Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API

From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
Search - "open a credit card they said"
-
I’m LOLing at the audacity of one of our vendors.
We contract with a vendor to build and maintain a website. Our network security team noticed there was a security breach of the vendor’s website. Our team saw that malicious users gained access to our Google Search console by completing a challenge that was issued to the vendor’s site.
At first, the vendor tried to convince us that their site wasn’t comprised and it was the Google search Console that was compromised. Nah dude. Our Search Console got compromised via the website you maintain for us. Luckily our network team was able to remove the malicious users from our search console.
That vendor site accepts credit card payments and displays the user’s contact info like address, email, and phone. The vendor uses keys that are tied to our payment gateway. So now my employer is demanding a full incident report from the vendor because their dropping the ball could have compromised our users’ data and we might be responsible for PCI issues.
And the vendor tried to shit on us even more. The vendor also generates vanity urls for our users. My employer decided to temporarily redirect users to our main site (non vendor) because users already received those links and in order to not lose revenue. The vendor’s solution is to build a service that will redirect their vanity urls to our main site. And they wanted to charge us $5000 usd for this. We already pay them $1000 a month already.
WTAF we are not stupid. Our network service team said we could make the argument that they do this without extra charge because it falls in the scope of our contract with them. Our network team also said that we could terminate the contract because the security breach means they didn’t render the service they were contracted to do. Guess it’s time for us to get our lawyer’s take on this.
So now it looks like my stakeholders want me to rebuild all of this in house. I already have a lot on my plate, but I’m going to be open to their requests because we are still in the debrief phase.2 -
unfortunately, iCloud's "hide my mail" available for as low as $1.19/mo is the best email aliases service. Why? Because those addresses have no discernible pattern, and, most importantly, end with @icloud-dot-com.
a lot of services nowadays think aliases are for scammers, so they reject well-known alias domains like those proton has. but no one rejects icloud ones.
they can't wrap their head around that people like me use aliases, one alias per service, to have control over the spam you send us. unsubscribe buttons in emails often don't work, or unsubscribe you from some super-niche "segment" that one email belonged to, but because you bitches have a lot of those segments, you just carry on spamming.
major dicks that aren't concerned with email deliverability rating, like microsoft — because their emails get delivered no matter what, they're microsoft after all — think they can just not allow people to unsubscribe from their spam. when I needed to create a ms account, thank god I used an alias. I got bombarded with their spam, and lo and behold, not a single email had an unsubscribe button. Instead, the bottom of each email said "this email is a part of mandatory onboarding" or some shit like that, despite just being advertisement. no option to unsubscribe from that bs in their "dashboard" either.
so I just disabled that alias. despite what all of you stupid fucks want, it's my computer, and on it, the computing happens on my terms. when I need a confirmation email, I enable the alias, get the email and then disable it.
I have no mics and no cameras. I pay cash. I don't borrow money from banks. I don't have a credit card. when I receive crypto, I exchange it for cash directly in a physical crypto exchange that doesn't require my passport. I have headphones with built-in mic that I use exclusively for calls, but when I plug them out, no mic for ya. my next phone won't have a sim (and no eSIM either), I will disassemble it and take the front-facing cam, as well as mics, out of the phone, and then cover the back camera with velcro that I'll undo every time I need to take a pic. it will also run graphene os and be held inside a faraday cage when not in use. I have a separate dumb phone for calls that has its removable battery disconnected at all times when I don't use it. no matter if you're corpo or government, no matter all zero-days and backdoors, if there is physically no mic and no cam to be found, trying to access them is futile.
no use trying to profile me or get any kind of info from me unless I want you to — I'll just strangle you and your systems. my info sphere is a fortress surrounded by a bottomless tarpit. you'll drown in it should you try to violate me. if you so much as touch it, it will suck you in. I'll stream your drowning on youtube.
even irl, I try to dress, walk and move as weirdly as possible. during my morning walk, I be straight up walk as if I was rabid. when our eyes meet, I'll smile creepily, just to communicate that don't fucking touch me you fucking degenerate. don't even think about talking to me. just walk away you bitch before I pin you to the ground and bite your ear off. if you're bigger than me, you'll just get tased.
only those I trust deserve open, kind, validating, beautiful, well dressed and good smelling kiki.7