Live data from Hacker News

Ask HN: What projects are you working on?

news.ycombinator.com

11–20 of 514 posts

Re: Ask HN: What projects are you working on?

#13
I'm working on an enterprise honeypot framework with an emphasis on internal honeypots that alerts a network administrator as soon as an attacker messes with it. An example would be a fake PHP myadmin page that alerts a security engineer as soon as it receives a POST request

It's closed source but I've finished the architecture for the software and a couple of the services (MySQL, Web, FTP). They are really cool in my opinion. I'm writing this in Java (yuck but great at the same time), so packaging each service as a Jar file makes deployment super super easy.

It's actually been really successful thus far (and really easy to write, only a few hundred lines). I think enterprises need to use more "trickery" in their security systems and I don't think a framework exists for this previously. It is really powerful to know that

if (honeypotTouched){ //critical alert }

A lot of honeypot software is old and does not send you alerts when something bad happens to it. Most are external facing. I guess a better name for this is "canary". I got the idea my second time sitting through mubix's "Attacker Ghost Stories" talk.

Re: Ask HN: What projects are you working on?

#14
I'm working on a service which provides (obfuscated) aliases of your users e-mail addresses on your own domain. It only requires some API calls to generate the aliases and eliminates e-mail servers or servers to process the e-mails. Started working on it after a request of a fellow HN'er.

Check it out on: http://mailobfusc.com

Post reply on HN