news.ycombinator.com
Ask HN: How should I go public with a security hole?https://news.ycombinator.com/item?id=4050901We're evaluating an expensive software system for a certain industry. We've found public facing exploitable holes in the login system (default passwords, improper firewalls, SQL injection), which is directly translatable into profitable fraud.That is, if we used this system and someone exploited it, they could cause direct financial harm. These systems are almost always exposed to the public internet.I spoke to the company, and they seemed rather apathetic about the situation, although they said they'd fix the SQLi. Despite the codebase being in C, they report they've had no RCE security issues, "just crashes". I find that highly unlikely, more no one bothered investigating.How should I handle this? I'm worried for my own company which is at risk, and I'd also like to publish this info, as this market tends to sweep things under the carpet. In the past, with another vendor in the same market, I've privately reported, and found the vendor lied about fixing things and did not explain theMay 31, 2012 11:04 PM
news.ycombinator.com
Ask HN: Does explaining your program's complete design reduce sales?https://news.ycombinator.com/item?id=3674312I'm working on my very first Android application; and, I've been considering talking through the different parts of my design; and how and where my code is growing organically to support the different ideas that I have.Since I'd basically be explaining every feature and design decision I make from here on out, this leads me to a question. Would I lose sales from my application? I'm very interested in selling it.It's an active wallpaper that plays the Game of Life. I know the market already has one, but I was going to be adding more features to it that would make it more interesting and perhaps a good wallpaper.Mar 7, 2012 4:49 AM
market.android.com
Tesla Sparks w/RSS Readerhttps://market.android.com/details?id=com.simplyusefulapps.android.wallpaper.teslaHey hackers and geeks,Simply useful apps just released a live wallpaper for Android which has full interactive fun effects that resembles great Nikola Tesla's famous experiment with electricity, and electromagnetism! Touch anywhere on the desktop to get electrocuted :)Their url: http://simplyusefulapps.comAwesome!Feb 10, 2011 7:33 PM
