Viewing profile — mag00

> E.g address X sends $100MM worth of bitcoin to two addresses, with ~$1k going to address Y and the rest going right back to address X. What you are likely looking at is not fraud…

If you're a OneLogin customer trying to figure out what you're supposed to do now, this is what you're supposed to do: https://support.onelogin.com/hc/en-us/articles/115002695483?.…

Yep, fixing

I don't like the idea of keeping secrets in ENV and limiting it to config, though it's the kind of thing I'd ask other folks about myself to understand any tradeoffs. I see Kuberne…

Hi, I wrote this! To continue a discussion: - How does your engineering team track new "debt" after releasing code? (if at all, and why not) - Do you pay anyone for centralized log…

I'm curious how typo and bit squatting would come into play here, and if attacks leveraging them could collect private keys at a dangerously high rate before people can patch their…

Coinbase, San Francisco, CA Hi - I'm Ryan, I'm with Security @ Coinbase. We're trying to make BTC easy to use. https://coinbase.com/mission We're building out our security and engi…

Yep, that's on the way!

Hi, Ryan here - We've moved over to hackerone.com/coinbase, and emailed everyone at the whitehat@ address about the transition. We'll be getting in touch for the details and will g…

https://hackerone.com/coinbase

Because Coinbase has moved the program out of email and into here: https://hackerone.com/coinbase

Hi - I built Facebook's Bug Bounty program with a few other FB folks. There's a couple things I want to add to the conversation about how we look at rewards. (Also, in 2009 it was …