hackermondev

8 ms·

1.
by hackermondev 7mo ago
the fact they're not even trying to hide this is beyond crazy > openai-watchlistdb.withpersona.com > openai-watchlistdb-testing.withpersona.com
2.
by hackermondev 9mo ago
Discord puts the authentication token in local storage
3.
by hackermondev 9mo ago
the impact varied by customer. in Discord's case, the auth token is stored in local storage and their docs is hosted on the primary domain; they were susceptible to a full account takeover. X's docs are on a different subdomain bu
4.
by hackermondev 9mo ago
imo, the impact is pretty clear here. an unsuspecting user clicks (or is redirected) to one of these malicious links on the platform (ex. vercel); the script grabs their cookie and credentials and sends it to the attacker. they now have ful
5.
We pwned X, Vercel, Cursor, and Discord through a supply-chain attack(gist.github.com)
1167 points by hackermondev 9mo ago|433 comments
6.
by hackermondev 1y ago
Thanks for the feedback, I've updated the README!
7.
by hackermondev 1y ago
That's what the `window` option does ( https://github.com/hackermondev/batched?tab=readme-ov-file#b... ). After the first item is added to the buffer, it waits for the maximum window time, then calls the inner funct
8.
by hackermondev 1y ago
Need to be specified at build time, but you can set a dynamic window length based on the current buffer length. https://github.com/hackermondev/batched?tab=readme-ov-file#b...
9.
Show HN: Rust macro utility for batching expensive async operations(github.com)
28 points by hackermondev 1y ago|10 comments
10.
by hackermondev 1y ago
seriously doubt Google Cloud is relying on Cloudflare KV lol
11.
by hackermondev 2y ago
that's a hackerone bug, that 8-year-old report is not mine :)
12.
0-click deanonymization attack targeting Signal, Discord, other platforms(gist.github.com)
1457 points by hackermondev 2y ago|438 comments
13.
NPM packages are down world-wide(status.npmjs.org)
3 points by hackermondev 2y ago|1 comments
14.
Bug, $50K+ in bounties: how Zendesk left a backdoor in companies(gist.github.com)
20 points by hackermondev 2y ago|5 comments
15.
Public URL tool exposes thousands of sensitive links (100+ account takeovers)(twitter.com)
4 points by hackermondev 2y ago|0 comments
16.
Replit limits free plan users to 5 repls (unless a $25 subscription)(github.com)
5 points by hackermondev 2y ago|0 comments
17.
Replit permanently moves to paid hosting after 7 years of free service(noreplit.com)
137 points by hackermondev 3y ago|109 comments
18.
Show HN: Peer2Proxy, Earn passive income by sharing your internet(peer2profit.link)
3 points by hackermondev 4y ago|0 comments
19.
Show HN: Monetize and sell your internet traffic(peer2profit.io)
1 points by hackermondev 4y ago|1 comments
20.
Show HN: Bob, the artificial intelligence capable of answering any question(replit.com)
2 points by hackermondev 4y ago|1 comments
21.
“ discord is forcing Namecheap to transfer my domain discord.style to them”(twitter.com)
4 points by hackermondev 4y ago|1 comments
22.
by hackermondev 4y ago
replit better
23.
You can now invest in Replit(wefunder.com)
1 points by hackermondev 4y ago|0 comments
24.
Raidforums is now run by FBI(twitter.com)
4 points by hackermondev 4y ago|0 comments
25.
Replit is hosting an NFT hackathon with opensea(twitter.com)
1 points by hackermondev 5y ago|0 comments
26.
Discord is restricting Iranian users because the goverment is funding terrorists(old.reddit.com)
2 points by hackermondev 5y ago|0 comments
27.
Cheesgle: Worst Search Engine(cheesgle.com)
1 points by hackermondev 5y ago|0 comments
28.
China Declares All Cryptocurrency Transactions Illegal(nytimes.com)
4 points by hackermondev 5y ago|1 comments
29.
Free .is-a.dev for Developers(github.com)
1 points by hackermondev 5y ago|0 comments
30.
It's a lot easier now to get your hands on a botnet(daniel.is-a.dev)
4 points by hackermondev 5y ago|0 comments

More ›