jwarren116 | 6 years ago | on: Robots.txt as a Security Measure?
It’s very literally the second bullet point on my enumeration list for web apps, right behind looking at the DNS records for the domain.
jwarren116's comments
jwarren116 | 7 years ago | on: The Property Industry Is Falling Out of Love with WeWork
It’s my understanding that the Hana offering is run entirely by CBRE, much in the way CBRE will manage buildings as a service. I would assume it’s an offering for the owner/landlord where they (landlord/owner) would be hands off and there would be a split with CBRE.
https://www.cbre.com/real-estate-services/directory/flexible...
Disclosure: I work for CBRE, but in a different line of business with no knowledge of Hana outside of what is explained by the above link.
jwarren116 | 8 years ago | on: Tips for Building High-Quality Django Apps at Scale
+1 for Lightweight Django. I had the pleasure of working with one of the authors. The book is well laid out and covers some really great topics that aren't always covered well elsewhere in the context of Django (i.e. Websocket services with Django). It's a great companion for Two Scoops of Django.
jwarren116 | 9 years ago | on: Why Friday's Massive DDoS Attack Should Be Terrifying
A group called New World Hackers have claimed responsibility[1]. I read a bit that they stopped their attacks by 2pm EST, and that another group picked up some of the minor attacks later in the day. Anonymous was mentioned, but didn't claim it. I can't seem to track down that article at the moment... I'll keep looking.
[1] https://twitter.com/fbajak/status/789611472280178688 and http://www.anonintelgroup.com/2016/10/21/twitter-down-its-no...
jwarren116 | 9 years ago | on: Why Friday's Massive DDoS Attack Should Be Terrifying
Same. I use OpenDNS and I had no idea there was an attack happening until I asked a co-worker to review something on GitHub and they couldn't access it. SmartCache saved me a lot of hours that could have been lost Friday.
jwarren116 | 9 years ago | on: Ask HN: Anonymous person sent proof of SSH access to our production server
In addition to all the really great advice already submitted, I really like using Lynis[0] for scanning my servers to get an idea of obvious vulnerabilities and a baseline for hardening ssh. It's absolutely not a substitute for a security expert, but in about 10 minutes of setup you can get an idea of what action items you need to add to the top of your queue.
jwarren116 | 9 years ago | on: Eric Holder says Edward Snowden performed a 'public service'
I find Holder's remarks to be ironic. After Operation Fast and Furious [0], I would be tempted to say there's more blood on Holder's hands than on Snowden's hands.
[0] https://en.m.wikipedia.org/wiki/Operation_Fast_and_Furious
page 1