Show HN: Ngnr.club – A link-in-bio service for engineers (opens in new tab)

(ngnr.club)

25 pointszabana2y ago45 comments

45 comments

39 comments · 16 top-level

jzig2y ago· 4 in thread

Hey zabana, it looks like one of your endpoints is leaking password hashes that might be undesired?

POST https://cognito-idp.us-east-1.amazonaws.com/

Response:

``` { "ChallengeName": "PASSWORD_VERIFIER", "ChallengeParameters": { "SALT": "*", "SECRET_BLOCK": "*", "USER_ID_FOR_SRP": "*", "USERNAME": "*", "SRP_B": "**" } } ```

throwoutway2y ago

SRP (Secure Remote Password) does not store password in hashes, but rather uses a zero knowledge proof https://en.wikipedia.org/wiki/Secure_Remote_Password_protoco...

Without making the same post call, I thinnk you are seeing the challenge codes for the proofing

zabanaOP2y ago

I wasn't aware of this. Thank you for the clarification. That's another rabbit hole I will soon lose myself into ^^

jzig2y ago

It still contains SALT and SECRET_BLOCK?

zabanaOP2y ago

Oh ! Will investigate and fix ASAP.

Thanks for the help !

zabanaOP2y ago· 4 in thread

Hey everyone, thanks for checking out the site and for signing up.

It seems that AWS cognito verification emails are subject to a daily limit of 50.

Your accounts are indeed created, but the confirmation emails containing the code are not being sent.

I'm working on fixing this issue as I'm writing this.

Thanks for your understanding.

zabanaOP2y ago

Update number 2:

All users who have encountered issues signing up should receive an e-mail soon informing them that their account is verified and active.

zabanaOP2y ago

The issue is fixed now (hopefully).

If you are able to sign up without issues, could you please confirm in this thread ?

Thanks

jzig2y ago

CodeDeliveryFailureException

Cognito received the following error from Amazon SES when attempting to send email: Email address is not verified. The following identities failed the check in region US-EAST-1: name@domain.com"

I don't have an email though.

Attempting to register again yields UsernameExistsException.

1 more reply

slaaen2y ago

Was able to sign up without issues.

coolspot2y ago· 3 in thread

Sup, ngnr?

The name doesn’t roll of a tongue, IMO.

vvilliamperez2y ago

Took me a bit to understand at first, but now I read it as `engineer`

zabanaOP2y ago

yeah that's exactly how it's pronounced :)

1 more reply

mike_hock2y ago

It does if you pronounce it "sup, ngna."

user-2y ago· 2 in thread

Heh, seems like you hit your limits. I was trying to secure my own name and kept getting generic error occured.

then i opened up the dev tools and saw

index-01401dc0.js:124 Exceeded daily email limit for the operation or the account. If a higher limit is required, please configure your user pool to use your own Amazon SES configuration for sending email.

Nezteb2y ago

Same, and then trying to sign up again gives "User already exists". Trying to sign in then gives "User is not confirmed". :D

zabanaOP2y ago

Ouuhh ! Nice catch ! Thanks for the heads up. Will fix ASAP.

1000thVisitor2y ago· 1 in thread

What kind of engineers? Anime engineers?

zabanaOP2y ago

We're very inclusive haha

Truth is, I had to get creative otherwise the site would've looked bland.

jeffstephens2y ago· 1 in thread

I really like the simple UI and focus on projects/blogs. Cool site!

I think I found a bug, though - it seems like when I save on the "social media" page, it blows away data from the others. I was able to do this twice and it cleared out my name, location, and bio. Hope that helps!

zabanaOP2y ago

Thanks for the feedback !

I'll look into that and come up with a fix ASAP.

Glad you like it !

grepLeigh2y ago· 1 in thread

Congrats on the launch!

I've seen this UI style become more popular, and I'm wondering if there's a name for it? E.g. "material design" is immediately recognizable, and I'm curious if this style comes from a similar UI framework.

zabanaOP2y ago

Hey thanks for the kind message !

For this project I did everything from scratch but I used inspiration from a few things I saw on codepen and dribbble.

I'm not a designer that's why there's gifs everywhere haha

lugia_2y ago· 1 in thread

Seems like registration is kill for now. Hoping to register when it's back online :)

EDIT - cannot use a proton.me email apparently? Email address is not verified. The following identities failed the check in region US-EAST-1:

zabanaOP2y ago

Yeah I've updated the Cognito User Pool configuration to use SES for emails instead of the default cognito sender.

If you try again now, you should be able to sign up no problem !

Cheers :)

dylanz2y ago· 1 in thread

$ User already exists

...

$ Cognito received the following error from Amazon SES when attempting to send email: Email address is not verified. The following identities failed the check in region US-EAST-1: <my gmail address>

zabanaOP2y ago

I've just confirmed your account (@dylan)

Thanks for your patience !

FredPret2y ago· 1 in thread

The name immediately looked like "engineer club" to me. But it refused to take my password, and not in a fun way like that password game the other day

zabanaOP2y ago

It may be failing the validation on AWS cognito's side.

Added to the todo list.

Thanks for the feedback !

jestums2y ago· 1 in thread

Would like to try it but yeah hitting your limit still.

zabanaOP2y ago

Your account is now confirmed ! (@jest)

pcan772y ago· 1 in thread

the name... cmon.

zabanaOP2y ago

I know, I know ... ^^'

apsurd2y ago· 1 in thread

eng.surf is available

(coming up with domain names is the best part of coding!)

zabanaOP2y ago

How did I not think of this haha

sergiotapia2y ago· 1 in thread

fwiw unfortunate name...

zabanaOP2y ago

I know.

I realised it after the fact but then it kind of grew on me so I decided to keep it.

Thanks for the feedback !

Much appreciated.

ymc92y ago

Cool name and nice looking site! Looking forward for the signup to recover.

tarboreus2y ago

Cool but couldn't sign up. @patrick, used a masked fastmail address.

j / k navigate · click thread line to collapse

45 comments

39 comments · 16 top-level

jzig2y ago· 4 in thread

Hey zabana, it looks like one of your endpoints is leaking password hashes that might be undesired?

POST https://cognito-idp.us-east-1.amazonaws.com/

Response:

``` { "ChallengeName": "PASSWORD_VERIFIER", "ChallengeParameters": { "SALT": "*", "SECRET_BLOCK": "*", "USER_ID_FOR_SRP": "*", "USERNAME": "*", "SRP_B": "**" } } ```

throwoutway2y ago

SRP (Secure Remote Password) does not store password in hashes, but rather uses a zero knowledge proof https://en.wikipedia.org/wiki/Secure_Remote_Password_protoco...

Without making the same post call, I thinnk you are seeing the challenge codes for the proofing

zabanaOP2y ago

I wasn't aware of this. Thank you for the clarification. That's another rabbit hole I will soon lose myself into ^^

jzig2y ago

It still contains SALT and SECRET_BLOCK?

zabanaOP2y ago

Oh ! Will investigate and fix ASAP.

Thanks for the help !

zabanaOP2y ago· 4 in thread

Hey everyone, thanks for checking out the site and for signing up.

It seems that AWS cognito verification emails are subject to a daily limit of 50.

Your accounts are indeed created, but the confirmation emails containing the code are not being sent.

I'm working on fixing this issue as I'm writing this.

Thanks for your understanding.

zabanaOP2y ago

Update number 2:

All users who have encountered issues signing up should receive an e-mail soon informing them that their account is verified and active.

zabanaOP2y ago

The issue is fixed now (hopefully).

If you are able to sign up without issues, could you please confirm in this thread ?

Thanks

jzig2y ago

CodeDeliveryFailureException

Cognito received the following error from Amazon SES when attempting to send email: Email address is not verified. The following identities failed the check in region US-EAST-1: name@domain.com"

I don't have an email though.

Attempting to register again yields UsernameExistsException.

1 more reply

slaaen2y ago

Was able to sign up without issues.

coolspot2y ago· 3 in thread

Sup, ngnr?

The name doesn’t roll of a tongue, IMO.

vvilliamperez2y ago

Took me a bit to understand at first, but now I read it as `engineer`

zabanaOP2y ago

yeah that's exactly how it's pronounced :)

1 more reply

mike_hock2y ago

It does if you pronounce it "sup, ngna."

user-2y ago· 2 in thread

Heh, seems like you hit your limits. I was trying to secure my own name and kept getting generic error occured.

then i opened up the dev tools and saw

Nezteb2y ago

Same, and then trying to sign up again gives "User already exists". Trying to sign in then gives "User is not confirmed". :D

zabanaOP2y ago

Ouuhh ! Nice catch ! Thanks for the heads up. Will fix ASAP.

1000thVisitor2y ago· 1 in thread

What kind of engineers? Anime engineers?

zabanaOP2y ago

We're very inclusive haha

Truth is, I had to get creative otherwise the site would've looked bland.

jeffstephens2y ago· 1 in thread

I really like the simple UI and focus on projects/blogs. Cool site!

zabanaOP2y ago

Thanks for the feedback !

I'll look into that and come up with a fix ASAP.

Glad you like it !

grepLeigh2y ago· 1 in thread

Congrats on the launch!

zabanaOP2y ago

Hey thanks for the kind message !

For this project I did everything from scratch but I used inspiration from a few things I saw on codepen and dribbble.

I'm not a designer that's why there's gifs everywhere haha

lugia_2y ago· 1 in thread

Seems like registration is kill for now. Hoping to register when it's back online :)

EDIT - cannot use a proton.me email apparently? Email address is not verified. The following identities failed the check in region US-EAST-1:

zabanaOP2y ago

Yeah I've updated the Cognito User Pool configuration to use SES for emails instead of the default cognito sender.

If you try again now, you should be able to sign up no problem !

Cheers :)

dylanz2y ago· 1 in thread

$ User already exists

...

$ Cognito received the following error from Amazon SES when attempting to send email: Email address is not verified. The following identities failed the check in region US-EAST-1: <my gmail address>

zabanaOP2y ago

I've just confirmed your account (@dylan)

Thanks for your patience !

FredPret2y ago· 1 in thread

The name immediately looked like "engineer club" to me. But it refused to take my password, and not in a fun way like that password game the other day

zabanaOP2y ago

It may be failing the validation on AWS cognito's side.

Added to the todo list.

Thanks for the feedback !

jestums2y ago· 1 in thread

Would like to try it but yeah hitting your limit still.

zabanaOP2y ago

Your account is now confirmed ! (@jest)

pcan772y ago· 1 in thread

the name... cmon.

zabanaOP2y ago

I know, I know ... ^^'

apsurd2y ago· 1 in thread

eng.surf is available

(coming up with domain names is the best part of coding!)

zabanaOP2y ago

How did I not think of this haha

sergiotapia2y ago· 1 in thread

fwiw unfortunate name...

zabanaOP2y ago

I know.

I realised it after the fact but then it kind of grew on me so I decided to keep it.

Thanks for the feedback !

Much appreciated.

ymc92y ago

Cool name and nice looking site! Looking forward for the signup to recover.

tarboreus2y ago

Cool but couldn't sign up. @patrick, used a masked fastmail address.

j / k navigate · click thread line to collapse