We spent $20 to achieve RCE and accidentally became the admins of .mobi(labs.watchtowr.com)

1545 points by notmine1337 2 years ago | 346 comments

watchTowr Labs blog post describing how registering an expired WHOIS server domain for $20 let them take over .mobi WHOIS and reach RCE paths.

Stop Putting Your Passwords into Random Websites (Yes, Seriously, You Are the PR(labs.watchtowr.com)

13 points by Deeg9rie9usi 11 months ago | 1 comments

Dbt Labs acquires SDF Labs(getdbt.com)

102 points by karakanb 1 year ago | 45 comments

NixOS and reproducible builds could have detected the xz backdoor(luj.fr)

260 points by birdculture 1 year ago | 112 comments

I got into YC Startup School by hacking it(obaid.wtf)

94 points by speckx 3 months ago | 59 comments

DMARC has been public since 2012 but most company domains still don't enforce it(ciphercue.com)

171 points by adulion 3 months ago | 105 comments

All I wanted was a custom domain email(jacobg.co)

67 points by jgx0 21 days ago | 95 comments

A personal blog post about the author's search for an affordable custom-domain email service with unlimited addresses, verified sending, and Apple Mail integration.

Someone bought 30 WordPress plugins and planted a backdoor in all of them(anchor.host)

1116 points by speckx 6 months ago | 312 comments

Anchor Hosting blog post describing how someone acquired 30 WordPress plugins and inserted a backdoor into each of them.

AWS us-east-1 down

567 points by rurp 3 years ago | 256 comments

Hacker News discussion thread reporting an AWS us-east-1 outage with increased error rates affecting Lambda and IAM-dependent services.

How to set up SPF, DKIM, and DMARC for your sending domain(mailfully.com)

49 points by spy888 25 days ago | 20 comments

A blog guide from Mailfully explaining how to configure SPF, DKIM, and DMARC DNS records for an email sending domain.

DuckDB Doesn't Need Data to Be a Database(nikolasgoebel.com)

353 points by tosh 2 years ago | 115 comments

A blog post by Nikolas Göbel discussing how DuckDB can act as a database without storing data itself, querying external data sources directly.

AWS Bedrock to require sharing data with Anthropic for Mythos and future models

369 points by TomAnthony 4 months ago | 216 comments

Hacker News discussion of Anthropic requiring 30-day data retention for Mythos-class Claude models on AWS Bedrock, moving data outside AWS's security boundary.