eswat

For those wanting more examples, some probably more nefarious, look into Google dorking.

Here’s an execellent presentation from Blackhat many years ago but is still relevant: https://www.blackhat.com/presentations/bh-usa-05/bh-us-05-lo...

> Only other scenario that would work is for Joe to fly over there... which probably wouldn't happen.

I wouldn’t want to see a Sean Penn/El Chapo incident[0] happen with these two.

[0] https://theintercept.com/2016/01/12/sean-penn-el-chapo-opsec...

Yup. There’s plenty of places along "the corridor" – Kitchener/Waterloo, Toronto, Ottawa and Montréal – in eastern Canada that could cater to the OP's goals and hop between them if there's a particular event happening in one of those cities (though not as a cheap as hoping around Europe).

Don’t have those apps on your mobile devices and block them with your hostfile on desktop. If I really want to check something I have to modify the hostfile and I always put the site back in when I’m done.

But each person responds differently to these types of measures. You’ll probably find a few recommendations here so try all of them and see which is the most effective for you.

Yeah, it seems the download on the site is a free alpha before they plan on releasing it on Steam as an Early Access title.

First, review your threat model [0].

Then I recommend this podcast [1] for some ideas on how to scrub yourself from the internet. Realistically you’re not going to be able to remove anything close to all your footprints, but things like using GDPR can help.

The amount of information on you also depends on the country you reside in. I think Americans in particular will have a tough time due to the number of people search websites and a laissez-faire attitude towards selling PII that IMHO should not be sold (DMV and voting data)

[0] https://ssd.eff.org/en/module/your-security-plan

[1] https://inteltechniques.com/podcast.html

Part of the problem that I realized after hearing the author promotin this book in a podcast is that many people not only want to solve problems but also put their own spin/branding on it, even if it’s not actually much different from existing solutions.

But that slight difference in the new solution being promoted taps into our brains just in the right ways that it makes existing solutions seem inferior, thus the productive porn.

If nothing else I feel C&C has remained popular in the internet zeitgeist. The series is very ”meme-able”, especially Red Alert and Generals due to their quirkiness of geopolitical issues that have always remained hot topics to a western fanbase (Russia, China and the Middle East).

Being able to swap modules out of your phone like you can swap components out of a PC is very enticing to DIYers.

With enough maturity there could be a new market to sell modules for very different purposes than phone manufactures intended (ie: you can use the drive bays in PC case for a variety of components, not just “drives”, and it will work as long as it interface with the motherboard)

The main benefit behind TOTP is that you can tie its value creation to a second factor, such as something you own like a device (instead of something you know like a password).

It’s arguable that you’re removing that second factor when you store the parameters needed to create the TOTP in the same place as you store your passwords.

Sure, I know a few people that use iPod touches as their “main phone” using VoIP apps. But they’re of the paranoid hacker type and want a device that’s easy to lock-down from phoning home 24/7. It works out for them since they don’t tend to make or receive actual phone calls much.

Only issue is most of these VoIP services can’t be used in a multi-factor authentication scheme since they don’t support short code SMS.

That is how I read it as well. I’d imagine being someone that is cynical and wealthy protects your wealth from forces that would suck less cynical people dry (multilevel marketing, get-rich-from-real-estate seminars, stocks currently riding the wave of the hot rumour of the week).

Tangerine still does this. I’m honestly surprised I don’t hear stories about account compromises with them. Likely a ticking timebomb though.

I guess you'd have to worry about malware breaking out of the VM as well, but are there many exploits that do that these days?

If you miss IRC maybe scour through the networks on https://netsplit.de, find some channels you’d be remotely interested in and hang out in them.

These days I fund my Netflix account using digital gift cards purchased through PayPal's eBay store, since they frequently sell them at a 15% discount.

If it wasn’t for that I would just pay Netflix directly.

There’s more info on the technicalities of the breach here: https://www.comparitech.com/blog/vpn-privacy/choice-hotels-d...

Their efficacy depends on your learning style. I personally get bored pretty easily with lecture-style learning, even through an online course. I need more experiential learning. So with cybersecurity I’m picking it up through:

- Study guides and practice exams for certificates (that I may or may not get). This is probably the critical thing I do because it sets a track of what kind of material I should be focusing on for the subseqent learning tools.

- Anki/spaced-repetition to remember things like acronyms

- Quick YouTube talks (specifically those not in a webinar format; usually bad production quality and a lot of padding not related to the topic)

- Games to put theory into practice (CTFs, bug bounties, video games that are very abstracted from real hacking but still require exercising logic)

- Podcasts that look at the industry from different perspectives. Currently listen to CyberWork, which has a lot of fluff but I offset that with Darknet Diaries which does a great job of storytelling.

- Trying to explain these concepts in layman's terms to others

I miss hanging out in #CSS with the topic explicitly saying the channel wasn’t about Counter-Strike: Source. You’d still get new people asking for a scirm every so often though.

Some people have amassed a collection of channels throughout the years that were probably pretty active in the past, but aren’t anymore. Some people like me might notice this and remove them from my autojoin list while others won’t care since idling in a channel is a pretty negligible performance hit.

When I first added it to my account years ago it was $2CAD/mo through my carrier. Now they charge $5CAD/mo to add it to new plans. Ruthless.

I’m failing at finding the original report about this but this is the line I keep seeing repeated in PRs:

> Nationally, there were 301,873 cybersecurity job openings in the private and public sectors during the 12-month period between April 2017 and March 2018. This included 13,610 openings in the public sector.

I think we’ve done a great job of convincing each other within our tech bubble than everyone wants a SPA. Not sure the general public cares for our enthusiasm though.

That’s actually what the device in the article does.

> The device, which cost about $100 to build, was equipped with a 3G-enabled modem, allowing it to be remote-controlled so long as it had cell service.

> The warship listens for a handshake — the process of authorizing a user to log onto the Wi-Fi network — then sends that scrambled data over the cellular network back to the attacker’s servers, which has far more processing power to crack the hash into a readable Wi-Fi password.

It’s not uncommon for red teams to do something similar: pull a bunch of ciphertext and hashes from the target network, ship them off to their GPU farm at the office, wait for results.

If the password is a predictable, low-length alphanumeric password it’s not going to take long for something like a multi-GPU machine with some dictionaries to break it.

Replying to the other comments under this reply: in Canada we check for past history of mental illness but don’t flag gun license applicants just because of that. They need to have a history of being treated due to illness that could lead to violence.

Based on the ESA statement it’s probably a case of hanlon's razor where they have nobody on-staff to do a proper incident response. They also said they “shut down the site”, which really meant they removed/hidden the page in WordPress but they didn’t remove the culprit file nor did they take down the E3 website.

Several years ago I worked on a monolithic website that used static files with no templating engine. The problem is they had so many contractors working on changes for specific ranges of content that there were a variety of ways that even a mundane meta tag with the same content value was written (is the tag self-closing, is the value placed before the property, are certain characters in the value encoded, etc.). Find & Replace can quickly end up becoming a bigger game of Trial & Error especially if there are no standards in place.

So far it’s just been a lot of theory (books, man pages, reading PoC code and vulnerability disclosures, dusting off old texts on networking) and practice (CTFs, bug bounty, writing my own exploitable apps then fixing them after, trying out PoCs) since I want to hit a certain level of competence before applying for jobs.

I’ll be talking to contacts in cybersec and HR/recruitment departments in my area since the hiring filter is a bit of a concern. I’m used to going around HR, but not sure how that plays out in this industry. Despite doing front-end and full-stack development for every position I’ve had I do feel I need to groom my experience a bit to downplay my UX/UI contributions. Worst case is I get certs like the OSCP you’re getting to speed things up.

After doing design for so long I just didn’t feel excited about what I was doing day-to-day nor did I find the discussions in the industry that interesting.

But I never really got tired of programming and at this point in my life the latter meshes better with what I’m interested in – privacy, encryption, hardening or subverting systems, etc. – than the former. I also get to reapply knowledge that was abstracted away while I predominantly did front-end development.