Details
-
Aboutinfosec nutter :)
-
Skillsmixture of backend, DevOps and DFIR
-
LocationLondon, UK
Joined devRant on 7/19/2017
Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
people who use a VPN to browse the internet because of privacy concerns but then sit in a house full of Alexa devices11
-
Saw this this morning lol. The best part is that it requires a knowledge of chess AND programming to get it.
Possibly a repost. I haven't been on DevRant in a while.6 -
Spammer just called me saying my windows computer was hacked and that I needed his assistance, I agreed and let him download free malware remover tool and other random shit, apparently the terminal commands were not working so he asked what version of Windows I was on, I said XP, and he continued and gave up on the terminal. tried to ruin whatever malware he put on the thing, finally he went to find what version I was running, and found out I was on Linux.6
-
!security
(Less a rant; more just annoyance)
The codebase at work has a public-facing admin login page. It isn't linked anywhere, so you must know the url to log in. It doesn't rate-limit you, or prevent attempts after `n` failures.
The passwords aren't stored in cleartext, thankfully. But reality isn't too much better: they're salted with an arbitrary string and MD5'd. The salt is pretty easy to guess. It's literally the company name + "Admin" 🙄
Admin passwords are also stored (hashed) in the seeds.rb file; fortunately on a private repo. (Depressingly, the database creds are stored in plain text in their own config file, but that's another project for another day.)
I'm going to rip out all of the authentication cruft and replace it with a proper bcrypt approach, temporary lockouts, rate limiting, and maybe with some clientside hashing, too, for added transport security.
But it's friday, so I must unfortunately wait. :<13 -
So... some guy at the company I work for complains to software dept that we've broken his app.
He's saying we've removed the drop down list from this field he uses....
We're all like... there's never been a drop down list there?!
it escalates and some big-dogs get involved. One of us has to go out and see him. Turns out the "drop down list" was his browsers saved autocomplete history, and he had changed browsers.
Asshole.2 -
"This is incredibly unprofessional. You need to give at least 2 weeks notice like any other company that you work for" - Hiring manager to me after I said I couldn't come in today to the office.
Background for y'all:
1. I did a 2-day interview process and I never received news from HR that I got hired
2. I followed up today with HR and only then did they tell me in WhatsApp "Oh well you're hired"
3. HR didn't go into details about the contract, I was the one who proactively asked about it and HR just said "Oh I will send you your contract tomorrow and all the details."
4. Ergo, no contract has been signed TODAY and I have not gone through it and above all, I haven't accepted the offer yet
I gave the company a notice 30 minutes after thinking this through and said I won't come in today and made up a story (that I accepted another offer but really come on that's already a red flag - asking somebody to come in without a signed contract hey I'm not working for free)
Hiring manager said the above plus "I understand there's no contract yet but we're short on the team now so you should be on the train to come here"
No. I'm not obliged to do a 2 weeks notice when I do not have any contract binding me to this. You should appreciate I gave a notice instead of not showing up. Please tell me how professional your company is when internally your hiring team doesn't communicate with the hiring manager and you don't know the hiring laws of the country???
Eh fuck it, it's a 1 hr 41 minutes commute anyway if I ever did accept their offer.8 -
I had a manager who was a complete incompetent idiot (other than a fucking backstabber). He left the company ~3 weeks ago, yet I believe it would take 5 years to get rid of his legacy.
Today I discovered that one of his "genius ideas" led to the loss of months of data. This is already bad, but it's even more upsetting given that the records that have been lost are exactly the ones I needed to prove the validity of my project.
That fucking man keeps fucking with me even when he's not here, YOU DAMN ASSHOLE!!6 -
Am i the only one that hates Google reCAPTCHA from the body down to the soul ?
- Click the Car
- The Blue Car
- The Truck
- The Truck Bus
- The Bus Truck
- With Blue Light
- Select the Bicycles
- Skip the house
- Find the sign
- With the blue bat
- Purple pink hat
- Click Traffic light
- We mean all Traffic lights
- Select Stores
- With Zebra Crossing
- ...
WTF!!! Just kill me already.11 -
Modern web development is fucked. Just absolutely, totally screwed up.
I want to create a simple to do list web app. Look for a tutorial: "OK guys, this is really easy, it just takes five minutes."
First step, install these:
- Git
- NPM
- NodeJS
- Express
- MongoDB
- Docker
- React
Second step, npm install about one million modules. Don't question what they do or why they're there.
Before you know it, six hours have passed and you've got a code base of 3GB and you haven't even _started_ on your app.
FUCK that shit! I can create this web app with Internet Explorer and Notepad.49 -
I've actually really enjoyed getting to interview people. Mostly because I'm given the freedom to ask reasonable questions. At this point, my favorite is asking fresh grads to come up with requirements to make their favorite portfolio bit production-ready.
I want a list of things you need to fix because they're duct tape and bubblegum, but a lot of people sit there with passwords in plaintext and suggest new features. -
So yet another follow up rant on the Linux job hunting! (yes hello this is @linuxxx).
Got send a list with questions (for candidate screening) and was literally mentally preparing to answer all the questions (I expected shit like Linux commands, kernel stuff etc etc).
Then I saw the questions. Mother of god.
1. Have you ever worked with a Linux distro and if yes, which one(s)?
😶. Uhm I expected some more difficult stuff.
2. Have you ever worked with a hosting interface like CPanel etc?
😶😶. Alright I should adjust my view on the difficulty level of these questions.
And so it went on and on. I think I make a pretty good chance 😆.
I'll hear more at Monday and if all is good then I will get an interview through Skype with their American office!10 -
"Oh, he is asking that much money for this website? I will create that for only $250 with WordPress. He is just trying to use you"
You fucking wanker. What you don't understand is that you are pushing the companies to a fucking black hole that they won't be able to recover from.
He shows an example of a website which takes 30 sec to load. It's full of hundreds of dreadful plugins. He chose the shittiest stock pictures to make it look "pretty".
When I point out his fucking shite website takes this long to load, he says if the company wants to make the website fast, they will need buy the premium plan of CloudFlare. WHAT THE FUCK are you even talking about?
Not only that, the example website, doesn't even have any SSL. He is saying that the other company didn't want to pay for the SSL. Ever heard of fucking StartSSL or LetsEncrypt?
It's people like you who is responsible for making half of the web an insecure, slow, low-performance space which is prone to hacking.
WordPress was made for blogging. KEEP IT THAT WAY. Stop trying to make your high-performance CMS or eCommerce website with this shite.20 -
TLDR; I am a piece of shit who writes no documentation or no information whatsoever when I am doing something.
Created a custom version of Windows for our company couple of months ago. Before leaving, I am supposed to pass this valuable information to another new developer.
Obviously, since it has been a long time I have worked on that, I have forgotten a lot of core principles. The process is also automated in Jenkins so never really had to touch it again.
Now that I am about to explain the process to the new recruit, I realised that I have written nothing about that process. No documentation, no information. The only thing I have is a bunch of scripts automating everything for me. WHY WHY do I do this to myself :(17 -
Even though I'm a web developer I work in a very small IT department, which includes just me and my colleague.
Yesterday we got a pretty usual request. Someone forgot the password to an excel file. We already started a brute force attack, but we had some fun going through the worst passwords we ever stubbled over in our carrier.
He was like:"Maybe it's just his name?"
Me: "Oooh or maybe it's just the brand and 123?"
We laughed a lot. Not really considering we could crack this "important" file.
But it really worked out. The password was the brand of the business unit and "2017".
I've sent everthing back to the user, telling him exactly how we cracked it... His answer was:"Oh yeah! I knew it was something easy, so me and x could remember it easily!"
...
Why do you forgive easy passwords anyway? If I can crack it within 5 minutes... Everyone can! ...
And if you do it to "remember it easily"? Why the fuck don't you remember it?4 -
Customer: ... and can you also disable right-click to prevent our website's content from being copied?
Me:13 -
Stolen from an awesome book but my new favourite line ;)
Someone: “Can you repair my computer, it`s not working anymore?”
Me: “Do you call Leonardo Dicaprio when your Tv is broken?”7 -
Disclaimer: kinda non dev related. Just working to pay the bills right now.
The other day I ran for the train to work, don't want to be fucking late, right?
Arrived and this guy asked me this: (I have a sweating/transpiration problem but I'm fully aware of that)
"hey man, ever heard of fucking showers or deodorant?!"
Yes, I was sweating my ass off and you could smell me but I can't FUCKING help that.
It was very embarrassing and humiliating to get that kinda comment in front of like 30 people but I just swallowed it and went to work.
After the first break, a woman from management came to me and pulled me aside. A few people had complained about how that guy from before said some pretty humiliating stuff to me and she said that the guy received a warning and was told to fucking learn to treat people with respect, regardless of their (health) issues/appearance. I also got an apology and a sorry and if I could keep my eyes open for such behaviour in the future.
I'm very glad that she apologized although it wasn't her fault because I know I've got this health issue and I can't do anything about it yet but it can MOTHERFUCKING hurt when someone talks shit about me when I smell and I CAN'T FUCKING HELP IT BECAUSE THIS IS THE WAY MY BODY WORKS TOO BADLY.
I felt protected and safe about my issue for the first time in my life.
Thanks management!14 -
Looking for a job as a deveoper be like:
Job title: car driver
Job requirements: professional skills in driving normal- and heavy-freight cars, buses and trucks, trolley buses, trams, subways, tractors, shovel diggers, contemporary light and heavy tanks currently in use by NATO countries.
Skills in rally and extreme driving are obligatory!
Formula-1 driving experience is a plus.
Knowledge and experience in repairing of piston and rotor/Wankel engines, automatic and manual transmissions, ignition systems, board computer, ABS, ABD, GPS and car-audio systems by world-known manufacturers - obligatory!
Experience with car-painting and tinsmith tasks is a plus.
The applicants must have certificates by BMW, General Motors and Bosch, but not older than two years.
Compensation: $15-$20/hour, depends on the interview result.
Education requirements: Bachelor's Degree of Engineering.41 -
I went to Paris for my first interview (that was 1989) for a job of Unix kernel developer. All dressed up. I step out of the elevator and see a young punk with scruffy hair and different colour shoes. I reckon he must be the pizza delivery guy. I ask him "dude, can you please point me to the CEO's office for interview". He said "sure, follow me man, I'll show you". We arrive at a desk, he sat down in the big chair and looks at me with a big smile and says "Ok dude, here we are. I am the CEO. Now let's see how good you are!"
I got the job. And 26 years latet, last week, amazing coincidence: I met him again at a trade show in Paris ... with the same coloured shoes. How cool is that!!!29