k4ch0w

Burntsushi, Andrew. My man. You don't know me, we have never talked but bro I admire the shit out of you.

Trolls are much louder than lurkers. There are a silent majority of us that know how much time and sweat goes into building free tools. We appreciate what you do because you do it for love of being a hacker and showing everyone else how you did it.

I don't think people realize how hard it is having a day job and then building a huge project people want to use. It's mentally taxing. It sucks even more when it's only negative things. Life is already hard man, why do these people have to keep trolling you? It's enough to make you want to flip the desk and give it all up.

I love reading your Rust code, and seeing how active you are on reddit/hacker news. Going through how you built the Aho Corasick crate and comments on you trying to reverse hyperscans teddy algo. was amazing for me. I spent so many hours that day reading ripgrep source code. I was amazed and what you did and the comments everywhere about why, like why the printer was pull/push. The whole time, I was geeking over what you did so much that you started my love of Rust.

Anyways, thanks for just being you man.

It also prevents the modification time from being changed after closing the file, if no changes were made.

I see conda a lot more for new python coders in the machine learning space, having a GUI helps newer programmers. Check out Anaconda/Miniconda. Code is as simple as

  conda create -n myenv python==3.8
  conda activate myenv

Do all your things

  conda env export > myenv.yml

On your coworkers machine

  conda env create -f myenv.yml

- Crypto bubble will burst

- China will have huge social reform in favor of citizens

- Bioengineering will become an everyday discussion when thinking about having kids. (Designer babies)

- GCP or Azure will fall off in the cloud game.

- Linux desktop will have a breakthrough and become more mainstream.

- Free education or heavily subsidized college will become real in the US.

- Blocking ADs in browser will not be possible anymore.

- Rust will become C++ and Go will become Java in enterprise environments.

- AMD will dominate the chip market with intel struggling to catch up.

- Gas will be $12 a gallon. Currently ~$3.50 in Seattle

- Streaming services will become like cable tv channels and you’ll need to spend $70 to unlock all the regular channels.

- Drones will become a social problem. Drones stealing packages and spying on neighbors.

- Disney will buy paramount

- Google buys Salesforce

- Oracle buys IBM

- Apple buys Waymo and becomes dominate force in automated driving

- First asteroid is mined

- Another recession like 2008 but worse occurs

- Scotland leaves UK

Thanks for the suggestion. I'm going to try it out. Shame it was open sourced then closed again though :(.

No I haven't used the IOS app, so I can't comment. I can imagine the biggest issue is not having an iCloud sync to backup your notes. I just the use the builtin notes app on my phone.

I currently use Quiver https://apps.apple.com/us/app/quiver-take-better-notes/id866...

I've had a hard time replacing it so far.

I really want a note taking app that securely stores and syncs my notes between colleagues and does code snippets/attachments well. I haven't found anything I like yet, I've tried Bear/Notion. I love OneNote, but we don't have MS licenses at my current gig.

This is a hard space to break into because it requires in depth knowledge of operating systems. I'd play around with volatility https://github.com/volatilityfoundation/volatility.

Next take a look at getting good with IDA, it's expensive but they have freeware versions you can use, it just won't do x64.

Start by specializing in only one OS, pick linux/mac/windows. It's a very niche space and requires a lot of expertise if you want it as a job.

If you're thinking long term I'd take a look at becoming a malware analyst as it will also help you pick up skills needed to go down the path you'd like.

I hope things get better for you. The hardest part is taking that first step. I've been there and I know how hard it is to even get out of bed. It's cheesy, but what really helped me was listening to motivational tapes like Les Brown/Jim Rohn/Eric Thomas. I'd just go for a walk while listening to them and over time it got a little bit easier.

Running without root is totally viable, it is in fact encouraged. Take a look at: https://docs.docker.com/engine/security/userns-remap/

I think the concern should be around what environment variables are required to run, what was in the base image, what volumes are mounted between container/host thus persisted through run's and don't mount /var/run/docker.sock! You should assume the container can be breached and make it as hard as possible to break out.

Just dropping by to say thank you for f.lux! I'm able to keep hacking at night because of it.

I have also been looking for something similar. I currently use quiver but I'm always looking for another offline alternative. I like notion and bear but I don't like the idea of syncing my data to an unknown source.

This one always stuck with me too.

Someone linked to Amber Brown's talk and I thought this point would be important for discussion. I think there is something that isn't being considered here when it comes to relying on PyPi.

3PP(Third Party Packages) issues are responsible for a lot of application security vulnerabilities today. Every large enterprise organization has no idea what packages a developer is pulling onto their laptop and into their codebase.

As a security engineer, I like having a core team and a standard library in place that has gone through a long mature process with experienced developers, instead of someone who just git pushes code every night. You have no idea who is on the other end of that push too. It's too hard to keep track of changes and causes us to have to pin packages and versions that have been ok'd for use instead of a new release of Python. You have no guarantee the security engineer who reviewed the code didn't miss anything either.

Sometimes I think that's the problem with being a professional coder. It does require a lot of commitment up front to be considered great or a {insert buzzword here} coder. You tend to avoid other things like socializing or picking up new hobbies.

I'd say pick a group hobby that interests you and try pushing through the uncomfortableness of it being awkward in your mind.

When I was struggling with your very same issue I tried improv. It forces you to have to talk with other people. Another thing I did was Yoga, I think just being around other people makes you more confident around people. Group therapy also helps, hearing other's being vulnerable makes you realize other people struggle with this as well.

You build confidence by being competent someone once told me. You can't be competent in something you never practice. If you never go out to socialize, then you won't really be good at socializing will you?

Everyone has faults and I think today it's harder than ever to recognize that. You may feel worthless and under confident, but so might the other person you'd just never know it. Social media does us no favors in this regard and constantly broadcasts the highlights of people's lives rather than their own struggles. You get the impression that you may be completely alone in your thoughts, but you're not.

Simple is better imo, openbsd wins.

Yes. It's that easy. Sometimes it's already done by a dev. Say in GitLab the CI is pretty good about never revealing env. variables to you once you set them, however devs for debugging purposes will do something like echo $SECRET_PASSWORD and the output will be in the job.

F strings have been amazing in my everyday programming. I have been programming in Python for about 8 years now. I'd say some additions to this list are

  Conda for managing environments and Deep Learning builds such as Cuda on Ubuntu
 
  Jupyter notebooks for quick prototyping

  IPython if you have never seen it before.

  Requests Library

Buy a burner phone with cash in a different city that you live in. Install Facebook. Start a Netflix binge session show that is purely in Chinese or Japanese. Do nothing else then open a url with a lot of ads.

Flexibility.

Being able to work remote if I don't feel like going into the office.

Take a vacation whenever.

Never worrying if I can't get a day off to go see a doctor.

I get my job done and do it to a high degree which frees my time up to do other things. You couldn't give me name a price to me right now that would make me give that up.

They are all great career prospects. There aren't enough heads in the field to meet the demand. I don't agree with the specializations you have listed. People move around all the time. I'm currently Red Team and got here by doing appsec, netpen and vuln research.

As for the most prestigious, there is no such thing. Red Team and Blue Team operations are both vital to any organization. The Red Team verifies attacks are caught, and Blue Team catches incidents to minimize damage asap. Prestigious probably depends on the company and which one they respect more.

As for most fun, I really enjoy breaking things and being malicious. It's why I do well in the field. I'd say you have to discover what you enjoy for yourself. You don't want to get pigeonholed into just doing code reviews your whole life or reading through log files. In order to get through this level you have to show you can do more than be a checklist jockey.

Pay is pretty much the same for all of these at the larger organizations.

Yes I do. I keep it in notion or random .txt files.

I have thought about this quite a lot. I read a lot on FIRE and on personal finance. I think the thing no one mentions in this thread is the possibility of you not making it to 25 years? What if you get a disease or a car accident? You saved all that money for nothing.

I think it's important to enjoy the here and now, but also plan for a future. You never know what could happen. I think it's silly not to just enjoy the moment while you have it. Yes, be fiscally responsible but don't forget the purpose of money is to barter for things you enjoy.

Chris Manning is responsible for so much work in this field. I can't wait to go through this video series. Thanks for all your hard work and I want you to know how much it's appreciated.

I think too much is bad and a sign of immaturity. However, whenever you feel like you can use them it implies you feel close and safe enough with the other people to do it. I swear with my team only because I think you need to be as open as possible with them and sometimes the only way to describe the mess you are in is a f*.

I think you're right about it being like Antarctica and being exploited by the media. We shouldn't use that as an excuse not to propel the technology forward in order to get there though. The movies also help kids get excited about pursuing a STEM field and the possibilities for the human race.

Stop hanging out with people who you know aren't good for you.

Start believing in yourself more and more.

Remember no one is watching you because they are too busy with themselves.

Wow... I'm genuinely shocked at the at the 27 GET IT DONE clicks. I mean this probably worked for that one weekend and until people got their bonus, but I bet you the moment the people had their bonus they would leave. It's a good sprint strategy but costs you talent and talent hiring in the long run.

I think the problem when it comes to any UI design is it's all personal choice.

I was going through these comments and most everyone here disagrees with one or two things and other's agree. Art is a subjective thing and I think ultimately at the end of the day it's about giving the developer more options and letting them decide what makes sense to them.

You can find the password dumps if you are persistent enough with google and crack the hashes yourself. You can also look into hashes.org. I'd just enforce strong password rules all around in your domain and for the applications you build.