Hacker News: hrbrmstr

New comment by hrbrmstr in "macOS 27: ifconfig command no longer prints hardware MAC address"

hrbrmstr — Mon, 28 Sep 2026 04:52:46 +0000

it works fine in system bash for me

New comment by hrbrmstr in "I build it a domain security scanner"

hrbrmstr — Mon, 03 Aug 2026 12:20:27 +0000

What in the name of $DEITY is that map projection?

New comment by hrbrmstr in "Ask HN: Why is my web server being attacked?"

hrbrmstr — Thu, 28 Dec 2023 00:13:33 +0000

These "noise storms" are becoming more common than in previous years and are generally tied to global "major" events.

This: https://observablehq.com/@greynoise/noise-storms has some explanation but I'd be glad to elaborate more if needed.

New comment by hrbrmstr in "Ask HN: How to do literal web searches after Google destroyed the “ ” feature?"

hrbrmstr — Mon, 18 Sep 2023 13:05:37 +0000

100% ^^this^^

New comment by hrbrmstr in "𝕏 monthly users reach new high in 2023"

hrbrmstr — Fri, 28 Jul 2023 18:08:22 +0000

Well, when you force users to login at least 1/month to keep their handle/account, you're 100% going to get an inorganic and non-truthful MAU metric, especially if you define that "A" to be <=20 seconds.

New comment by hrbrmstr in "Men are dropping out of the labor force because upset about their social status"

hrbrmstr — Sun, 25 Jun 2023 11:09:40 +0000

I realize the study was unable to or just did not perform “follow-ups” with the individuals they are positing “no longer work”. But, what exactly are these malcontents doing instead, then?

Living with parents? (Why would a parent enable this juvenile behavior)?

Relying on their spouse's income to survive (and, if so, is there any real harm/issue with this)?

Going “off the books” and just being part of the underground economy (in which case, this 'not working' posit is partly a falsehood).

Even woefully entitled dudes have to eat, no?

New comment by hrbrmstr in "Why can't we download data from screen time feature on Apple devices?"

hrbrmstr — Thu, 05 Nov 2020 10:15:39 +0000

It's accessible: https://rud.is/b/2019/10/28/spelunking-macos-screentime-app-...

New comment by hrbrmstr in "Ask HN: Why do I see so much crazy inline styling on websites these days?"

hrbrmstr — Sat, 02 Mar 2019 19:05:00 +0000

That particular page appears to have been created with "Unbounce" (https://preview.unbounce.com/) (the "lp-*" strings give that away). If you look for said "lp-" strings on the web there are more than a few pages using them. Unbounce is primarily designed for creating HTML email that won't break and won't get auto-rejected and it's likely easier for the builder program to stick in hardcoded values in-tag than to rely on complex CSS, especially with the varied capabilities of mail clients.

New comment by hrbrmstr in "Apache HTTP Server Remote Code Execution CVE-2002-0392"

hrbrmstr — Wed, 02 Jan 2019 01:22:54 +0000

I'm not sure why this particular CVE is [re-]surfacing now, but the January 1, 2019 Rapid7 Sonar HTTP port 80 scan found ~5,000 vulnerable servers and the list of vulnerable versions is larger than what's on the CheckPoint page: https://www.cvedetails.com/cve/CVE-2002-0392/?q=CVE-2002-039...

New comment by hrbrmstr in "Ask HN: Is GWT/Google Web Toolkit still being used today?"

hrbrmstr — Mon, 31 Dec 2018 18:11:20 +0000

According to https://trends.builtwith.com/framework/Google-Web-Toolkit ~43K sites use it.

New comment by hrbrmstr in "Ask HN: Google repeatedly thinks I'm a robot"

hrbrmstr — Thu, 27 Sep 2018 18:31:59 +0000

Yep. If you move around in google faster than "normal" humans it's flagging that behaviour more lately. I suspect some malicious (i.e. made by content thieves) web scraping instrumentation frameworks have added more natural human behaviours to their capabilities but still operate at a higher-than-"normal human" rate and those of us who are highly adept at legitimately utilizing google now fit into that new classifier slot. It's been super annoying.

New comment by hrbrmstr in "Ask HN: InfoSec questionnaire – what to do when customer wants one completed?"

hrbrmstr — Mon, 05 Mar 2018 13:23:42 +0000

Properly constructed information security questionnaires enable a business partner to conduct a high-level, non-intrusive assessment of your organization. You have a right to be concerned about the sensitivity of the data, but if you distrust your business partner that much, then don't do business with them. Your org is not a special snowflake and this is a very common practice by organizations of all shapes and sizes with organizations of all shapes and sizes. They are not the be-all/end-all of information sources (orgs regularly fib on these forms) and you do have a similar right to ask the inquisitors how they will protect your form data (that will also partoy show them you at least give lip-service to data security). It's also far more likely that your organization is going to get pwnd via phishing that is completely unrelated to the potential loss of confidentiality of this document. I say that as someone who has formally studied cybersecurity breaches for years.

Also, as cyberinsurance increasingly becomes "a thing", you're going to see this questionnaire situation increase in frequency. Your org should consider creating a pre-composed (and regularly updated) SSAE 16 (https://en.wikipedia.org/wiki/SSAE_16) to avoid having to fill out unique assessment questionnaires for every request that comes in. It'll save you time and — unless you "go N/A crazy" on the SSAE 16 — should be accepted by any firm worth doing business with.

New comment by hrbrmstr in "Luna, the visual way to create software"

hrbrmstr — Wed, 17 Jan 2018 01:32:19 +0000

Congrats to the team for launching something in 2018 on macOS without it being signed! Great way to encourage good security & safety practices for data folks on macOS! Signing is super hard, too. Totally not baked in to any workflows.

A bookdown “Hello World”: 21 (minus 2) Recipes for Mining Twitter with rtweet

hrbrmstr — Fri, 05 Jan 2018 16:49:07 +0000

Article URL: https://rud.is/b/2018/01/05/a-bookdown-hello-world-twenty-one-minus-two-recipes-for-mining-twitter/

Comments URL: https://news.ycombinator.com/item?id=16079685

Points: 1

# Comments: 0

New comment by hrbrmstr in "Curiosity – Find cool GitHub projects as a feed"

hrbrmstr — Thu, 30 Mar 2017 14:24:41 +0000

how many times are you going to submit this?

The Ransomware Chronicles: A DevOps Survival Guide

hrbrmstr — Mon, 30 Jan 2017 17:46:30 +0000

Article URL: https://community.rapid7.com/community/infosec/blog/2017/01/30/the-ransomware-chronicles-a-devops-survival-guide

Comments URL: https://news.ycombinator.com/item?id=13523309

Points: 1

# Comments: 0

On the Recent DSL Modem Vulnerabilities (TR-069 Data, Vis and Metasploit Module)

hrbrmstr — Tue, 29 Nov 2016 23:25:18 +0000

Article URL: https://community.rapid7.com/community/infosec/blog/2016/11/29/on-the-recent-dsl-modem-vulnerabilities

Comments URL: https://news.ycombinator.com/item?id=13067099

Points: 1

# Comments: 0

Election Day: Tracking the Mirai Botnet

hrbrmstr — Tue, 08 Nov 2016 20:07:47 +0000

Article URL: https://community.rapid7.com/community/infosec/blog/2016/11/08/election-day-tracking-the-mirai-botnet

Comments URL: https://news.ycombinator.com/item?id=12903495

Points: 2

# Comments: 0

[Cloud Security Research] Cross-Cloud Adversary Analytics

hrbrmstr — Wed, 02 Nov 2016 19:39:14 +0000

Article URL: https://community.rapid7.com/community/infosec/blog/2016/11/02/cross-cloud-adversary-analytics

Comments URL: https://news.ycombinator.com/item?id=12858532

Points: 1

# Comments: 0

New comment by hrbrmstr in "Beer and Concurrent HTTP Pipelines"

hrbrmstr — Sun, 30 Oct 2016 11:14:19 +0000

Rather than emoticon-ing away your responsibility in a potential site DoS, perhaps read up on responsible crawling - https://webarchive.jira.com/wiki/display/Heritrix/Responsibl... + http://blog.mischel.com/2011/12/20/writing-a-web-crawler-pol... . You had no need for either unlimited or even 50 parallel crawl tasks. And, if your intent is anything but personal use, you shld prbly (re)read https://www.brewtoad.com/legal since you just got their attention in a pretty big way.