HackerTrans
TopNewTrendsCommentsPastAskShowJobs

abarrettwilsdon

no profile record

Submissions

Dorking: the use of search engines to find very specific data

alec.fyi
560 points·by abarrettwilsdon·6 anni fa·195 comments

comments

abarrettwilsdon
·5 anni fa·discuss
All of these are standard terms.

Establishing a (standard sized) ESOP is good for the company long term.

If you would like better/different terms, you'll need at least one other firm to offer you a term sheet as leverage.
abarrettwilsdon
·5 anni fa·discuss
6m users¹? Smooth and sharable UX? Effective abstractions over many parts of the DevOps stack?

This comment has quite the Dropbox 'build such a system yourself quite trivially' comment energy

¹ https://twitter.com/amasad/status/1394002500508807168
abarrettwilsdon
·5 anni fa·discuss
This is not an accurate speculation.

They try to predict flu strains because it is prohibitive to identify and produce vaccines for every strain in time for flu season each year.

By your assertion, the entire notion of yearly flu shots would be irrelevant.
abarrettwilsdon
·6 anni fa·discuss
I use Vantage and it's definitely a good product and all but the real value is every hour you don't have to spend using AWS directly.

I would pay _so_ much money to never have to use Cloudwatch and AWS Cost Management again. Thankfully, I qualify for the vantage free tier for quite a while longer.
abarrettwilsdon
·6 anni fa·discuss
I caution against trying to monetize it; Facebook will waste your time with constant cat and mouse changes to the HTML and will bully you with their vast legal resources
abarrettwilsdon
·6 anni fa·discuss
I have a guide on using Serverless.com infra-as-code to get started with Lambdas. 0% console GUI

https://www.alec.fyi/set-up-serverless.html
abarrettwilsdon
·6 anni fa·discuss
Ah yes, 'where no SaaS has gone before', rolling their own CI/CD.

Never mind Github, Gitlab, Pivotal Labs, Netflix, and Yahoo/Verizon

and they're not even open sourcing it, they're just bragging about it

why is this on HN at all
abarrettwilsdon
·6 anni fa·discuss
Pretty disappointed to see both authors pitch their products and not discuss:

* data modeling

* warehousing, ETL, monitoring, observability

* the BD necessary to make a standard actually standard

* what aspects to compromise on, if necessary

* network effects

* regulatory moats

ed: the original "DaaS Bible" post is quite a bit more useful
abarrettwilsdon
·6 anni fa·discuss
Not exactly what you're looking for, but there's a OSS Chrome Extension that allows you to record your actions in browser and transcribes them into Nightmare.js code:

https://github.com/segmentio/daydream

Probably the best you're going to get - most things worth scraping are worth money, and as such are not freely available
abarrettwilsdon
·6 anni fa·discuss
I built something similar to this last year and wow this is just much... better

I find the choice of Flask + Zappa a little weird - I much prefer serverless.com for infra as code - but it makes sense after staring at it long enough
abarrettwilsdon
·6 anni fa·discuss
I was prepared to buy this and then I sorta stumbled across the Builder Book

They look very similar? But they're different? According to the docs this one is more focused on advanced patterns? Does a person need to buy the first to get value from the second?

Very confusing UX IMO
abarrettwilsdon
·6 anni fa·discuss
Yea, almost all existing Dorking content is around either SEO or offensive/defensive security scanning.

The broader OSINT has used dorking for a decade plus (e.g. exploit-db.com goes back to 2003).

The goal in writing this was to democratize access beyond those who use it regularly for work
abarrettwilsdon
·6 anni fa·discuss
When I run that query, it returns

`No results found for "the SERP should stay the same".`

Then defaults to providing the SERP for the fallback query:

`Results for the SERP should stay the same (without quotes):`

That SERP should change when this HN thread is indexed though
abarrettwilsdon
·6 anni fa·discuss
Hmm, I'm seeing the same now.

You can more or less replicate the functionality with intext:specific.url/subsite

Will update and credit you.
abarrettwilsdon
·6 anni fa·discuss
If it's specific enough, the SERP should stay the same until someone else publishes the same thing

e.g. the search of another article "set up Google Sheets APIs (and treat Sheets like a database)"

turns up my site and a couple Twitter threads talking about it (plus a phishing site which has scraped and republished it). I presume that will stay the same b/c it's such a specific title phrase (but not because searches are necessarily deterministic)
abarrettwilsdon
·6 anni fa·discuss
The first two appear to still work, but the third does not.

The permutation searches are tricky because you don't know if a lack of results means the email does not exist, or just hasn't been posted anywhere indexed

Will update and credit
abarrettwilsdon
·6 anni fa·discuss
`intext:phrase` and `allintext:multi part phrase`

generally "phrase" works well too
abarrettwilsdon
·6 anni fa·discuss
Updated the article to reflect and credited you for the contribution!
abarrettwilsdon
·6 anni fa·discuss
Try wrapping lizardmancan in quotation marks - "lizardmancan". That narrows it down to 10 results for me

(also: you'll want to remove the space between site: and news.ycombinator.com)
abarrettwilsdon
·6 anni fa·discuss
I like the idea but 20% of cloud spend in perpetuity is completely ridiculous and rules out anything above personal toy projects

Even if someone did sign up for the paid tier, they are strongly incentivized to cancel and keep to code