Show HN: Bypass CMS-DH Admin Security and Hijack a Dahua/Digimerge DVR https://ift.tt/2OdU4mv

Show HN: Bypass CMS-DH Admin Security and Hijack a Dahua/Digimerge DVR https://ift.tt/2ZZFIMc July 11, 2020 at 07:51AM

Comments

Post a Comment

Popular posts from this blog

Launch HN: Riot (YC W20) – Phishing training for your team https://ift.tt/2QIueZL

Launch HN: Riot (YC W20) – Phishing training for your team Ahoy Hacker News! I'm Ben, founder of Riot ( https://tryriot.com ), a tool that sends phishing emails to your team to get them ready for real attacks. It's like a fire drill, but for cybersecurity. Prior to Riot, I was the co-founder and CTO of a fintech company operating hundred of millions of euros of transactions every year. We were under attack continuously. I was doing an hour-long security training once a year, but was always curious if my team was really ready for an attack. In fact, it kept me up at night thinking we were spending a lot of money on protecting our app, but none on preparing the employees for social engineering. So I started a side project at that previous company to test this out. On the first run, 9% of all the employees got scammed. I was pissed, but it convinced me we needed a better way to train employees for cybersecurity attacks. This is what grew into Riot. For now we are only training for...
Read more

Launch HN: SuperTokens (YC S20) – Securely manage session tokens https://ift.tt/2YIHUb2

Launch HN: SuperTokens (YC S20) – Securely manage session tokens Hi everyone! My name is Advait and I co-founded SuperTokens along with @rishabhpoddar ( https://supertokens.io/ ). SuperTokens helps companies securely manage their session tokens, saving developer time and preventing identity theft. We started SuperTokens 1.5 years ago when we were building a consumer app and wanted our users to be logged in for a long time in a secure way. When it came to managing user sessions, there was a lot of ambiguity. We read many forums (Reddit, Stackoverflow) and blogs, and found that developers were arguing about best practices, such as using local storage vs cookies, implementing JWTs, etc. We had to do a lot of the first principles thinking ourselves to understand the tradeoffs. Around the same time, Facebook, Docker, Gitlab, Youtube, Uber were in the news for session vulnerabilities. Stealing a user’s session allows you to access their account as if you had their username and password. Henc...
Read more

Launch HN: Mighty Health (YC S19) – Health coaching for people over 50 https://ift.tt/2YcZBzE

Launch HN: Mighty Health (YC S19) – Health coaching for people over 50 Hey HN! We’re James, Felipe, and Bernard, founders of Mighty Health ( https://ift.tt/2NaIW9o ), a personal coach that helps people over 50 become healthier through exercise, nutrition, and wellness. With Father’s Day coming up, we thought some of you might be in the same position as we are, worrying about our parents and loved ones, wanting to do more to help out in these uncertain times. A few years ago, my dad was rushed to the hospital for emergency heart surgery. Though he luckily survived, this was quite the wakeup call—he had to change his lifestyle habits immediately, or else he’d have to deal with painful, worsening chronic issues for the rest of his life. These changes—exercise, nutrition, sleep, and reducing stress—are hard as is, but even more so for folks over 50. Most wellness apps are designed for motivated millennials, making them feel less relatable to older adults. They don’t take into account evolv...
Read more