Live data from Hacker News

Viewing profile — ehsanf

ehsanf

HN member
Joined
Thu, Feb 14, 2013, 6:15 PM UTC
HN karma
79
Public activity
11 items

About ehsanf

I am an application security expert with a good software development background. My favorite language is Python and I have some Linux admin experience before.

Recent public activity

  1. comment
    Comment #9041242

    You should probably file it as a bug or ask for support on github rather than HN! :)

  2. comment
    Comment #9037254

    Lots of reasons. For example, you can't just paste a picture from your Clipboard into a IRC channel and expect it to work. Granted there are image hosting services out there, but i…

  3. story
  4. story
  5. comment
    Comment #5451078

    Wow. That's a lot of servers exposed. I bet majority of them have the application/web server running on the same host. I think they should change the default to 127.0.0.1 and let p…

  6. comment
    Comment #5450515

    MongoDB manual has some good recommendations on operations here: http://docs.mongodb.org/manual/administration/security/#oper... It certainly helps limit the damage. However, unles…

  7. story
  8. comment
    Comment #5230407

    The article suggests, but doesn't explain why LLC / S-Corp is better if you are taking all the money out. It feels to me that if you don't have to retain any money, then they both …

  9. comment
    Comment #5224465

    We should call it "insecurity by default" (in contrast to insecurity by design). A major problem is that nobody takes responsibility or pays attention for default choices. A ton of…

  10. comment
    Comment #5221266

    I believe over-engineering is also a culprit here. We had a similar situation in JSON handling in browser. Some over engineered feature allows custom objects to replace built in ob…

  11. comment