Yes
  Willing to relocate: Generally no

  I've been programming for 30 years, professionally about half of that, mostly in C and Java.
  Naturally I've touched many other languages at times.
  I have a lot of experience from embedded, database internals and distributed systems.
  It has spanned from the lowest of levels to systems programming.
  I'm also growing a bit of a speciality in the security domain.
  I've been leading teams in some very tough areas.
  No web development or typical business-application experience.
  One of my strengths is as an architect and applied researcher, to bring good systems to life.
  I am comfortable working at the edge of technology.
  If you are looking for someone to lead a development team in an advanced area, then I might be the one.
  It could be a CTO-type role in an early startup or a team lead in something more mature.