nbk_2000

6 ms·

1.
by nbk_2000 12d ago
The Grugq has done several interesting interviews/articles on the industry. There's also a couple of Darknet Diaries episodes with similar interviews.
2.
by nbk_2000 7mo ago
It's been a long time, but I've always cherished our late night conversations at the Alexis Park. Truly a great hacker. RIP my friend
3.
by nbk_2000 10mo ago
Years back i was enamored with this concept and sought out various staple-less stapler solutions. Most were realistically only good for binding 3-5 sheets. My use cases required more, so i moved on. But I still admire them as lovely bits of
4.
by nbk_2000 11mo ago
Other zines have filled the void left by 2600, one of my favorites being PoC||GTFO. (pocorgtfo.hacke.rs) I think the author isn't considering that people's bubbles have gotten smaller and more opaque. There's still plenty of
5.
by nbk_2000 1y ago
I was thinking the same. In the meantime, here you go: https://snippetshare.dev/c/aoNWbZvSlYkJtGDHnQLohY4BnHd6hGgk8...
6.
by nbk_2000 1y ago
Same here, and with good results, but a note of warning, according to my doctor 10,000 - 20,000 are considered in the protocol a normal daily supplement for adults with vitamin D issues. Dosages above that require medical supervision (in th
7.
by nbk_2000 2y ago
Same here, small panic attack ensued ;P
8.
by nbk_2000 2y ago
Glad I wasn't the only one! ;)
9.
by nbk_2000 2y ago
Back when I was shooting on film, various "Toy Cameras" came in and out of vogue. I enjoyed the subtleties of the Lomos and Dianas, so when digital cameras became mainstream, I kept a lookout for similarly quirky DCs. My favorite
10.
by nbk_2000 2y ago
This reminds me of the famous Taco Bell Programming post [1]. Simple can surprisingly often be good enough. [1] http://widgetsandshit.com/teddziuba/2010/10/taco-bell-progra...
11.
by nbk_2000 2y ago
90 days since last view, or 1 year if you can afford to be generous. For "slow burn" projects with other people checklists easily go longer than a week without being looked at.
12.
by nbk_2000 2y ago
I used to operate as you're describing and appreciate the skill required to do so, but I eventually found it impacted my ability to transition a fixed scope engagement into an open-scope engagement. I've since found it more enjoya
13.
by nbk_2000 2y ago
Don't feel weird. I'd even itemize the task being being requested on their invoice (e.g. "reporting requirement fulfillment"). My perspective changed on this after doing a gig for Boeing, where they charged us for invoic
14.
by nbk_2000 2y ago
Their tag in ASCII Art via console.log() would earn equivalent cred, and not annoy fellow users of a useful service, IMHO
15.
by nbk_2000 2y ago
After initial setup the Q Revo does not need internet connectivity. So you can set it up using an ephemeral hotspot and afterwards control it exclusively with the buttons on the top of the unit. Any errors are spoken by the device.
16.
by nbk_2000 2y ago
Octosql does this as well as a few other formats. I've found it useful several times. https://github.com/cube2222/octosql
17.
by nbk_2000 2y ago
Just OOC, do you currently run a stock Ubuntu distro or a derivative? (and if so, may I ask which one?)
18.
by nbk_2000 2y ago
Rinsing your eye(s) with milk will alleviate the pain far quicker than water. Something I learned googling with one eye open while the other was burning from being touched with a habanero contaminated finger :/
19.
by nbk_2000 2y ago
I imagine they're referring to things like this (a read through the comments should give you the gist of the concerns people have voiced): https://news.ycombinator.com/item?id=40481808#40482165
20.
by nbk_2000 2y ago
Starting to sound like the "iPhone Killer" we've all heard about... for the past 15+ years
21.
by nbk_2000 2y ago
That's not how the "free until it's not" pricing model works :P IMHO it's just the price finding model that CF has adopted, I expect in the future they'll release limit numbers... unless they decide not releasi
22.
by nbk_2000 2y ago
Such dog, much sad
23.
by nbk_2000 2y ago
"Rubber Hose Cryptography" comes in the form of a PR. "Rubber Hose Cryptanalysis" comes in the back door and waits for you in the dark.
24.
by nbk_2000 2y ago
Thanks for the recommendation! Reminds me of Amadou & Mariam. I'm often saddened by how hard it is as a Westerner to discover modern African music.
25.
by nbk_2000 3y ago
OctoSQL[1] does a pretty good job of allowing you to query JSON (and CSV) with SQL. [1] https://github.com/cube2222/octosql
26.
by nbk_2000 3y ago
Similarly to how Journalists feel justified in stories that have negative repercussions for some parties being reported upon. One way of assessing these decisions is answering the question "Is more harm done than good by releasing info
27.
by nbk_2000 3y ago
If you're a large company that's actually serious about security, you'll have a Red Team that is intimately familiar with your tech stacks, procedures, business model, etc. This team will be far better at emulating motivated
28.
by nbk_2000 3y ago
Counter point: Most of the top rated Bug Bounty hunters have a background in penetration testing. I think it's more accurate to say Bug Bounty only covers a small subset of penetration testing (mainly in that escalation and internal pi
29.
by nbk_2000 3y ago
Just thought I'd plug Octosql[1] which I've enjoyed using for this. It parses CSV and JSON, which are the file types I parse the most. [1] https://github.com/cube2222/octosql/
30.
by nbk_2000 3y ago
In case anyone wants to see the Gary Larson illustration mentioned in the RFC: https://www.researchgate.net/publication/2245214_Choosing_a_...

More ›