dang can you do something about the redirect link?
I don't know what the redirect was but given the article is behind the Medium paywall, if it was a t.co redirect, it was probably the submitter's way to let everyone skip the paywall.
I reversed a Node.js malware and found the author
71–79 of 79 posts
Re: I reversed a Node.js malware and found the author
#72Earlier quoted context omitted.
They may not have one, or have one that’s so underwater with larger issues that the rest of the org doesn’t know how to route things to them. Hiring for technical security is hard —you need engineering expertise to find good people, and then you need someone with an infosec background to vet them. Finding a combination of both is surprisingly rare and you usually find infosec folks who can define but not implement a…
How do you mean? Do you mean infosec people usually don't have degrees?
That depends entirely on their backgrounds. I myself do not. The status-quo here isn’t too different than anywhere else in the tech sector.
Many security engineers transition into infosec from related fields like IT, DevOps, Network Engineering, Product Engineering, or similar. This tends to work out well since security engineers work closely with all of those areas within an organization.
Re: I reversed a Node.js malware and found the author
#73Earlier quoted context omitted.
It's just as sad you made an account just to troll the user you're replying to, given the username.
that’s pure irony, that account is older and not me, mods follow that pretty closely and would have long flagged all if that was the case way more amusing all the vms coming out of the woodwork on the most random thread
No post body was provided.
Re: I reversed a Node.js malware and found the author
#74dang can you do something about the redirect link?
I don't know what the redirect was but given the article is behind the Medium paywall, if it was a t.co redirect, it was probably the submitter's way to let everyone skip the paywall.
it goes from medium.com to itnext.io
why not just use the itnext.io link?
Re: I reversed a Node.js malware and found the author
#75As the maintainer of a moderately popular Minecraft mod, I deal with “ratted” versions all the time. They are often obfuscated with popular free tools that can be reversed, and they always seem to use Discord webhooks that can be instantly deleted. I’ve seen hundreds, and they never seem to evolve in their methods, thought there have been some really nasty ones.
Re: I reversed a Node.js malware and found the author
#76Finding the author of most common malware isn't hard, skript kiddies really like their credit for reputation.
Is it really fair to call someone a "skript kiddie" if they wrote the malware themselves that became "the most common malware" ?
I don't call the authors of most original malware skript kiddies, that term is for the people who copy the common malware with at most a few edits or create Frankenstein creations out of multiple common sources.
Re: I reversed a Node.js malware and found the author
#77Our discord got hit by the same shit, targeted at our game admins. We are the largest open source multiplayer video game on github, so (compromised) discord friends sending admins messages about "games they made" with exes in them was more effective then it should have been until news and announcements went out.
Which game? bzflag is the only one that comes to mind, but I am not a gamer.
From the HN profile:
(/tg/Station13, based off of Space Station 13).
Re: I reversed a Node.js malware and found the author
#78Why did you redact the identity of the scammer? Please name and shame them! These people need to be called out and it seems like you’ve got irrefutable proof.
These posts show up on every thread like this and it always strikes me as off. It's not that I think the scammer here deserves protection, but the impulse to "name and shame" makes me very uncomfortable. I worry that supporting that impulse, even in cases like this, normalizes the use of internet lynch mobs to exact "justice" (for any subjective value of "justice" that can get enough steam).
Also it would be soo easy to frame someone. That is why we have the legal system we have in most countries. We want to be REALLY sure we get the right person before we do something about it.
Re: I reversed a Node.js malware and found the author
#79hey im stanley, didn't know that it was that famous !!!