artie_effim

I curious if they are in Common Criteria evaluation? Is there a target of evaluation available?

Isn't that brainf*ck?

This is most like the most important thing I haven't read.

Aside - this is good stuff, I find myself in this 'mode' all the time. I used to read 100+ books a year, now it is like 5. But, I read all the time ...

OMG - second only to http://isabevigodadead.com/

pretty bad - hack it together with docs and stack exchange really. I did manage to deploy an app with a django, nginx, gunicorn stack which doesn't crash, so there's that. But as far as good coding skills, I don't really have any - but I'm learning as I go. I also have full management support for this, which is nice, but very rare. I more so play around with pandas and matplotlib to get what I need - pretty much just a step above shell scripting.

Cyber pro here - 5 years doing IV&V testing, 15 years as Fed, State and Local contractor, now a firewall admin at a major U.S. uni. I got an NSA accredited (https://www.nsa.gov/resources/educators/centers-academic-exc...) Master's in IT with a specialization in security. While the degree got my foot in the door (I have a BA in Arts - but have been messing around with computers since the early 80's - plus a lot of self taught stuff) - I've found that a ton of side reading (anything related to the subject - I spent a lot of time on the RFCs - that stuff I use every day)), looking at PCAPs to understand the protocols and reading case studies are the best way to hone the craft.

For a while I was doing Governance, Risk and Compliance (GRC) work, but have always loved being a network security engineer, so I went back to that.

Also - I have a CISSP, which opens a lot of doors. I know that it is being knocked a bit nowadays, and there are certainly a some who are test knowledgeable but no hands-on, common sense experience. I still find it valuable enough to maintain.

Set up a lab - 2-4 computers and a switch should do (you could virtualize some/all of it) and work on all aspects of the TCP/IP stack if you're interested in netsec.

If appsec is your thing, spend a lot of time looking at good and bad code, plus reading on-line of good and bad appsec.

IF GRC is up your alley - read NIST 800-53, HIPPA, PCI-DSS, SANS Top 20 and GDPR - to understand the full breadth of controls and risk mitigation.

As far as data science python and pandas are all over the industry, R not so much. There is a big push for ML/AI work, but it might be snake-oil, time will tell. I use a lot of python and pandas for log and flow analysis.

Also - learn Linux CLI; grep, sed and awk can save your butt in most situations. Gray beard stuff will come later.

Good luck!

<edit - word choice>

Cambodia, Rwanda, China....

Doctors are next

sorry - aren't those all protocols and not applications?

So, everyone needs to take a deep breath here. In kernel VPN is giving me a bit of a security heart attack. As a security professional I would recommend not running this on anything but a sandbox that isn't connected to your environment. A single misstep in the code, a bad implementation of a crypto library or a bad hook could easily lead to ring 0 compromise.

Not trying to discount the author's work, and I haven't reviewed any of the documentation, but until this gets evaluated by a CC lab (or like independent group) I would not implement in anything you care about.

looks good, and is fast, but I won't use it unless I can import my opml

Yes - the classic Morbidity Rates of proto-Altaic ( Haplogroup O2b* (P49), Haplogroup D-M174) Due to Mechanically Generated Localized Atmospheric Disruption And Circulation study is a must read.

UNITS!!????!!!!

I guess I've never looked at an historical mathematical document pre-TeX. Kinda awesome with the handwritten symbols.

cnn

a what? do you think it is 1985?

I guess it is possible, but I don't have the personal time, to figure out the cost in jet fuel alone for these re-routes, not to mention lost time/productivity for passengers.

ok - that last line is my new email sig for the next 6 months. replacing "there's no problem so bad that you can't make it worse"

The rest of the stack. Spend some time with layers 3&4 and you won't regret it. It was the most boring class I has in school and I use it every day. Read this book: http://goo.gl/ZGifKa (Internetworking with TCP/IP Vol.1: Principles, Protocols, and Architecture (4th Edition)).

Knowing how TCP/IP works will give you an edge over other devs for understanding data movement and endear you to the IT/network/security folks (who do you favors).

oh goodie - someone remade IRC... I know it is a troll statement, but come on...

you might get out too!

my guess is the '1-2 days' for you to get your cash is how they are monetizing it. Sure, a poster above got $1 almost instantly, but as volume increases, 1-2 days in some form of investment vehicle will add up.

this is bad news, should get to front page.

you don't - you use an directory (LDAP, Active Directory) or AAA service (RADIUS,TACACS+) to manage that. There should never be a shared password. If it is a cloud shared service, same rules apply. You have to know who did what when, and with a shared PW you cannot. Even if all people have the same privileges, you gotta know who did what.

don't forget, it is actually a Secure Attention Key (SAK) - really awesome - I'll miss it when it's gone for good.

http://en.wikipedia.org/wiki/Secure_attention_key

begin flamewar in 5, 4, 3, 2, 1 ...

Seriously though, there are a number of historical posts about this (emacs vs vi being the oldest and best, almost as good as ninjas vs pirates, but I digress).

You should really list of all of your requirements and see if your editor of choice supports those requirements. That is the best solution, asking the internet for this, is like, well asking for someone's favorite editor. :D

Try to solve the problem of why you don't like your editor, rather than trying different editors to see if they 'fit'.

Me, I'm a vim man through and through, but it has everything I need to do my job. Find that, find zen!

OK - here's my input. I work at a 95K+ employee company, not much into the CS as more of an IT service provider - we do some coding, but not a lot. When I've been hiring, I would generally, cut at the first pass people who don't have degrees. It is more about the formal education process then the knowledge you get - shows me ambition and commitment.

Also - you've already jumped once in the past year, another red flag.

Put applications in at 10 companies you want to work for, and see if you make it to the interview.

If you want to advance your career, go to college.

You've already said it - you're a good coder, time to become a good developer. If you want to advance, it is not all about the coding.

You know, and this got me off the Facebook: "If you are not paying for it, you're not the customer; you're the product being sold."

I'll wager dollars to doughnuts that all those sites are selling user data to Madison Ave et al.

I was going to say a phishing site, but they both resolve to the same IP. So, I'm just guessing it is a read only mirror to placehold to stop phish.

dig news.ycombinator.org

; <<>> DiG 9.7.0-P1 <<>> news.ycombinator.org ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61061 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION: ;news.ycombinator.org. IN A

;; ANSWER SECTION: news.ycombinator.org. 1200 IN A 174.132.225.106

;; Query time: 41 msec ;; SERVER: REDACTED ;; WHEN: Fri Jun 1 11:06:20 2012 ;; MSG SIZE rcvd: 54

dig news.ycombinator.com

; <<>> DiG 9.7.0-P1 <<>> news.ycombinator.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6506 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION: ;news.ycombinator.com. IN A

;; ANSWER SECTION: news.ycombinator.com. 1200 IN A 174.132.225.106

;; Query time: 37 msec ;; SERVER: REDACTED ;; WHEN: Fri Jun 1 11:06:27 2012 ;; MSG SIZE rcvd: 54

obligatory "My god, it's full of stars"