chasemiller

7 ms·

1.
by chasemiller 1y ago
"ETHICAL hacker" ...yeah... I don't think those words mean what you think they mean...
2.
by chasemiller 2y ago
yeah, google likes to have fun with the Bug Bounty program. See: https://bughunters.google.com/about/rules/google-friends/662...
3.
by chasemiller 2y ago
Yes, it's a failure on DankStartup's part. Not really much different than a user buying dankstartup.net, setting up a catch-all email, observing what comes in, and performing password resets for those accounts, allowing for accoun
4.
by chasemiller 2y ago
OLEs were a phisher's dream
5.
by chasemiller 3y ago
@danwilkerson, were you driving around the north hills ~1 hour ago? Just passed one of these and thought to myself, huh, that's pretty neat, only to come home to see this post.
6.
by chasemiller 4y ago
This.
7.
by chasemiller 4y ago
And? Just people sharing their Ethereum Name Service (ENS) names. Still some of the biggest players in the crypto/NFT space on that list.
8.
by chasemiller 5y ago
I think it's important to differentiate between domain name squatters and domain name investors. Squatters are typically registering trademarked names with the hopes of flipping them to the trademark holder, or registering accidentally
9.
by chasemiller 6y ago
This explains the 30% 24hr growth of Stellar. Stellar has been working in this area for years and is built to facilitate exactly these types of transactions. I think they are probably the best positioned to take this on. Also, Stellar USDC
10.
by chasemiller 6y ago
I... just... wow.
11.
by chasemiller 7y ago
Completely agree. We're working on an idea to handle the boring stuff as part of YC's Startup School 2019. GDPR, HIPAA, CCPA, PCI, etc. compliance + penetration testing and risk assessments. We'll be building it at: https:&#
12.
by chasemiller 7y ago
Bug bounties are a great way to get your feet wet. I've seen many devs (especially web devs) have a lot of success hacking on websites that are built with frameworks they are familiar with. I would recommend checking out Bugcrowd or Ha
13.
by chasemiller 7y ago
tweetdeck.twitter.com
14.
by chasemiller 9y ago
As a long time Keybase user and Stellar holder, I couldn't be more excited for this news! Congratulations to all!
15.
by chasemiller 9y ago
>Mr Munro said it had taken him less than 10 seconds to find more than 1,000 examples. I, too, can use Shodan.
16.
by chasemiller 10y ago
An OK product/service that I have stuck with for too long out of stubborness/laziness. I would understand these changes if it seemed like there was actually active development happening on the product. I'd say "any sugge
17.
by chasemiller 11y ago
Wow, beautiful site! I'm loving this trend of services to save me money (Paribus is one other example that I love). However, I too am concerned about handing financial information over to a third party. I'd love to hear the busine
18.
by chasemiller 11y ago
Hey @kenbaylor! I think that this is an awesome approach to addressing the issue of the infosec employee shortage. I've actually been kicking around the idea of building something similar for a while now, so it's exciting to see s
19.
by chasemiller 11y ago
The equity questions was mostly theoretical to get a better idea of how startups value security among their early employees. I completely agree that the business model would likely be unsustainable.
20.
by chasemiller 11y ago
Hey dsacco, thanks for the great reply! I am a security guy on the outside of the startup world looking in and I was just trying to get a better feel for what the security landscape looks like. You'll find that startups between seed f
21.
Ask HN: How do startups value security?
6 points by chasemiller 11y ago|5 comments
22.
by chasemiller 11y ago
I've been following Stellar from a distance over the past year. After the initial hype, there wasn't much news about it outside of the relatively small Stellar community. I'll be interested to see where it goes from here.
23.
by chasemiller 11y ago
Looks like cool product! I hope to be part of your cohort! ;) Just a heads up- your signup/login forms are unencrypted. It's fine for a demo, but if you're going to put it out there like this, you should really throw some SSL
24.
by chasemiller 12y ago
Awesome, thank you!