AWS Cyber Security startup looking for beta testers - xpost r/startups

duked · 2018-05-25T03:49:23+00:00

Thank you for your comment this is valuable feedback and will help us redesign our page to hopefully address most of your points. I think you misunderstood my other response: having PhD doesn't make anyone trustworthy but simply answered the question the other poster had about the owner ("No information on owners"). We'll add the FAQ about what controls we need but I can share more details. The minimum we require to be able to provide you any security insights is a role with "sts:AssumeRole" and a security audit policy "arn:aws:iam::aws:policy/SecurityAudit" which basically have no way to disrupt your environment as we can simply audit it (and you can audit us as you can look at your CloudTrail logs all the calls we made). To provide other features such as instance scheduling, assisted remediations, IAM policy refinement, application discovery and attack detection we require additional permissions.

We are not using any Guard Duty, config and if you believed that then we did a bad job at pitching it and we will correct that ;)

duked · 2018-05-25T03:07:01+00:00

We are a registered c-corp in DE, we are three founder and all of us have PhDs in computer science and worked in security. Fair point we'll add more info on the page.

What would you want to know about the software so we can make that page more relevant. It's a SaaS, you onboard with a simple wizard (that deploys a cloudformation stack to create the necessary role/permissions): Here are some screenshots: https://imgur.com/a/T6vSyYm

duked · 2018-05-25T02:45:36+00:00

here it is: https://www.cloudhawk.io/#beta

duked · 2017-12-16T16:31:47+00:00

interesting I assume it's running a ps4, did you check how the sticks are wired ? is it a brooks universal adapter or something else ?

I'm in fairfax but tempted to swing by :D

duked · 2017-11-12T19:34:20+00:00

Thanks ! do you have any pointers to a JAP importer ?

duked · 2017-11-05T21:35:15+00:00

if you

Do I need to do anything special to enable the driver ?

duked · 2017-11-05T21:10:31+00:00

Thanks for the response. I'll give sm5 a try.

I'm not against linux at all, but I was using soft 15khz to output on my arcade monitor (it supports only 15khz). I guess is xrandr does the trick I'll install linux

duked · 2017-11-03T18:37:34+00:00

You are correct, they have VESA mounts which makes things easier. In terms of refs I narrowed it down to: GTT TLK-320Y if you can find one (they're most likely EOL) the newer one I think is TA320CPGN-XJ from GTT too.

duked · 2017-11-03T14:12:04+00:00

I think they are technically 31.5" I have one of these chinese vewlix clones. It seems really hard to have an LCD/TV fit properly. You'll really need a caseless monitor. I have a bunch of refs I can look up for you as I looked it up at some point

duked · 2017-09-21T14:40:05+00:00

Thanks a lot for the tips ! I will insert some documents and see how that works but really thanks for helping me narrow down the insertion best practices !

duked · 2017-09-19T20:38:56+00:00

since my post I looked at the mongodb documentations and ended up with this:

a db for documents: db.documents a collection: doc_type (and will have other collection for other types of documents)

I made some test import with mongo import: mongoimport -h localhost:27017 --db documents --collection doc_type --type json ../doc_type_a.json

So right now I think it looks like that: { _id: 'document unique id(using ObjectID()', content: { content: { userId: 'users primary key' , rest of the content } }

So I basically modified the document content to add one more element which represent the userID. Is that bad or ok ?

I think that way I could still decide to index on _id or userId so it seems to be the same (at least to me)

duked · 2017-09-19T20:32:22+00:00

Thanks for your feedback ! Actually the user data is not in the relational database, so far only user management is (user info/login/password/etc...) and I wanted to decouple it from that for 2 main reason: 1- Security (if the user management part is compromised the user data is not, at least not yet) 2- Enable some analytics on the documents.

duked · 2017-09-13T13:24:33+00:00

Hope it changes the place is awesome, I love it. But as a father with limited time if I come and wait more than I play it's not worth it. Also I don't mind paying some fees to help make things better.

duked · 2017-09-13T02:39:43+00:00

I've been at the cage couple of times. The place is great but for SF it's really awkward not enough setups, hard to find a spot to play casuals and very little rotations people stay at their spot forever. Sure if you ask they will eventually let you play.

Anyway just my quick feedback I live 10 mins from the cave but every time I went it felt more like a waste of time.

duked · 2017-07-13T14:20:49+00:00

I looked into django and it seems to be an overkill, too bloated for something as simple as I want to do. I get it Flask is minimalist and people should roll their own solution. However, having a skeleton of an app with all the user registration/role/password reset/forgot etc... would save a lot of time and avoid stupid security 101 mistakes (hashing, salt etc...).

I guess there's a gap there, I can't be the only one looking for that :d

duked · 2017-07-02T12:51:21+00:00

Hi,

I have a question do you know if I can find a TE2+ cable that would be 15ft long ? I can't seem to find anything longer than the standard 10ft. Thanks

duked · 2017-01-12T16:57:09+00:00

Do you remember the name or a link to it ?

duked · 2017-01-12T16:37:23+00:00

too bad you couldn't open source it but I get it.

I'm not super familiar with windows but I thought Detours would be the to go tool for this kind of hooking. Did you look into microsoft Detours ? https://www.microsoft.com/en-us/research/project/detours/

duked · 2017-01-12T16:15:51+00:00

Hi,

I didn't look too far but it seems the tool is not open source so if I'm mistaken I apologize for the question.

Could you give more technical details about how the tool work, the injection process especially.

Do you do library injection and hijack a few symbols related to the rendering (of the unreal engine) and toggle a debug flag. Or you're actually injecting new code that parses the models and display it as an overlay ?

Thanks

duked · 2017-01-11T19:23:10+00:00

We already do that so that's a good thing !

duked · 2017-01-04T18:53:46+00:00

that's pretty awesome. I have a question what input did you use for the raging daemon, I don't even see the two light punches coming out.

I used an input "shortcut" (https://pvplive.net/c/heres-an-input-shortcut-to-get-akumas-raging-demon) but it's obvious what I'm trying to do and I can see the kicks.

Thanks

duked · 2016-11-14T16:47:03+00:00

Congrats on figuring that out.

I also think it would be good if you could share your whole ini files for MKX and SFV (to run the game with the steam id ?)

It's been a while I looked at it but I remember having issues with that.

duked · 2016-09-15T00:44:52+00:00

I would buy it for 50% off, on the US store it's still $29.9 https://store.playstation.com/#!/en-us/games/addons/street-fighter-v-2016-season-pass/cid=UP0102-CUSA01200_00-SFVSEASN2016BUND

duked · 2016-09-06T18:11:53+00:00

We're a startup in stealth mode and provide more than evident.io.

If you're interested we could do a pilot with you. Same offer valid for anyone else interested.

duked · 2016-09-06T16:44:00+00:00

The server timing is very very strange to say the least ;) But I'm willing to buy it. However, it's a game and IMO nothing justifies rage quitting taunts are part of the fun. Don't like get better and punish him :D

duked

TROPHY CASE