HackerTrans
TopNewTrendsCommentsPastAskShowJobs

IntToDouble

no profile record

Submissions

Squarespace Domain Hijacking Retrospective

securityalliance.notion.site
2 points·by IntToDouble·2 वर्ष पहले·0 comments

comments

IntToDouble
·पिछला वर्ष·discuss
Rate-limited Playground Only key? Lock to requests for said key to be only permitted from the exact referrer? Give me one free and then auth?

¯\_(ツ)_/¯

I just want to try before I buy, sir.
IntToDouble
·पिछला वर्ष·discuss
The first rule of Show HN is, "don't give me a playground where it looks like I can push the button and then force me to auth when I actually do click the button, expecting magic on the other side."

The second rule of Show HN is, "YOU DO NOT FORCE USERS TO AUTHENTICATE AFTER THEY'VE CLICKED THE BUTTON."
IntToDouble
·2 वर्ष पहले·discuss
Direct link to the retrospective:

https://securityalliance.notion.site/A-Squarespace-Retrospec...
IntToDouble
·2 वर्ष पहले·discuss
In terms of the incubator, looks like it was replaced with Mozilla Ventures:

https://builders.mozilla.community/ https://builders.mozilla.community/old/alumni.html

With respect to Kanary, I have my entire family the platform and it's drastically reduced the amount of garbage (figurative) that comes through our door. Needed help with something non-standard the CEO personally took care of things while learning more about our specific use case.
IntToDouble
·2 वर्ष पहले·discuss
Puzzling they chose to partner with Onerep when Kanary was part of Mozilla's incubator and is just a fundamentally stellar service.
IntToDouble
·3 वर्ष पहले·discuss
The Laws of Human Nature by Robert Greene

48 Laws of Power by Robert Greene

BigCo shenanigans will never look the same!
IntToDouble
·3 वर्ष पहले·discuss
Variables are expanded in this case so the sorting is already lost :-)
IntToDouble
·3 वर्ष पहले·discuss
Our twist on the family email is to have [email protected] point to a Google Group that for the moment, only goes to the adults in the room. Makes sorting/labeling things significantly easier.

[email protected], [email protected], [email protected], etc.
IntToDouble
·3 वर्ष पहले·discuss
Self plug but high relevancy - measuring keystrokes-per-second to convert the characters saved into actual $TIME.

Calculation for "the" from the screenshot in the repo:

9933 characters saved / 8 kps = ~20 minutes

https://www.inttodouble.com/explore/keystrokes-per-second
IntToDouble
·3 वर्ष पहले·discuss
Cheapest being humans.
IntToDouble
·3 वर्ष पहले·discuss
+1 for Kanary.

The amount of time/effort/rage that goes into dealing with a stolen identity makes paying for this a no-brainer.