Viewing profile — howlett

I'm using getmail ( https://pyropus.ca./software/getmail/ ) as a cronjob every night to download it all and then sync with an offsite backup

If I'm not mistaken gitea stores codebases/projects on the filesystem, so having a hardcoded database password makes no difference. If someone gets into the server they can simply …

I think you're just stuck because your current employer doesn't have clear paths of progression. Usually in 3 years pentesters move to an either team lead role or pivot to other ar…

I'm not 100% certain if I'm understanding the requirement correctly - but would something like this help? https://github.com/ctxis/SnitchDNS

You can gear yourself write security related tooling as /u/uaas mentioned, but you'd effectively still be a developer and not a pentester. If that's what you're after, you'll get e…

I totally agree with you, but the common "this is why we can't have nice things" end result of such scenarios is that people will VPN via India in order to buy your product. And th…

As a user I hate it when I get localised prices, especially if the at-the-time exchange rate ends up being more expensive for me. If I see something sold for $9.99 but I get £9.99 …

If you have been taking exports as backup, be aware that any attachments you have were not exported - https://news.ycombinator.com/item?id=31702594

I've been using Bitwarden for about 4 years now and cannot understand how a Password Manager does not export attachments when backing up your data. I understand this was the case w…

I've had lasik about 10 years ago, best decision of my life, no side effects. It only took 10 minutes, and I can only assume that the technology advanced further the last decade. I…

Also, in Chrome Ctrl-Shift-T will not work in private mode however in Firefox it does.

I've been trying to reproduce this since I saw this post without any luck. The only data I see going out is generic usage data (when you have the "anonymous usage data" enabled) - …

I use getmail[0] on my rpi. Download everything from gmail and fastmail using IMAP (sync) overnight into a truecrypt container, and then offsite backup to rsync.net. It's also stor…

I wrote the original post. The main issue I was trying to highlight is that you can make signed apps run your code from a local perspective. Here's a real life scenario that happen…

I tried switching a couple of times but every time I face the same issue - the "touch" response is just _bad_ and I can't seem to be able to fix it. For example the "[-]" link on h…

I use getmail ( http://pyropus.ca/software/getmail/ ) which isn't bound to a specific provider. Currently I backup my gmail and fastmail accounts using this. Here is my daily proce…

I saw Sketch2Code in HN a few weeks ago, hope it helps: https://github.com/Microsoft/ailab/tree/master/Sketch2Code

It's because there are 4 "w" in the link - try https://www.cronote.com/

Here are a few resources: https://www.reddit.com/r/netsec/ General news about netsec https://github.com/enaqx/awesome-pentest List of tools and resources https://github.com/wtsxDev…

I built https://www.remotepassword.com because I didn't want to hardcode passwords in my scripts and wanted a way to disable them remotely (ie my raspberry pi has been stolen and I…