201 karma · joined March 16, 2021
Ah, I didn’t know/notice any of that, probably because my use case is the absolute minimum:
A project, a few columns, tickets and an assignee field is all I’m using.
I understand most use cases are more complex than mine though.
The attack, the explanation, the webpage, the writing.
It’s an easy 10.
Huge thanks for writing your whole thought process, including things that you tried and didn’t work.
I’m going to use this post as an example for how a great writeup should be done.
Location: Canada (Toronto)
Remote: Yes
Willing to relocate: No
Technologies: Go, Python, Nodejs, AWS, Azure, Linux
Email: hnappsec@gmail.com
Certs: OSWE, and CISSP
I’m very technical and hands-on, love to dive deep into the code and come up with ways to bypass controls and security mechanisms.
Have 12 years in cyber security, deep knowledge of attack methods, and defenses including tradeoffs.
I also have experience in detection engineering, red and blue teaming and incident response.
On the technical side, I’ve done deep dive in complex code bases and have found lots of vulnerabilities - many of them high and critical, have written detections that ran across thousands of customers and caught some of the famous APTs days before their news became public, also wrote a tool that won SANS Award for tool of the year.
On the leadership side, I’ve built teams and processes from the ground up, onboarded engineering teams to new security practices with minimal friction, managed vulnerabilities at scale, launched security champion programs etc.
P.S: I do work with code (reading, writing and breaking it), but I’m not a software engineer.
Hope it helps
https://www.blackmagicdesign.com/ca/products/davinciresolve
There's a paid version too, but I doubt anyone who's not making REAL money from editing ever needs it.
Thanks for the correction, it seems like I can't edit my comment anymore to add an apology and an update, so I'll do it here.
I didn't see an onboarding form on the website, and the email came exactly 56 minutes later. I'll fill in the intake form to see how it goes. And I do apologize for my rushed comment.
As a suggestion (not an excuse for rushed judgment) maybe change the UX to make it easier to onboard?
Points for the xkcd too - hurt good and true lol
And they offer no refund.
I wasted money so you don't have to lol
I was thinking more along the lines of breaking out of process/site isolation or sandboxing - but yeah, you're making a good point.
It's not like "include a script in a page, then execute arbitrary js on any tabs of anyone who visits that page".
That would've been a CVSS 10.
Also, don't listen to those who say things like "soo, like Burp?" (the ones who do it to belittle the effort).
People used to say (and still do) Postman is "just a wrapper around curl", and I was like, "So is Operating systems, they're a wrapper around hardware, and C is a wrapper around assembly, and Python is a wrapper around "I don't want to manage memory, let's make a web app instead", What's your point?" lol Postman is now worth couple of billions btw.
You're doing a great job - keep at it. Ping me if you needed testers (I work in AppSec/Red teaming).
"The Man Who Folded Himself" by David Gerrold A fascinating exploration of time travel, despite its poor writing quality, according to the commenter.
"Dreaming: A Very Short Introduction" by J. Allan Hobson A hard science neurophysiological overview of dreaming.
"Material World" by Ed Conway A detailed look into basic minerals like sand, salt, oil, their supply chains, and the process of converting ores to materials.
"Blindsight" and "Echopraxia" by Peter Watts Sci-fi novels that deal with themes of consciousness and first contact with alien intelligence.
"The Sunken Land Begins to Rise Again" by M. John Harrison Noted for beautiful writing and vivid descriptions.
"The Thursday Murder Club" by Richard Osman A light and amusing mystery novel; the beginning of a series.
"The Roman Empire in Crisis" by Paul N. Pearson A detailed account of the Crisis of the Third Century in Rome, incorporating recent archaeological discoveries.
"The Good Virus" by Tom Ireland Introduces phages and their pivotal role in advancing human health through phage therapy.
"Nudge: Improving Decisions About Health, Wealth, and Happiness" by Richard H. Thaler A book about behavioral economics that suggests ways policies can be designed to "nudge" people into making better decisions.
"Blindsight" by Peter Watts A sci-fi novel that offers a less "anthropomorphic" first contact experience.
"Open Borders" by SMBC guy A book that presents an argument in favor of more open immigration policies.
"Snow Crash" and "Neuromancer" Classic cyberpunk novels, recommended for annual re-reading by the commenter.
"The God Engines" by John Scalzi A novella that is described as a sci-fi fantasy religious tale of space travel and manifested gods. Culture Series by Iain M. Banks A series of space opera novels set in a post-scarcity society.
"Art & Fear - Observations on the Perils (and Rewards) of Artmaking" by David Bayles & Ted Orland A book about human nature and creativity.
"The Case for God" by Karen Armstrong A book about the history of religion and how much is misunderstood in modern times.
"Years of Lyndon Johnson" by Robert Caro A detailed and well-researched biography of U.S. President Lyndon B. Johnson.
"The Captured Economy" by Lindsey and Teles "American Revolutions" by Alan Taylor "Everything Flows" by Vasili Grossman "Silk Roads" by Peter Frankopan A history of the world from a Central Asian perspective.
"Too Perfect: When Being in Control Gets Out of Control" by Allan Mallinger "The E-Myth Revisited" by Michael E. Gerber A book about why most small businesses don't work and what to do about it.
"Prisoners of Geography" by Tim Marshall An exploration of how borders and geography shape nations.
"Impro" by Keith Johnston A book with unique and radical views about how society functions.
"Peter Singer's books" Noted as being worldview-changing, but specific titles aren't listed.
"Two Years Before The Mast" by Richard Henry Dana An account of the cattle hide trade along the California coast in the 1830s.
"Empire of the Summer Moon" A book about the Comanche tribe and their conflict with settlers in the American West.
"Dune" by Frank Herbert A classic science fiction novel about politics, religion, and ecology on a desert planet.
"God, Human, Animal Machine" by Meghan O’Gieblyn Traces parallels between Christian theology and transhumanism.
"The Water Knife" A dystopian future novel set against a backdrop of water scarcity in the western United States.
> Python's use of reference counting defeated copy-on-write because even memory blocks holding variables that were read-only were actually written to in order to manipulate the reference counts, thereby blowing up the combined physical memory footprint of the workers. We solved this by smurfing the interpreter to use a magic reference count number for all variables that were created by the master process and inherited by the workers, and then not touching reference counts that had the magic value.
Thanks
Doesn't offer mail hosting though, you can only receive emails.
I _think_ you can use Gmail's "Send email as" to send emails, but it will expose your actual email address in the headers.
Many of Microsoft POC exploits that come out after an update are made this way.