howlett

7 ms·

1.
Finding Unpinned and Unpinnable GitHub Actions Across Your Org(pavel.gr)
1 points by howlett 4mo ago|0 comments
2.
Show HN: Thermal Receipt Printers – Markdown and Web UI(github.com)
119 points by howlett 6mo ago|48 comments
3.
Show HN: Butler – GitHub Actions Oversight Across Organisations(github.com)
2 points by howlett 11mo ago|0 comments
4.
by howlett 4y ago
I'm using getmail ( https://pyropus.ca./software/getmail/ ) as a cronjob every night to download it all and then sync with an offsite backup
5.
by howlett 4y ago
If I'm not mistaken gitea stores codebases/projects on the filesystem, so having a hardcoded database password makes no difference. If someone gets into the server they can simply copy the files without touching the database. As o
6.
by howlett 4y ago
I think you're just stuck because your current employer doesn't have clear paths of progression. Usually in 3 years pentesters move to an either team lead role or pivot to other areas like simulated attack (red/purple teaming
7.
by howlett 4y ago
I'm not 100% certain if I'm understanding the requirement correctly - but would something like this help? https://github.com/ctxis/SnitchDNS
8.
by howlett 4y ago
You can gear yourself write security related tooling as /u/uaas mentioned, but you'd effectively still be a developer and not a pentester. If that's what you're after, you'll get exposure to InfoSec but you wil
9.
by howlett 4y ago
I totally agree with you, but the common "this is why we can't have nice things" end result of such scenarios is that people will VPN via India in order to buy your product. And then you have to identify VPNs in order to avoi
10.
by howlett 4y ago
As a user I hate it when I get localised prices, especially if the at-the-time exchange rate ends up being more expensive for me. If I see something sold for $9.99 but I get £9.99 I think "why am I paying more for this", simply be
11.
by howlett 4y ago
If you have been taking exports as backup, be aware that any attachments you have were not exported - https://news.ycombinator.com/item?id=31702594
12.
Tell HN: Bitwarden does not export attachments in backups
233 points by howlett 4y ago|123 comments
13.
by howlett 5y ago
I've had lasik about 10 years ago, best decision of my life, no side effects. It only took 10 minutes, and I can only assume that the technology advanced further the last decade. I know 2 people who had it around the same time as me, a
14.
by howlett 5y ago
Also, in Chrome Ctrl-Shift-T will not work in private mode however in Firefox it does.
15.
Show HN: SnitchDNS – Database Driven DNS Server in Python, with a WebUI(github.com)
3 points by howlett 6y ago|0 comments
16.
by howlett 6y ago
I've been trying to reproduce this since I saw this post without any luck. The only data I see going out is generic usage data (when you have the "anonymous usage data" enabled) - however I'm not logged into Postman. I s
17.
by howlett 6y ago
I use getmail[0] on my rpi. Download everything from gmail and fastmail using IMAP (sync) overnight into a truecrypt container, and then offsite backup to rsync.net. It's also storing everything into an mbox so you can easily import th
18.
by howlett 7y ago
I wrote the original post. The main issue I was trying to highlight is that you can make signed apps run your code from a local perspective. Here's a real life scenario that happened : I was doing a security assessment for a client, an
19.
by howlett 7y ago
I tried switching a couple of times but every time I face the same issue - the "touch" response is just _bad_ and I can't seem to be able to fix it. For example the "[-]" link on hackernews is almost impossible to c
20.
Electron Exploitation: Persistence and Data Egress (Skype, Slack, VSCode)(contextis.com)
2 points by howlett 8y ago|0 comments
21.
by howlett 8y ago
I use getmail ( http://pyropus.ca/software/getmail/ ) which isn't bound to a specific provider. Currently I backup my gmail and fastmail accounts using this. Here is my daily process: - mount truecrypt containe
22.
by howlett 8y ago
I saw Sketch2Code in HN a few weeks ago, hope it helps: https://github.com/Microsoft/ailab/tree/master/Sketch2Code
23.
by howlett 8y ago
It's because there are 4 "w" in the link - try https://www.cronote.com/
24.
by howlett 8y ago
Here are a few resources: https://www.reddit.com/r/netsec/ General news about netsec https://github.com/enaqx/awesome-pentest List of tools and resources https://github.com/wt
25.
by howlett 8y ago
I built https://www.remotepassword.com because I didn't want to hardcode passwords in my scripts and wanted a way to disable them remotely (ie my raspberry pi has been stolen and I don't want them to mount my backup tr
26.
by howlett 9y ago
I've made a very similar thing: https://www.remotepassword.com Works on both Windows and Linux but the passwords are stored online (GPG encrypted). The main idea was to be able to revoke a password if a machine has been com
27.
by howlett 9y ago
Did that change about year ago, I've commented on an older thread about this: https://news.ycombinator.com/item?id=14188283 But it also depends where you are located (country wise I mean).
28.
by howlett 9y ago
Are you logged into Amazon with your account on the second computer?
29.
by howlett 9y ago
Don't know if it's a "great" side project but I wanted a way to avoid hardcoding passwords in scripts, but in a way that I could revoke them if my RPi had been compromised (my RPi is used for backups/sync). So I mad
30.
by howlett 9y ago
I was in the same position as you a couple of months ago and I went for Linode - the $5 plan. You're probably conscious not to spend a lot of money from the start as - let's face it - you don't know if your project will be as

More ›