b8

I have a x220 with an adjustable screen. I broke the screen and the battery can't hold a charge. The power button cover is messed up. No hard drive cover. Last I looked up the screen install was complicated and expensive. Probably take over $200 I paid on eBay for it. It has an unlocked bios though which I've read is rare.

This comment has been redacted by the United States Federal Bureau of Investigation.

Huh, I found this interesting, "Because the agents couldn’t bypass Malik’s password, they sent the phone to a forensics lab, which extracted all the phone’s data.", I wonder how they bypassed his password unless it wasn't fully encrypted. Well AFAIU my Pixel 6A is extractable even withe encryption and a long password via a cellebrite device now. Unsure if GrapheneOS would help prevent extraction.

Now for someone to figure out blocking FireTV OS

Thanks PG, and daang. HN got me my first real job in security.

Seeking: A full-time Security Analyst/Consultant position. I'm open to other opportunities that utilize my technical skills and experience.

Location: Louisiana

Remote: Yes, and/or on-site. I'm experienced with both.

Willing to relocate: Yes

Technologies: C++, C#, Python.

Résumé/CV: Full resume on request.

Email: mcorkern1@tulane.edu

GitHub: https://github.com/qf0

Misc: I have over two years of full-time security consulting and blue team experience at NCC Group and Black Lantern Security. Also, I have two 0days and received CVEs under my name and a company research blog post to go along with it.

I'm eligible for a security clearance and willing to do government work. Already passed a FSP once, but was denied agency specific suitability.

This reminds me of the 360 live stream camera by Microsoft Research which also died. Not many products made by Microsoft Research seems to ever be commercially fruitful.

Got to see this happen day by day on the Midwest Venture Partners Slack. There was another lawsuit Chappman and Tom did for laser based speed detection in Chicago.

It was just an example, but you can read the DCSA appeals page to find worse illegal stuff that has been adjudicated: https://doha.ogc.osd.mil/Industrial-Security-Program/Industr...

People often lie yeah. The polygraph has been proven to be pseudoscience and the tactic of we know you're lying about x to get you to spill the beans is common knowledge now.

Heres the DCSA clearance appeals page showing people getting or keeping their clearance from drugs and other issues: https://doha.ogc.osd.mil/Industrial-Security-Program/Industr...

I mean OPs post is whataboutism. What if the kid has skeletons in his closet or calling the kids randomers etc. The security clearance process is long and is a joke imo. DCSA often gives interim clearances after running a credit and criminal check with no red flags (including TS/SCI). Then they interview coworkers, boses and family members. They ask basic questions such as does x associate with criminals or illegal stuff, drink or do drugs etc. A lot of bad apples pass. The blog post is FUD imo.

I went thru the TS/SCI w/FSP for a 3 letter top tier agency and it was a joke. They interviewed my mom, sister, old coworkers/bosses and old teachers. Then just asked me normal questions. They asked my mom and boses normal questions too. It's nothing like in the movies/TV shows and plenty of bad apples get thru lol.

The former head of the DCSA and FBI NYC field office both got caught doing bad stuff. The process is broken and honestly isn't that good . It gets people who aren't committed out, but also makes tons of good candidates go with other jobs, because it takes at least 4 months to do. Mine was 9 months long + 3 months to get an offer initially.

Citation? They're not monitored or anything closer than normal cleared people.

Well, I mean China already pwned opm.gov and got SF-86 on all fed employees a few years ago. The FBI gives people who have clearances on how adversaries will attempt to get information and what to do. Mainly it's just alerting the employers security office, and former feds get an email to reach out to for questions/concerns post employment. The security clearance process is broken and mostly BS. The head of DCSA and the FBI NYC office got caught doing illegal stuff which the process is suppose to detect.

Also, it's better to go to jail or quit for blackmail then to comply with blackmail, because it caries worst sentences and doesn't have a statue of limitations. Many people with clearances have bad backgrounds and just being honest is all they're looking for in the process. My friend and I even admitted to a bunch of CFAA felonies and was never charged. My friend got a TS/SCI with hacking within the past year of his BI.

People get clearances even if they've used hardcore drugs such as cocaine and various more serious crimes than computer crimes. The adjudication guides for clearances explain this in more detail. I have a friend who exploited RCE full-chain exploits on productions servers and used to DDoS. He got a TS/SCI clearance no problem and didn't even finish college. I interviewed too and admitted to that stuff. They cared more about me admitting to cheating in math at college lol.

Many former hackers have been hired by the government with TS clearances and it's ridiculous to compare teenage hacker groups to violent street gangs. I told an agency of previous hacking stuff and they were more concerned with me admitting to cheating on a math test at college lol.

I got to talk to him once and he's a nice guy. Cool of him to go on Lex Fridman's podcast too.

Not surprising as the UK wants to ban E2EE too.

Yep, Cellebrite is popular among LE and my phone (a new Pixel) is able is be extracted. Even if I install a privacy OS such as GrapheneOS, I don't think it would help. The Librem phone looks nice, but it costs a lot and the camera/specs are bad.

Proton has complied with legal orders and implemented JS to target a user. Mullvad is nice.

I meant price wise. VTI is almost $300 per share.

I switched from VTI to ITOT, because Vanguard's actions recently have been drifting away from it's founders. This inspires confidence, but I'm still wary. VTI is too expensive compared to ITOT. Fidelity doesn't have any ETFs listed on the Bogleheads website either [0].

0. https://www.bogleheads.org/wiki/Three-fund_portfolio

Seeking work, Louisiana and remote is alright. I can travel if expenses are paid and anywhere within the US (or possibly overseas).

Penetration tester that has consulted for FAANGs via NCC Group and I've worked directly for EA and IBM doing programming/security related work.

I'm very interested in video game anti-cheat consulting (threat intel etc.) or web application penetration tests. Also, I've found two 0days before and I've published my research, https://blog.blacklanternsecurity.com/p/cve-2023-3433-and-cv...!

Seeking: A full-time Security Analyst/Consultant position. I'm open to other opportunities that utilize my technical skills and experience.

Location: Louisiana

Remote: Yes, and/or on-site. I'm experienced with both.

Willing to relocate: Yes

Technologies: C++, C#, Python.

Résumé/CV: Full resume on request.

Email: mcorkern1@tulane.edu

GitHub: https://github.com/qf0

Misc: I have over two years of full-time security consulting and blue team experience at NCC Group and Black Lantern Security. Also, I have two 0days and received CVEs under my name and a company research blog post to go along with it.

I'm eligible for a security clearance and willing to do government work. Already passed a FSP once, but was denied agency specific suitability.

Cox only allows their whitelisted routers. Otherwise, I would use a Nokia Modem/router combo. ATT may be installing fiber soonTM.

They replaced their website with just their PGP key and email address too.

ZDI pays lump sums AFAIU.

Zerodium and similar 0day sweatshops pays a lot for these 0days. Bug bounty programs directly thru the companies have been documented to screw over researchers.

Well that's good, but they haven't even installed GFiber in cities they're in right now such as Omaha and Chicago etc. It's surprising how many places still don't have Fiber, and you can check your area with FCC's website: https://broadbandmap.fcc.gov/home

Ok? The Google lawsuit and promising lawsuit of the Open library probably will result in a W for Meta. Torrenting is obviously the best way to grab lots of data to train on. Just because they seeded (torrent clients automatically do this) doesn't mean they actually uploaded anything if they couldn't connect to a peer or manually paused/stoped the torrent. Also the author slants the story against Meta and has a bias. At least I felt that way when reading it.