The company blog of SecurityTrails, a DNS and domain data provider, with posts on domain discovery, exposed assets, and remote work.
HN links it for domain-intelligence posts and its job listings. One commenter is puzzled that it exposed a supposedly secret staging subdomain.
SecurityTrails | Sr. Backend Lead | Remote | https://SecurityTrails.com
We're looking for a lead engineer to take the reigns for the backend development team. As we've begun to quickly expand our team we need a lead for the application development side that can work with the data team, our prototyping team, sales engineering, and the principles of the organization to craft the way forward as the teams and demands grow.
You should be adept at taking the goals and turning them into tasks for the team, ensuring the output is inline with the long term roadmap and ensuring any hiccups or noise from new team members, or more junior engineers is effectively filtered out. You will take charge of ensuring the test coverage is sufficient, that the team is following processes you need to move the ball forward, and that tasks are correctly architected and validated.
Experience in a particular language or technology is not essential, but you should definitely get excited about building cutting edge big data security products.
Some of the technologies and tools that we currently use: Elixir, Go, Python, Scala, Elasticearch, Kafka, Spark, Beam, BigTable, BigQuery, Amazon Aurora, AWS, Azure, and GCP.
https://sthr.bamboohr.com/hiring/jobs
Contact: Theresa Loos <theresa.loos@securitytrails.com>
SecurityTrails.com| Senior Backend Developer| remote, full-time|https://securitytrails.com/corp/careers#openings | hello@securitytrails.com
We are looking for a Back-End Web Developer responsible proficient in elixir.
Your primary focus will be development of all server-side logic, definition and maintenance of the central database, and ensuring high performance and responsiveness to requests from the front-end. You will also be responsible for integrating the front-end elements built by your coworkers into the application. A basic understanding of front-end technologies is therefore necessary as well.
Your responsibilities:
- Integration of user-facing elements developed by a front-end developers with server side logic
- Building reusable code and libraries for future use
Optimization of the application for maximum speed and scalability
- Implementation of security and data protection
- Design and implementation of data storage solutions
Get an insight of our working remote culture here and find some more job postings!
IPinfo.io | Various Roles [Eng / Data / PM / BizDev / Growth / Sales] | Remote | Full-time or Part-time or Contract
I started https://ipinfo.io as a small side project 6 years ago, and it has since grown to now handling over 20 billion API requests a month, thousands of customers, is used by hundreds of thousands of developers. We're bootstrapped, profitable, and growing. Here's a recent interview where I talk a bit about the company: https://securitytrails.com/blog/ben-dowling-ipinfo
We're a small, remote team, with big ambitions. We're looking to add exceptional people to our team. If you're interested in IP address data and working on fun problems like VPN detection, active IP scanning and measurement, big data processing, scraping or helping us market and grow IPinfo then get in touch! Shoot me a mail describing your background, what you're exceptional at, and what impact you think you could have at IPinfo to ben@ipinfo.io
Excellent thinking! These are the SDKs to worry about. Next is, who do they ‘phone home’ to?
An easy way to find things is with a local proxy or DNS log, as your phone looks up things on behalf of apps. Which things are looked up by more than one app?
A few I noticed back in 2019:
iOS “User Linking” Trackers
[business].app.link
[business].onelink.me
[hash].ulink.adjust.com
[business].bttn.io
bnc.lt
branch.io
Then you can also see who is invoking them coming from the domain tree:
- https://securitytrails.com/list/apex_domain/app.link (2962)
- https://securitytrails.com/list/apex_domain/onelink.me (998)
- https://securitytrails.com/list/apex_domain/bttn.io (60)
Seems like related issue was in Aug 2022: https://news.ycombinator.com/item?id=32572906
and might be fixed:
We just deployed a workaround that brought our site back up.
1. Find your DNS Target in heroku. It should end with .herokudns.com
2. Lookup the historical DNS record to get the IP addresses. You can find historical DNS records here: https://securitytrails.com/dns-trails
3. Replace your CNAME record in your DNS provider with A records that point to the IP addresses you just found.
Your site should come back up shortly. We plan to revert back to CNAME records once Heroku gets their DNS issues sorted.
Related:
List of All Cybersecurity Conferences to Attend in 2021
https://securitytrails.com/blog/cybersecurity-conferences
52 of the Best Cybersecurity Conferences to Attend in 2021
https://securityscorecard.com/blog/best-cybersecurity-conferences-to-attend-in-2021
Top 38 US Cybersecurity Conferences to Participate in 2021
https://www.stealthlabs.com/news/top-38-us-cybersecurity-conferences-to-participate-in-2021/
Google Search For "List Of Cybersecurity Conferences"
https://www.google.com/search?q=list+of+cybersecurity+conferences