703 karma · joined May 1, 2017
What is the worst possible scenario? Will you regret it for the rest of your life or will you be happy you made the decision. That money could potentially free you to pursue more meaningful work.
Look, everyone works a job they dislike at some point in their life. You won't always feel passionate about the things you're doing, but you need to weigh how much you may regret it otherwise. This sounds like a sure bet for 2x-5x more in straight cash within your 20's. People don't always get that.
Maybe, try to change something different in your routine of life. Shift the focus from work for 12 months to something else, like dating, a hobby, a sport.
If you seriously hate it, I mean really hate like it boils your blood to get up in the morning and think about going to work then leave. Absolutely, make your peace of mind and health the most important thing. However, this may be an opportunity for you to shift focus and coast for a bit.
Arbitrary execution is more possible IMO. The way a lot of ML models are stored is by being a serialized file using a framework like pickle or Java's serialization. Theoretically, you could add code into a precompiled model that when someone loads would execute arbitrary code. This could be done using a simple technique like a code cave seen here https://en.wikipedia.org/wiki/Code_cave. I haven't had time to dig into this myself, but I honestly don't think it would be hard.
I think in the next couple years you will see more vulnerabilities pop up in these frameworks, but finding security vulnerabilities take time.
Ubuntu 17.04 for Machine learning/Cuda because anything else takes more time to work.
Alpine-Linux for Dockerfiles because it's the bare minimum.
Arch Linux for learning Linux, because you're responsible for installing what you'd like to have a stable machine.
You have a security guy assigned to keep track of bugs and is notified after the remediation window has passed. It's usually assigned to the person that found it because they are able to easily understand the issue and then verify the fix. They will confirm it has been fixed for all the machines it was found on, then close the ticket out. However, often bugs that are considered unlikely to be exploited will be kicked back, and long chains of emails between the security guys saying "Please fix this bug! I'm just trying to do my job", and developers saying "We have 0 dev cycles and a release coming up, not a high priority! Can't you just close it?"
This email thread goes on for weeks/months, and the security guys push the redemption period to help developers meet their deadline. It gets pushed back so many times that the security guys get sick of reporting it because they know it's a low severity issue, but still is a problem none the less. They push it up the chain of command and force the PM of the project sign off on the risk associated with what could happen if exploited, they almost always have it fixed immediately then it's closed.
It annoys my girlfriend sometimes because nothing really bugs me or gets me really upset though she tries her best. I would say this, and stoicism are big reasons why. There are also numerous studies that show exercise reduces stress an improves your overall well being.
I will continue to use it and give you guys feedback. Nice work!
It may sound simple, but I constantly avoided social situations because I was worried about being judged and people disliking me. I realized by not even trying I already made people's judgements for them about me.
People are actually pretty friendly when you take a genuine interest in them. This in turn helped me to go on more dates and meet a nice woman whom I've been seeing for a couple months.
Someone told me that everyone wants to be loved, everyone wants to be liked and everyone wants to feel appreciated. I really took this to heart when interacting with strangers.
You are off to a great start. 5X5 is a great beginner program and imo the best way to get your beginner gains. There is also another closely related routine called Ice cream fitness which some people prefer. Eventually, you will want to taper off this once you get the beginner gains. I'd recommend getting a trainer for a 1-3 months to get your forms down, if you can afford it.
If you are just starting to get healthy, counting calories can be a bit much. You don't want to overload yourself when building a new habit like working out consistently. I'd just follow some simple principles.
Avoid sugars such as Soda, Coffee with syrups, candy and the like.
Avoid alcohol completely if possible. I still enjoy beers socially, humans are weirded out if you don't drink with them. However, I never drink alone.
Always eat before going shopping, this will prevent you from buying extra goodies you might not necessarily need. The easiest way to not eat bad food is to never buy it at the store. If you know it's in your house, you will eat it.
Try to eat outside of your house less. You don't know how the food is being prepared, how much oil, salt, sugar, etc. is in the food. You can't always avoid this but having a high ratio of eating out vs. at home helps.
Some additional random things
It's a process and you shouldn't don't compare yourself to anyone other than who you used to be.
No one at the gym is looking at you. They are so busy in their own routine.
You should find a playlist that amps you up on your way to the gym. You want to train your brain and body to be ready to fk things up when you step through those doors.
If you are severely overweight, everyone that is really fit in the gym is rooting for you. We know the struggle, and we know how hard it is to make a change for your health. If you think people are laughing at you, it's in your head. Again, people are into their own routines.
If you see a big guy at the gym, don't be afraid to ask him for some advice. They may look scary, but I promise they are just regular people and are usually weirdly friendly.
Muscles don't grow unless you overload them. If muscle is the goal, your going to need to push yourself.
Everyone comes from a different background and sometimes the people around you don't "Grow up", so you never learn it yourself without discovering a new book that gives you this insight. I guess that was the case for me, and just wanted to share my thoughts with others.
I am in no way affiliated with this site or mailing list but I can't recommend this site enough, it's the only mail I always open in the morning. It's nice everyday to get a new tale of how someone was stoic in a difficult situation. https://dailystoic.com/
I am a very physical person and his method was the first one to put my mind into a meditative state. You actually feel it in your body and shock it which silences your regular thoughts. You only focus on your breathing and how you feel in that moment. It gives me a really quick reprieve when working on a difficult problem.
You have people that take his method to extremes though, I remember one guy at the seminar literally pissed himself from holding in too long. It can make it all seem like pseudoscience. I can confirm that it has a very physical effect on my body and helps me meditate a lot easier.
A side effect of the ice training is that I sweat in really cold weather. I live in Seattle and people look at me funny cause I'm rocking a t-shirt and shorts but if I wear a jacket I'm boiling.
2. Yes, so this one is more like you are shooting with a shotgun from a long long range and hoping to hit. You can improve the accuracy by using a password dump on your target. People have a common pattern that they use with their passwords. You can either find one that is still being used or try to find a couple they have used and create a new one. Great site to demonstrate the power of a password dump is https://haveibeenpwned.com/. So in some cases it is possible, but as someone who professionally red teams, I wouldn't bruteforce past a certain time period before trying something else.
From an Attacker's point of view, yes logging in from the same IP against the same account will get you banned fairly quickly. People put up their best defenses on the most obvious endpoint, which is why a good attacker quickly tries something else. However, two possible routes to circumvent this are
1. Find a vulnerable API call/Webportal on the bank's other sites that don't have IP banning but require authentication. This happens much more than you'd realize.
2. A distributed attack, either with a large proxy network or if you have a botnet, in which you bruteforce the credentials with different time intervals/simulated human behavior to not lock out the account.