WelcomeShorty

80% of the effort is compliance, regulations and getting "holes plugged".

For one to be successful in corporate security, you better be good at PowerPoint and selling ideas / wishes.

Currently my role is managing a bug bounty program for a largish company. Getting a service on-boarded (explaining the benefits and expectations) is 40% of the work, agreeing with the service owner on the CVSS scoring 10%, getting a service fix a finding about 20% and the rest of the work is the cool stuff (validating findings, communicating with the hackers & setting a bounty).

So my "advice" to you would be, figure out what exactly you want to do "in Security". If you like to get your feet wet in the technical space, sign up to a Bug Bounty program and start searching. If you want to be administratively involved, by all means apply for any of the "looking for security officer / manager" job offerings.

We figured it would be better to train and guide them around the "search for pussy pictures" results than to let them grow up in a sheltered internet at home and get confronted with the "less desirable results" when connected to the open networks of friends & neighbours.

Unfortunate since there is soo much drama and progress missed.

Does not help that the "part 1" is missing from the link either.

"For every chipset without a [1] mark in the table above, I am looking for hardware:

if you have spare wifi hardware for PCI, pcmcia or cardbus and would be willing to donate it to a good home, please contact me privately (I am in germany, shipping from within europe and UK should be cheap)

if you have a link where to buy a cheap USB or PCIe wifi dongle with known chipset that is not marked [1] in above table, please also contact me privately"

Here's the list with all devices he'd be looking for:

Device at

----------------

atu usb

atw pci, cardbus

awi pcmicia

bwfm pci

bwi pci

ipw pci

iwi pci

iwn pci

malo pci

otus usb

ral pci, cardbus, usb

rsu usb

rum usb

upgt usb

ural usb

urtw usb

wi pci

wpi pci

zyd usb

Poor dialogs, poor acting, lots of technical bla bla makes hardly any sense.

The time I needed to be available as badly as most of you seem today, I carried at least 2 phones, from 2 different providers from 2 different countries and was instructed how to get where in case of a (comms) blackout.

Glad that's over for me, hope you guys are all well.

That is how like half the world are doing it.

The level of pain to reset the TPM password when 1% of your company forgets their password after each holiday / weekend drinking / password change on Friday / because they're late for a meeting is just too high.

Did you?

I do not know who needs inbound connections to all of their devices in a corporate network, nor at home, since we solved that shit long time ago.

0: https://github.com/zmap/zdns

There was a bar with beer on tap and whilst traveling with 300km/h, you would lean on the bar, standing, and enjoy the (for that time) incredible speed.

Never used it again, we enjoyed the freedom of the car too much.

I had a private contact within google's SRE team and spilled all the beans, ask where I should dump the information within google. The answer was as blunt as telling: no one would be interested since it would hurt their bottom line.

Tried to inform a couple of Googlies at different cons in the months following: as much as they liked the tricks we pulled to get in, as little did they want to bring the subject up in their teams.

Clicks are Google's Crack.

I hear this a lot, but always wonder why? You where happy with 14, got 15, so why feel like an idiot? If all you care about is the highest maximal rate, you will be job hopping forever, getting better at negotiations but will it make you feel less like an idiot?

EDIT: I never cared for how much my fellow employees made. I know what I "need" and when I accept a certain rate, I can only be proud of being able to bring home what I make.

Color me guilty! For me it started with cooking, that led to gardening, then hunting. Combine that with camping and here I am, part of a small group of very diverse people who like to spend time with as little modern conveniences as possible, as far away from modern life with the smallest possible food print.

We leave our homes with what we can carry, walk as far as we can, collect food en route and hide as good as we can.

If I would be a classic prepper, I would do this with the most important people in the world: my family, but I do not. It is just for fun and to meet different people and how to take care of each other without outside assistance. Challenging and suitable for everyone since you can do it for as long or short, as far or as close as your means allow you to.

No TV news, no moving pictures, just plain text.

I spend no more than about 15 / 30 minutes scanning / reading these sources in the morning and refrain from news for the next 23,5 hours.

It gives me enough input to be able to have water cooler exchanges without being agitated about issues I have absolutely no control over.

So if you are good in a field where there is demand, and you actually like doing negotiations & finding opportunities, doing your own bookkeeping and not forgetting your pension funds: go for it!

Even if you could not see / proof the one picture being the real one, their believe is rock solid that the original has higher (emotional) value.

The idea that the original hand, in the original moment, with the original intentions made one object and the not the other, is of paramount importance.

YMMV.

Image how easy it would be come to launder money with anonymous payments.

No one in their right mind thinks this scanning has not been abused by others.

But now that (you know) images are being scanned the world's ablaze.

It is still silly, proof me wrong.

HOW is this scanning different than what antivirus has been doing since like forever?

Whatever distro I used it is the same at one point in time: In order to run X-n, you need Y-n-1 but Y-n+1 is installed and needed by Z.

Next: sleep mode and or the not recovering from it.

Linux is GREAT for tinkering, love it on my single purpose Raspis, love a dedicated VM/Laptop with Kali. But I will never again switch away from my macOS that just works for the job I need to get done.

Your browser generates the fingerprint 133e933dd1dfea90 (from Cluster #8), which is seen in 17.13% of connections, making it ranked #2 by popularity.

And this after a reload:

Your browser generates the fingerprint 833fb25fb38a093b (from Cluster #8), which is seen in 4.11% of connections, making it ranked #5 by popularity.

macOS safari

Large companies / countries do not exist, they're made up out of small groups and picking the right group makes the difference between awesome and hell.

You will not find a large company with stellar players only.