Live data from Hacker News

Viewing profile — altharaz

altharaz

HN member
Joined
Mon, Mar 04, 2013, 10:47 PM UTC
HN karma
209
Public activity
73 items

About altharaz

French InfoSec Engineer

https://www.cyberwatch.fr - Vulnerability Monitoring Software

Recent public activity

  1. comment
    Comment #48533141

    I built an Automated Pigeon Deterrent Water Turret. Everything has been built with Claude, even the bill of materials for the hardware. The project is open source and now protects …

  2. comment
    Comment #41958256

    There is a very high quality video about how Solar Gravitational Lens could be used to map exoplanets, and full explanations about the images reconstruction and engineering challen…

  3. story
    Show HN: Generate Mitre ATT&CK from a List of CVE

    CVE2CAPEC is a free tool to generate a MITRE ATT&CK Navigator from a list of CVE. MITRE ATT&CK is a framework that you can use to see the links between multiple security findings (…

  4. comment
    Comment #31814455

    Very great article. At the moment IMHO the major issue comes from that people use only the Basic Score of the CVSS 3.1, issued by the NVD. Indeed, if you also take the Temporal Sco…

  5. comment
    Comment #30876409

    The hardcoded password seems to be: Gitlab::Password.test_default(21) => "123qweQWE!@#000000000"

  6. story
  7. comment
    Comment #30844284

    https://sievedata.com seems very promising, a search engine for videos, with specific tags, sounds like a very good idea. I'd like the same for all my photos and videos: that would…

  8. comment
    Comment #27940513

    TL;DR: Some Windows configuration have bad permissions on their SAM database. If a standard user has access to shadow copies (VSS), this can lead to privilege escalation. Microsoft…

  9. comment
    Comment #24263716

    Unity has also a lot of potential in the Cybersecurity industry, for people that wants to train themselves on Industrial Systems. The only thing that makes industrial Cybersecurity…

  10. comment
    Comment #22943467

    Great app, I just bought it and I will try it on the next WebEx conference calls :). Some remarks: - the "Highlight cursor at app launch" has a "Start sdf sdfsdf" tooltip - I can n…

  11. comment
    Comment #21091504

    From my understanding, it's a dataviz of Facebook ads linked to politics. For instance, if we select "Browse per country" and then "France", you can see political ads, with their p…

  12. comment
    Comment #20917240

    Meditations, Marcus Aurelius => A lot of wisdom on how to lead and live On The Shortness of Life, Seneca => An essay about how to handle life and how to see what is really importan…

  13. story
  14. comment
    Comment #20019742

    From my experience, the password manager is just another issue to solve for this kind of people: it’s another software to use and these users do not like to use software. As a resu…

  15. comment
    Comment #20017798

    My recipe is AdBlocks + automated updates enabled + firewall enabled + desktop shortcut for web browser + regular antimalware check. Regarding phishing, I set them up with a GMail …

  16. comment
    Comment #19968906

    Is it also opensource? Or just free?

  17. comment
    Comment #19510743

    Blind-querying is a common technique and is even tested by tools such as SQLMap ( https://github.com/sqlmapproject/sqlmap/wiki/Usage#sql-injec... ). You have full details on what t…

  18. comment
    Comment #19371813

    In France, this kind of work is proposed by a lot of real estate agencies. Real estate agencies can even collect the rent for you and “guarantee” you the amount you will get each m…

  19. comment
    Comment #19319548

    I would have said “the day Pokémon Go had been released”. I remember people from different generations walking in the streets, talking and laughing together without knowing each ot…

  20. comment
    Comment #18102851

    From my experience, it seems that the daily digest is not enough :). And they still seem to blacklist WebEx invitations, which is really weird as it is definitely a "standard" in w…

  21. comment
    Comment #18102841

    > I haven't used WebEx, but what is the problem exactly? Are you concerned you won't see the invite or that the sender will get an annoying automatic response? Basically, WebEx sen…

  22. comment
    Comment #18101192

    In France we have a software vendor called MailInBlack. Their solution is exactly the one proposed in this article, where the sender has to solve a “challenge” to get in your mailb…

  23. comment
    Comment #18001769

    I didn’t know about Hummingbird. This is really cool. I think I prefer Hummingbird’s approach to OP’s because it makes deciphering the notes way easier with its symbol mnemonic, an…

  24. story
  25. comment
    Comment #17206275

    There is an excellent book about that: "Bienvenue dans le nouveau monde : comment j'ai survécu à la coolitude des startups" from Mathilde Ramadier. It's an analysis of the startups…