Hacker News: dorianm

New comment by dorianm in "Inside Cloudbleed [video]"

dorianm — Sat, 02 Feb 2019 18:37:46 +0000

@dang (?) this is not a dupe, it contains a lot of various interesting information not only related to Cloudbleed, especially in the second part of the video when they eliminate all the core dumps (going as far as updating micro code because of an hardware issue)

New comment by dorianm in "Homebrew 2.0.0 released"

dorianm — Sat, 02 Feb 2019 16:56:33 +0000

I didn't know that was public. It's available at https://formulae.brew.sh/analytics/ for anyone curious

Inside Cloudbleed [video]

dorianm — Sat, 02 Feb 2019 16:52:07 +0000

Article URL: https://www.rsaconference.com/videos/inside-cloudbleed

Comments URL: https://news.ycombinator.com/item?id=19063996

Points: 14

# Comments: 3

New comment by dorianm in "Helping to Build Cloudflare, Part 2: The Worst Two Weeks"

dorianm — Sat, 02 Feb 2019 14:59:17 +0000

Thanks a lot!

Starts at 25:30 for anyone curious.

> We were recording the core dumps [...] We didn't look at this

New comment by dorianm in "Helping to Build Cloudflare, Part 2: The Worst Two Weeks"

dorianm — Sat, 02 Feb 2019 14:18:58 +0000

I'm curious why those core dumps, lasting for months at least, were not investigated

New comment by dorianm in "A list of lists of interview questions"

dorianm — Mon, 31 Dec 2018 02:43:58 +0000

Looking at Rails, first list, first question: "What does ruby name refer to?"

I interpreted the question as: "What does ruby's name refer to?" so I guess the precious stone... but no https://www.careerride.com/view.aspx?id=2439

Anyway, this seems exactly what a typical clueless recruiter would ask and try to pattern match the answers to

New comment by dorianm in "Remote code execution vulnerability in SQLite"

dorianm — Fri, 14 Dec 2018 22:35:07 +0000

I don't see any: https://www.cvedetails.com/vulnerability-list/vendor_id-9237...

Edit: it's "To be allocated": "[$TBD][900910] High To be allocated: Multiple issues in SQLite via WebSQL. Reported by Wenxiang Qian of Tencent Blade Team on 2018-11-01" (from https://chromereleases.googleblog.com/2018/12/stable-channel...)

New comment by dorianm in "Get the Font"

dorianm — Sat, 08 Dec 2018 21:42:28 +0000

"Server internal error" from the API on any search request, even when retrying

New comment by dorianm in "The latest on Messages, Allo, Duo and Hangouts"

dorianm — Thu, 06 Dec 2018 03:48:28 +0000

Oh no! Used to be my favorite

New comment by dorianm in "Ask HN: Who was your most impressive hire?"

dorianm — Mon, 26 Nov 2018 22:54:15 +0000

Probably Jeff Dean and Paul Buchheit for the people who recruited them for Google.

New comment by dorianm in "Knuddels: Chat platform must pay after hacker attack fine"

dorianm — Thu, 22 Nov 2018 14:59:03 +0000

Full list of 5000+ websites that store their passwords in plain text: https://github.com/plaintextoffenders/plaintextoffenders/blo...

New comment by dorianm in "Tesla Gave Me Control of Their Site Forums"

dorianm — Mon, 19 Nov 2018 14:40:56 +0000

I'm surprised they don't use Discourse for the forums

New comment by dorianm in "Show HN: Founders launching startups on Twitch"

dorianm — Sun, 18 Nov 2018 04:59:33 +0000

I just watched a random Stream and was happy to see someone livestreaming Rails dev (I find it very hard to find).

Then I realized he was localizing files, seems odd for 24h challenge.

New comment by dorianm in "Combine site:s3.amazonaws.com with other keywords to find anything"

dorianm — Sat, 17 Nov 2018 00:51:56 +0000

Passwords, secrets, emails, etc.

New comment by dorianm in "Amazon S3 Block Public Access: Protection for Your Accounts and Buckets"

dorianm — Sat, 17 Nov 2018 00:51:08 +0000

Nice, I just searched for .env and saw multiple people AWS secret keys

New comment by dorianm in "Microsoft Is Putting Ads on the Mail App in Windows 10"

dorianm — Fri, 16 Nov 2018 17:56:29 +0000

I am in EU, I got the adblocker pop-up

Combine site:s3.amazonaws.com with other keywords to find anything

dorianm — Fri, 16 Nov 2018 16:17:42 +0000

Article URL: https://www.google.com/search?q=site%3As3.amazonaws.com&en=

Comments URL: https://news.ycombinator.com/item?id=18469645

Points: 7

# Comments: 5

New comment by dorianm in "Amazon S3 Block Public Access: Protection for Your Accounts and Buckets"

dorianm — Fri, 16 Nov 2018 16:14:10 +0000

Hmmm https://www.google.com/search?q=site%3As3.amazonaws.com&en=

Combine it with the right keywords and you can find anything

New comment by dorianm in "Redox – A Unix-Like Operating System Written in Rust"

dorianm — Tue, 13 Nov 2018 19:37:46 +0000

Last time I used Ubuntu it didn't have support for horizontal scrolling for instance and all the answers online were outdated dconf-editor paths

New comment by dorianm in "IP Geolocation Through Reverse DNS"

dorianm — Tue, 13 Nov 2018 16:22:19 +0000

> To aid reproducibility, we open source our entire approach.

Probably because it's a draft but I was not able to find any source code (looked up the authors github repos and websites)

Also the end of the conclusion is pretty interesting:

> Our future work will focus on combining reverse DNS hostname information with WHOIS databases and network delay to form a geolocation database across the entire IP space