news.ycombinator.com
Ask HN: How should I go public with a security hole?https://news.ycombinator.com/item?id=4050901We're evaluating an expensive software system for a certain industry. We've found public facing exploitable holes in the login system (default passwords, improper firewalls, SQL injection), which is directly translatable into profitable fraud.That is, if we used this system and someone exploited it, they could cause direct financial harm. These systems are almost always exposed to the public internet.I spoke to the company, and they seemed rather apathetic about the situation, although they said they'd fix the SQLi. Despite the codebase being in C, they report they've had no RCE security issues, "just crashes". I find that highly unlikely, more no one bothered investigating.How should I handle this? I'm worried for my own company which is at risk, and I'd also like to publish this info, as this market tends to sweep things under the carpet. In the past, with another vendor in the same market, I've privately reported, and found the vendor lied about fixing things and did not explain theMay 31, 2012 11:04 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85d0aa9f634d5da3365ab6b0fba611&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85ec39e475431c812df0980b6420b3&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85ca9f01cb4da69b4ab2269fc2fe55&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85cc88714f418f9c8f3b8acdb5312e&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85ea0d5d9f4637ac10a61d3d87c698&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85e5cc4ea649cab60206dc6b905347&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85e18e99dd404a8b4e0b0a5a139e90&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85d2e79566478f8052c8d8fb0ec3aa&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85c8be85f34d51baafc727373a24a1&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85e3a996794b31ac4041348b8ae8ce&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85ce85d6064207ac7797b6b773e939&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85d51f31504205b33a3271350c2319&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
news.ycombinator.com
Ben Folds - Lucky Breaks In Music Careerhttps://news.ycombinator.com/item?id=3914810You can see it here : https://www.facebook.com/BenFolds/posts/10150705345312231----Lucky Breaks In Music CareerI got such wonderful responses to my blog about aspiring artists. Thank you. And also, you're all welcome. I do quite a bit of journal writing anyway so this is my idea of a good time. Here's what what fellow had to say.Emil Siravo wrote: "why is it that successful artists can never say how they made the leap from poor and struggling to rich and famous.... theres always that mysterious step that they never explain. I guess cause its very unflattering, that step being 'someone with connections got my ass in the door and gave me a golden opportunity'. I wish more artists would talk about WHO gave them their career and less about trying to hide the fact that to make it in the music industry you must rely on somebody getting you 'in' the door. Sure you have to work real hard and you must be ready to prove yourself when the opportunity presents itself,,,, but that Lucky break is stMay 1, 2012 3:31 PM
news.ycombinator.com
My mission to solve the problem with Facebook, Google+ etc.https://news.ycombinator.com/item?id=3838747Now I know everyone has their own issues with the current state of social networks. Some have issues with privacy, some have issues with too many friends, some have issues with spam. My issue is with all the above, but more importantly I am sick of the fact that I look like everyone else and I don't own the content. I am being controlled and it needs to stop.I am tired of feeling like I live in an apartment complex where I have no control over how things function or look. It's not even like a complex anymore. It's more like a prison.Best quote in a long time..."If you aren't paying for a product, you are the product."Your data is being sold to advertisers so they can find sneaky was to throw their ads in front of your faces. And who is going to take the time out to actually go through on FB and customize your ad experience so they are relevant to you? Not me.For the past year and a half I have been working on a solution to solve these problems and many others. It's been a very difficulApr 13, 2012 8:39 PM
news.ycombinator.com
Ask HN: Review my idea - Hosting SEOhttps://news.ycombinator.com/item?id=3690713Background: This idea was borne out of an internal tool I created to figure out and validate SEO strategies for websites I own. I figure since it works for me, I could try and sell this to a different industry/niche - in this case 'hosting'. This tool currently does not have an UI - I run sql queries directly on the mysql server to get my information. I have created a mockup UI to show how I expect it to work.UI for explaining the app functionality - http://axemantech.com/HostingSEO/Pain point it solves: Currently there are many seo apps that show serp rankings, on page and off page seo stats but seting up the system is generally painful. I dislike having to add keywords for my website, add data for my competitors, etc. This generally happens because these SEO apps are generic.How to solve this: Since this app focuses on a specific niche, it will already be setup with all the potential keywords for the niche (and will continously add new ones). All the data that the customers (people pMar 11, 2012 5:25 PM
news.ycombinator.com
What was Google thinking(Contains text from the blog)https://news.ycombinator.com/item?id=3460094This is the text contained in http://blog.mocality.co.ke/2012/01/13/google-what-were-you-thinking/blog as written by Mocality CEO You can follow the blog link to read the full story(of which I propose since it is of better quality) but just in case you can't access the site here is some of the contents that the blog contains. Note: Some resources such as images might be missing and also I didn't have enough time to format the content properly============================================= Links to some of the resources contained in the blog ============================================= https://s3-eu-west-1.amazonaws.com/mocality-wordpress/audio/douglas.mp3 http://blog.mocality.co.ke/files/2012/01/Incoming_Call-Redacted-20111221-1133502.pdf ============================================= I’m very proud of the business that we’ve created here at Mocality, but I’m especially proud of two things:1. Our crowdsourcing program. When we started this business, we knew that (unlike in the UK or US, Jan 13, 2012 11:12 AM
bing.com
Advantages and Benefits of the Classical Management Theoryhttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a88ea759ed74d7abdb4ca0e501d93af&url=https%3A%2F%2Fsmallbusiness.chron.com%2Fadvantages-benefits-classical-management-theory-37990.html&c=18219158157167059074&mkt=en-usClassical management theory was introduced in the late 19th century. It became widespread in the first half of the 20th century, as organizations tried to address issues of industrial management, ...Jan 11, 2012 2:27 AM
news.ycombinator.com
Web Developer f/mhttps://news.ycombinator.com/item?id=3419494Ableton makes Ableton Live, one of the most successful software applications for writing, recording and performing music. Our award-winning software supports and inspires musicians around the world, including famous names like Hans Zimmer, Nine Inch Nails, Richie Hawtin and many more.Ableton’s headquarter is located in downtown Berlin and we have a smaller office in New York. Spread across both offices, about 140 immensely talented people – from over 20 countries – work in a stimulating, challenging and rewarding atmosphere.To strengthen our team, we are looking for:Web Developer (f/m)Job DescriptionAbleton Live is changing how people make music, and in the Ableton Web Team we want to change how musicians use the web to learn, share, and inspire each other. Come join us in building the next generation of web applications for musicians, producers and DJs.You’ll work in Agile teams that mix engineering and design from start to finish. You’ll collaborate with designers, pair with other deJan 3, 2012 1:07 PM
futurezone.at
Yelp keeps Deal business running, CEO says in exclusive interviewhttp://futurezone.at/digitallife/4845-yelp-deals-sind-definitiv-nicht-tot.phpAustrian IT-Blog www.futurezone.at got an exclusive interview with Yelp-CEO Jeremy Stoppelman, who said that Yelp is not stopping it´s deals business, as other media reported recently. He´s not convinced of the push emails Groupon is doing and said that he found a more elegant way to sell coupons to customers. Stoppelman also tells new facts abut the “Instant Personalization”, which Yelp and Facebook partners on. He states that about 100 users are opting out of the “Instant Personalization” on a daily basis. Read more about his opinions on the ongoing troubles with Google, the new competitor Foursquare and his investment in Palantir Technologies here (german language):http://futurezone.at/digitallife/4845-yelp-deals-sind-definitiv-nicht-tot.phpFor all you non-german speakers, here´s the link to the Google translation of the interview:53 million users, 20 million Reviews: Yelp is primarily in the United States to the fixed points of the social web. The evaluation portal expands in 2011,Sep 8, 2011 12:32 PM
