introvertmac

Hi friends, I run a small curated remote friendly job board at AI native companies. Please checkout: https://remotepilot.dev/

Hi friends, I run a job board for remote friendly roles at AI native companies. Please checkout: https://remotepilot.dev/

fair enough!

maybe it is just I saw 3-4 startups which "humanise" AI response and they are doing decent $, maybe just because of marketing

Some great points in there. Yeah, in the boat of "wanting to have money" while having a job, where two years there is a layoff or restructuring. Trying to find a balance as an engineer in mid 30s and optimising for everything as life passed by, With little bit of fomo here and there!

Demo: https://x.com/introvertmac007/status/1870788165080072227

Repo: https://github.com/introvertmac/IBRL

Not yet but we can add it in the next version

Check out Space Dash, a new space adventure game where every line of code is written by Claude Sonet. The game combines classic arcade mechanics with a fresh twist. Feedback is welcome!

Hey HN!

I've released an updated version of EasyScan, a lightweight website vulnerability scanner written in Python.

EasyScan analyzes the security of a website by inspecting its HTTP headers and DNS records, generating a comprehensive security report with recommendations for addressing potential vulnerabilities.

A complete security audit still requires manual testing and logical thinking, this script is meant for finding out basic server configuration and DNS issues.

Some of the key test cases covered by EasyScan include:

- Same Site Scripting - SPF and DMARC records - Public Admin Page - Directory Listing - Missing security headers - Insecure cookie settings - Information disclosure - CORS misconfigurations - Content-Type sniffing - Cache control

The script is easy to set up and use, requiring Python 3.6 or higher, along with a few dependencies (`requests`, `beautifulsoup4`, and `dnspython`). The generated report provides a quick overview of your website's security posture, helping you identify any issues that might need your attention.

Please note that EasyScan is not a substitute for a thorough security assessment, but it can be a great starting point for identifying potential vulnerabilities in your website.

Check out the project on GitHub: https://github.com/introvertmac/EasyScan

I'd love to hear your feedback and suggestions for improvement.

If you have any questions or need assistance, feel free to reach out on Twitter https://twitter.com/introvertmac.

Great point!

P.S. I've just complied few of recent findings from crypto websites. These issues are applicable to any website or REST APIs.

This post is not about security vulnerabilities in blockchain, smart contract or crypto protocols.

I genuinely tried to complied the issues and yes, most of them are crypto websites.

Sorry for any confusion created by the title!

Security disclosure and private work have some responsible disclosure policies.

I've added added the public bug bounty website for the last one!

You made a good point but accepting JS in a currency field requires validation + sanitization.

Validate for functional errors then sanitize for injection issues.

Hope it makes more sense now! Sorry for any confusion from previous comments or post

Maybe I was not able to make it clear - what I meant was "if you can inject arbitrary code in disabled fields and the system is using those JSON data elsewhere, it can lead to injection attacks"

The whole idea is validate the user inputs - be it disabled fields or normal inputs

That is basically injecting JS to trigger XSS (running user's code on the application)

Mostly through XSS and combining other security issues

There could be n numbers of ways to prevent this but saving user inputs without validation is always a bad idea.

Yes, it is :P Saying sorry on behalf of whole 2020 :)

Thanks a lot! Where can I find it?

China has the population and to some extent tech advantages but the Chinese government is very strict, unpredictable and favor individuals who are on their side.

Not everyone has an equal opportunity to make it big in China. If you care about freedom and a better future for your children, make money and move out!

Peter Thiel wrote about it back in 2014 in his book, Zero to One.

We have a different image of China and China has done a great job posing as next superpower but the reality is very different on the ground.

Rich Chinese want to get away from China by paying whatever price they can afford, this is not surprising at all!

Bug bounty literally changed my life.

In 2013 Facebook paid me $5000, because of it I was able to pay my education loan(in India) and avoided all those compound interest.

I started way before when it was popular and actually got my current job from this thread “list of YC companies I’ve worked with(Hacked)” https://news.ycombinator.com/item?id=10463286

Bug bounty is really hard these days, you are competing with the whole world - whoever report first, wins(even when you have put equal efforts)

It’s good for side hustle but you can’t do it full-time these days.

I came across this 'STOP words' https://en.wikipedia.org/wiki/Stop_words yesterday. Wiki says these word list can vary from services to services. There is hardly any chance you'll find a complete list, maybe common words are available.

http://bmanish001.pythonanywhere.com

I made this simple Instagram image downloader. Just copy image link of any Instagram image and save that in Full HD and size using right click. Still used by many for social media marketing as you can't save images from other's profile on Instagram, only way is to screenshot which obviously reduce the quality of the image.

Can you share your PHP project?

How about this? "we believe in god, rest we authenticate"

This is not the place to promote your affiliate links.

Looks like you own a SAAS?

How did you spread the word in early days of your project?(Any platform in particluar helped or performed better for marketing?)

Passive income: something that makes you money while you sleep(read it somewhere). Any examples, what type of businesses you are talking about?