digital_sawzall

They did go through and are currently on-going. I though I read that Oracle has full source code access.

I purchased a Pixel 7a for work related testing a few weeks ago. It's a nice phone and rooting was very easy. I was impressed overall.

But those damn ads they deliver as notifications! WTF. Why would they do that.

It just reaffirmed my allegiance to Apple.

That is a complete middle class mindset. Jail is cool in the hood. I've done a few months for stupid stuff when I was young and it's not that bad.

People risk 10 years for robbing bands for a couple thousand. A guaranteed $10 million would have lines around the block for volunteers in the neighborhood I grew up in.

I would easily go to jail for 8 years for $50+ million. 25 years would not be worth it to me for any amount.

I am from El Paso, which is on the border with Mexico and grew up with many kids whose parents were smugglers and cartel affiliated.

I know several parents who went to jail for ~10 years while were were in elementary school, the kids never wanted for anything, and then when the parents got out and started capital intensive business.

One parent did 12 years and got out to start a a series of high end mexican restaurants, one started a steakhouse, one bought a small hotel, one started a commercial construction company.

It's all part of the game, just how startup founders grind for years for the money.

I'm 15+ years in security and just this week I needed to hit a few domains, find a script tag that imports JS from a certain CDN, parse and make sense of it.

After 20 minutes of telling ChatGPT exactly what I needed and a couple of test runs and optimizations, I had the perfect tool. 10 years ago this would have been a half to full day project.

I had a meeting with an entry level security engineer and he asked if I need him to do the task, as we were both in the meeting where it was being discussed.

I didn't even think to ask him! It was quicker and easier to do it myself.

This was the type of project I had been assigned dozens of times during my first job.

I don't know what that means for the future of work but it's changing fast.

As it says in the article, the employees were not given stock grants in 2023.

The core products of social media platforms are the advertising systems!

After telling the advertisers to go 'F themselves', those paying customers are leaving in droves plus the ad ecosystem is one of the worst in the industry.

The only alternative is to get enough paying users. Good luck.

>What percentage of the vulnerabilities discovered are independently discovered by multiple pen testers?

I'd warrant nearly all of them, though it may take a while.

If you have ever submitted or worked with a bug bounty program you will run into dozens of duplicates.

I've personally performed and overseen assessments in which the company had already done a complete blackbox pentest and wanted a second whitebox review to make sure the first company knew their stuff and validate they found the same bugs. Also did a few of the honeypot assessments in which companies put purposely vulnerable code in to make sure 'we are doing our job', I hate those most.

Depending on the testers speciality of course, the reports often found the same or similar issues.

Source: 15 years as a pentester, offensive security engineer, and now security architect.