eswat

Look for courses/certifications that don't need to be renewed but are still highly recognized, like stuff from Offensive Security (though they don't have anything mobile specific).

AWS has entered the chat.

I have a Ledger as a backup key. Keyword is backup since it's less convenient to use than a Yubikey due to needing to put in a pincode first. Though that could be a security feature in and of itself.

I remember a sushi restaurant near my had purchased stacks of tablets, hoping them + digital menu would replace their paper menus. This was long before the pandemic.

I’m not sure of the specific reason, but they ditched those tablets a few months later.

It's pretty common for scammers to use old, compromised accounts. They are likely less to be scrutinized than new accounts.

RegisterFly, back in the day…

There’s a bunch of reuploads on YouTube: https://www.youtube.com/watch?v=YHLU0Uej1WA

This site needs translations for the intended audience. Looking at you Japan, South Korea, et al.

> users had to re-add 2FA

And you are not asked to do this while logging in again. It is assumed you know why you have to reauthenticate and that you have to re-add 2FA in your app settings…

Rewind | Multiple Engineering, DevOps, Security Roles | Remote Canada or Europe | Full-Time

Rewind backs up and restores critical business data stored in SaaS platforms you are likely familiar with, such as GitHub, Shopify and QuickBooks Online. We've raised $80M between our Series A and B rounds this year to help us cover more platforms with our solution and protect more businesses.

Our tech stack includes Ruby on Rails, TypeScript, React, Postgres and AWS. We are remote-friendly and adopting an asynchronous work culture as we look to hire more in Europe (our HQ is in Ottawa, Canada).

We have many open roles in our R&D team, including non-IC roles. Go check them out: https://rewind.com/careers/

+1. I’m not sure with the OP's familiarly with writing secure code and passing down knowledge to others but there's a def gap in general here.

If WEB-300 is too hardcore, the exam is 48 hours and not including the report writing, the new WEB-200 is at least a good start.

Depends on which “Web3” community you're talking to: ethereum, dApps, wallets etc. vs scuttlebutt, dat, urbit, etc.

Rewind | Multiple Engineering, DevOps Roles | Remote Canada or Europe | Full-Time

Rewind backs up and restores critical business data stored in SaaS platforms you are likely familiar with, such as GitHub, Shopify and QuickBooks Online. We've raised $80M between our Series A and B rounds this year to help us cover more platforms with our solution and protect more businesses.

Our tech stack includes Ruby on Rails, TypeScript, React, Postgres and AWS. We are remote-friendly and adopting an asynchronous work culture as we look to hire more in Europe (our HQ is in Ottawa, Canada).

We have 17 open roles in our R&D team, including non-IC roles. Go check them out: https://rewind.com/careers/

It depends on your niche. I'm a part of some optionally-paid Discord servers where I've never encountered a bot DM. But these aren't in niches where botting is rampant, like crypto and gaming.

It would be especially bad if the person experienced ghosting-like behaviour when they were young, including from their parents.

All those little events build up and can make one insecure about their relationships if any hint of abandonement is in the air, let alone complete abandonement through ghosting.

Based on my past experience in contract work, I'm guessing many clients want specific help for their problems and people that can on-ramp quickly. The least risky way to fulfill that is to find someone through your network that can be vouched, instead of doing a long song-and-dance of SoWs and portfolio presentations with randos on the internet. That removes the need to post about these positions publicly.

Most of these GPUs are mining Ethereum and not Bitcoin (ASIC is far more efficient for that). Many of the popular altcoins are not using Proof of Work either, so banding together to 51% attack them using GPUs would be moot. Ethereum will be moving to Proof of Stake later this year (maybe) as well.

It's definitely a grey area here. Clubhouse strongly encourages using real names on their platform. That can be considered personal information that should be protected by security controls that they seem to lack, based on what others have mentioned here, that could have limited this "leak".

Not a great response on their part since the article they reference in the tweet does not say that they have been breached or hacked. Only that there's a limited dataset of users out there and that Techmeme reached out to Clubhouse to know if they are aware of any breaches of their systems.

Pretty bad optics if the other stuff is true: incremental IDs, no rate limiting, tokens that don't expire.

> Binance really can't do anything for their users

BSC is controlled by an oligopoly of validators that Binance decides on. I'm sure if things really got bad on their network they could do something similar to the Ethereum Classic fork during the DAO incident.

EDIT: My bad, I skipped a few words in parent.

Congested network + fees dictated by the complexity of smart contracts being used (which would be much higer for something like a DEX transaction).

Not sure how it could be read that salary was lightly touched in the post. Most of the paragraphs mention salary, pay rises, comparing pay to other jobs, doing unpaid work to keep up (though this bleeds into the other subject), etc.

Pretty much. Many want exposure to the price appreciation without having to deal with minutae like custody.

If we're talking about the ransomware attack specifically, nothing has really changed. We're just shy of 18 years from the Half-Life 2 source code leak.

But in other ways, yes, the gaming zeitgeist does seem more toxic than what I had remembered being engrossed in it as a teen (or I could just looking at it with rose-tinted glasses).

When I used to build MVPs for clients I stuck to Ruby on Rails, even though I mostly worked with Python and/or JavaScript on mature products.

Fast to get features usable – as in deciding whether this should be developed further or not based on customer feedback – quickly and the "convention over configuration" aspect makes handover easy.

> “If you have a bank account but you can - at the click of a button - move your money to the central bank ... that could risk instability in the system,” Yazdi said.

> Riksbank Deputy Governor Cecilia Skingsley has dismissed such concerns, saying people can already exit the banking system by buying treasury bills.

Not sure about Sweden but I don't believe many retail banks make buying t-bills as easy as a click of a button, unless you were using their brokerage.

Few laymen are excited about converting their cash to t-bills. But digital currencies like CBDCs are part of the cryptocurrency wave that has a lot more of the general population interested.

I hadn’t realized how travel played a valuable role in my life until that was severely restricted this year…

Electric toothbrush: gets the job done quicker and results in less awkward conversations with my dentist (we talk about travel stories instead).

It depends on your threat model[0]. Keep in mind that InfoSec people that do the things you mentioned are doing it either out of necessity (see [0]), they see it as a fun hobby or are taking things to an unecessary extreme. There are plenty of nothworty contributors to InfoSec that have relevants things in public and don't go overboard locking down their devices.

[0] https://ssd.eff.org/en/module/your-security-plan

> I want to work in security but I don't have the credentials.

Well, you got to start somewhere! I burnt out from front-end development last year and decided to pivot into security. There are plenty of entry-level certifications you can start looking at if you want to explore this area more:

- Security+ from CompTIA

- eJPT from eLearnSecurity

- OSCP from Offensive Security

> I reported it, they said it was not an issue but then fixed it a month later and I could only enter in three before getting locked out.

Don't let your past outcomes with vulnerability disclosure dissuade you from continuing if this field really interests you. Many people have received the short end of the stick through public disclosure programs. But it's a drop in the bucket compared to many of the other amazing things you can do here.