whiskeykilo

Even more ominous that it's free

It's slow going but we'll get there eventually. NIST made a recent revision to SP 800-53 that includes responsible disclosure as a recommendation: https://csrc.nist.gov/publications/detail/sp/800-53b/final

Signal cares so much about UX that they're starting to agitate security/privacy diehards. They've implemented features like stickers and message reactions that the diehard community calls "useless". And they recently implemented PINs with the intention of storing your encrypted profile and settings for easy recovery on a new device.

I applaud the direction they've taken. These are the kinds of features that will acquire and retain a broader user base.

Not sure what you’re looking to get into specifically but here’s some resources you can look at in no particular order:

Hack the Box Try Hack Me Pentester Lab Hacker101 Portswigger Web Security Academy Linux Academy Bugcrowd University Hacksplaining Cybrary Malware Unicorn bugbountyguide.com CTFtime root-me.org MalwareTech Nahamsec The Cyber Mentor

Exactly. Most people didn't even get picked for payment. I don't want a shitty monitoring service I want to see Equifax bleed

It's a free market. Don't like the payout? Don't submit the bug. Someone else probably will anyway

As someone who grew up on Windows when I initially started working on a Mac daily this drove me absolutely nuts. It could be worded much better.

The way Finder sets the default view is equally unintuitive

Not quite yet. But also like another user said, DuckDNS

"Note: Starting January 1st, 2020, GCP will charge for VM instance external IP addresses. However, under the Free Tier, in-use external IP addresses will be free until you have used a number of hours equal to the total hours in the current month. Free Tier for in-use external IP addresses apply to all instance types (not just f1.micro instances)."

That's true, I forget about that bc I use it so sparingly

"1 GB network egress from North America to all region destinations per month (excluding China and Australia)"

I've never heard of this. Is this exclusively a Digital Ocean issue?

I set one up using a free GCP instance and it's been working great so far. Would definitely handle your described usage and save you $5 a month

I suspect they're just trying to expand US cyber capabilities and recruiting.

“If I go to the next capture-the-flag contest and I see some college students using Ghidra, I will be really excited” - Rob Joyce, senior cybersecurity adviser at NSA

Source: https://www.cyberscoop.com/ghidra-nsa-tool-public/

The Trail of Bits piece kinda ignores the amount of time invested however: https://www.techrepublic.com/article/bug-bounty-programs-eve...

Anyone on HN understands the implications of this. But does your average user? I doubt it. They just know they can install a little box and get paid. Digital privacy means nothing to far too many people

That just sounds like AdGuard. Plenty of consumer routers offer VPN server capability for free. That combined with DuckDNS or a similar free service would be a better option I think