JonathanBouman

6 ms·

1. 1.▲
   by JonathanBouman 2y ago

   I wonder if Virtuals Protocol considered to use their governance forum ( https://gov.virtuals.io/ ) to decide upon bounties? I can imagine the community wants to reward way more than 10k for these sort of bugs.
2. 2.▲
   How I found a RCE bug in Ahold Delhaize their 18 years old LDAP server(medium.com)

   4 points by JonathanBouman 3y ago|0 comments
3. 3.▲
   Reflected XSS at Fotoservice.hema.nl(medium.com)

   1 points by JonathanBouman 6y ago|0 comments
4. 4.▲
   Blind SQL Injection at Fasteditor.hema.com(medium.com)

   2 points by JonathanBouman 6y ago|0 comments
5. 5.▲
   The risks of Open Graph Tags; XSS at LinkedIn.com(medium.com)

   3 points by JonathanBouman 8y ago|0 comments
6. 6.▲
   Exploiting oEmbeds at Medium.com(medium.com)

   3 points by JonathanBouman 8y ago|0 comments
7. 7.▲
   Local file inclusion at IKEA.com(medium.com)

   3 points by JonathanBouman 8y ago|0 comments
8. 8.▲
   Bug bounty write-up: XXE bug leading to LFI(medium.com)

   2 points by JonathanBouman 8y ago|0 comments
9. 9.▲
   by JonathanBouman 8y ago

   https://status.discordapp.com states that Discord identified and resolved the problem.
10. 10.▲
    by JonathanBouman 8y ago

    Pretty unstable here, it loads but all the user specific pages return 'error code: 503'
11. 11.▲
    Ask HN: Plenty of large sites down; Reddit.com, GNU.org, Discord, coincidence?

    103 points by JonathanBouman 8y ago|84 comments
12. 12.▲
    Persistent XSS, a full write-up(medium.com)

    3 points by JonathanBouman 8y ago|0 comments
13. 13.▲
    Unrestricted File Upload at Apple.com(medium.com)

    5 points by JonathanBouman 8y ago|1 comments
14. 14.▲
    How I hacked Apple.com(medium.com)

    16 points by JonathanBouman 8y ago|1 comments
15. 15.▲
    Show HN: How I found a XSS bug on Amazon.com(medium.com)

    6 points by JonathanBouman 8y ago|0 comments
16. 16.▲
    by JonathanBouman 9y ago

    Also see: https://github.com/npm/registry/issues/255
17. 17.▲
    by JonathanBouman 15y ago

    Founder of http://scrolldit.com and http://scrollsy.com here. Great job! Love the design. You may consider to preload the first x designs in the html directly, its better for the seo. What about fixing deeplink urls when people click yo
18. 18.▲
    Scrollsy Is A Scrollable, Pinterest-Like Version Of Etsy(techcrunch.com)

    2 points by JonathanBouman 15y ago|0 comments
19. 19.▲
    by JonathanBouman 15y ago

    I'll make a second link, good idea.
20. 20.▲
    by JonathanBouman 15y ago

    It's fast, it supports JSONP and their API team is great to work with (fast replies on email). I could recommend anyone to build a mashup on top of the Etsy API.
21. 21.▲
    by JonathanBouman 15y ago

    Great idea, I'll put it on the list. Thanks.
22. 22.▲
    by JonathanBouman 15y ago

    Multiple things: I love endless scrolling and visually rich designs, I want to learn new techniques and ofcourse it's great to see other people using these mashups. Btw this mashup was also some kind of compensation for the damage I've done
23. 23.▲
    by JonathanBouman 15y ago

    Inspired by masonry jquery plugin and after the success of http://Scrolldit.com :)
24. 24.▲
    by JonathanBouman 15y ago

    Pre-caching JSON results is something I'm testing with, expect it within a short time.
25. 25.▲
    by JonathanBouman 15y ago

    Thanks for the kind words!
26. 26.▲
    by JonathanBouman 15y ago

    I'm not sure if I could see who purchased through my site, as far as I know shopkeepers see it. There is no sort of affiliate program. So I don't see any monetizing options for this moment.
27. 27.▲
    by JonathanBouman 15y ago

    Showing a 'Please activate javascript' message is indeed a good idea. A complete HTML only fallback is impossible since everything happens in the browser (JSONP API calls).
28. 28.▲
    by JonathanBouman 15y ago

    It's on the list to improve :)
29. 29.▲
    by JonathanBouman 15y ago

    I think you hit the API Limit. Just fixed a bug that used an old API key for API calls (got lower limits). Big chance you won't get that error if you retry it after 10 minutes (time needed for Amazon Cloudfront to push the new version to a
30. 30.▲
    by JonathanBouman 15y ago

    Thanks! The Treasuries view is a nice one indeed, took me a night to find a good way to keep it stupid simple and fast. My motivation is coming from previous mashups I did in the same style. http://Scrolldit.com which was featured on Tech