Viewing profile — rambot

From the talk they are doing about this at AppSecUSA ( http://sched.co/3VgM ): The only information which gets accessed and transmitted are listed below: 1. Application Name 2. App…

We started the project back in 2012. It's an open source version of Campfire. :)

Our actual job is working on SD Elements ( http://securitycompass.com/sdelements/ ). Let's Chat is just a side project, but it's also something we use internally everyday. The feat…

We should add that we are using Gravatar to our Wiki. It's not obvious for people who aren't already using Gravatar what's going on.

It sounds like they listen on localhost by default ( http://docs.mongodb.org/manual/reference/mongod/#options ), though i'm not sure if that's always been the case. It's also possi…

Same. I was trying to suggest the attack vector most people would encounter is the web application MongoDB is servicing.

I suspect a lot of people are using MongoDB as the database backend to their web applications or services, so they are probably being indirectly exposed to the Internet. (Just like…

Where does the post suggest Rails is the only framework with bugs like this? The article opens with: "The latest Rails security flaw is example of a common anti-pattern. ... a simi…

You can use it to listen to music you like, or find new music. I'm using it right now to listen to the same stuff my coworkers are listening to in our office while I work from home…

It wouldn't be a ponzi scheme if the value didn't go up, at least for a little while.