Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
Watch out for these fucking bug bounty idiots.
Some time back I got an email from one shortly after making a website live. Didn't find anything major and just ran a simple tool that can suggest security improvements simply loading the landing page for the site.
Might be useful for some people but not so much for me.
It's the same kind of security tool you can search for, run it and it mostly just checks things like HTTP headers. A harmless surface test. Was nice, polite and didn't demand anything but linked to their profile where you can give them some rep on a system that gamifies security bug hunting.
It's rendering services without being asked like when someone washes your windscreen while stopped at traffic but no demands and no real harm done. Spammed.
I had another one recently though that was a total disgrace.
"I'm a web security Analyst. My Job is to do penetration testing in websites to make them secure."
"While testing your site I found some critical vulnerabilities (bugs) in your site which need to be mitigated."
"If you have a bug bounty program, kindly let me know where I should report those issues."
"Waiting for response."
It immediately stands out that this person is asking for pay before disclosing vulnerabilities but this ends up being stupid on so many other levels.
The second thing that stands out is that he says he's doing a penetration test. This is illegal in most major countries. Even attempting to penetrate a system without consent is illegal.
In many cases if it's trivial or safe no harm no foul but in this case I take a look at what he's sending and he's really trying to hack the site. Sending all kinds of junk data and sending things to try to inject that if they did get through could cause damage or provide sensitive data such as trying SQL injects to get user data.
It doesn't matter the intent it's breaking criminal law and when there's the potential for damages that's serious.
It cannot be understated how unprofessional this is. Irrespective of intent, being a self proclaimed "whitehat" or "ethical hacker" if they test this on a site and some of the commands they sent my way had worked then that would have been a data breach.
These weren't commands to see if something was possible, they were commands to extract data. If some random person from Pakistan extracts sensitive data then that's a breach that has to be reported and disclosed to users with the potential for fines and other consequences.
The sad thing is looking at the logs he's doing it all manually. Copying and pasting extremely specific snippets into all the input boxes of hacked with nothing to do with the stack in use. He can't get that many hits that way.4 -
horrible terrorist attack in Uri, Kashmir.
may the jawans rest in peace 🙏
enough is enough.
time for change ✊3 -
My dream project is something very simple but not yet done in Pakistan.
I want to create a marketplace for musical instruments and related equipment. Currently it's very hard for amateur musicians in Pakistan to find the gear they're looking for, and being one of these musicians myself, I know how frustrating it can be. So it'd be great if I can solve that problem in a country where the government does very little to help independent artists grow.1 -
Well another Satoshi Nakamoto reveal is here and he claims to be a Pakistani!
https://satoshinrh.com3 -
I don't think ranters here from first world countries (US/UK/Canada etc) realize what a big deal it is when companies from these countries hire South Asian companies (like India, Pakistan, Bangladesh) for their out-sourcing work.
I have seen some career building centers with people giving testimonials like "My mother tongue is Hindi and I was always afraid to talk to US/UK clients. But now that I took a course here, I can talk to them with confidence.".
People here throw themselves at these companies' feet begging for a contract. Gotta get that currency converted bag am I right?
I worked at a company and one day someone from London hired us for work and the boss threw a small party cuz "Someone from LONDON is hiring us omg".
Makes me wonder, this is why third world countries like us have such a good IT infrastructure.1 -
Me and my friend are trying to come up with a solution for locust problem..
I decided to make a locust detector using computer vision and he'll make a laser shooter.
Meanwhile in Pakistan they simply paid people to catch locusts and turned them to chicken food.
CS really messed up our ability to think simply.6 -
Have you noticed a change in the typical location of internet/phone scammers from West Africa to Pakistan? All the IRS scammers I've seen have been in Pakistan for example.
-
India vs Pakistan, ICC Champions trophy finals..Sunday..a perfect combo to skip coding for a day..but the way match is turning out is making this day a spoiler :(8
-
!tech
i am a fan of everything mcu but recent ms marvel feels so cringy and awkward as an Indian. the main actress is okay, but almost all of the casting is from non Indian/pakistani descent. thankfully those guys don't try to speak hindi/urdu otherwise i would have snorted while watching 😂. the blend of languages feels so weird i neither like their hindi nor English.
imo squid game like adaptation would have been better , having everyone from same descent and speaking the same language while having everything dubbed by professionals for other languages.
and what's with the colors? mann that's too much color for even the most colourful countries of the world.
and songs? wow. when i was growing up, the movies at that time had dialogues like "when you are in love , you hear background music" , but even those movies didn't had any background music so cringy as this.
also from what i know pakistani culture is way more punjabi than indian culture in general. but here , pwople are speaking perfect hindi even in a mosque!
makes me wonder how the world sees these 2 countries. every 5 minutes i felt that this is more Indian adaptation of a story than pakistan. they just blended the countries' culture brutally. i bet the conversation between director and scriptwriter must be like:
d :hi there
s : hello
d: so you have a movie for me
s : yes sir i do . it's called miss marvel
d : oh so it's about carol denvers? i thought that wasn't until 2024
s : no sir it's about a Pakistani girl with superpowers
d : oh okay. wait did you say Pakistani?
s : yes sir. a pakistani girl born in n-
d : yeh yeh yeh. listen we need to add lots of colors
s : why-?? ok sure sir.
d : and elephants. and borses. also , everyone must occasionally.
s : bur sie those are all the cuisines of an indian wedding . and why we want horses?
d: doesn't matter, i want horses.
s: buf s-? ok fine1
Top Tags
Weekly Rant
View