5 ms·
Honest question, can you learn netsec etc. without many thousands of hours of "fooling around" on the internet? Participating in online discussion boards, readi
by ben_jones 9y ago
Honest question, can you learn netsec etc. without many thousands of hours of "fooling around" on the internet? Participating in online discussion boards, reading postmortems and documentation, listening to conference speakers? How does the military train it? I have trouble believing you can develop these skillsets without carte blanche to the internet. Are they importing talent from surrounding regions? Do they just run "dumb" hacking tools made by others against low hanging fruit?
- ringaroundthetx 9y agosure you can learn it without all that. hacking is just a puzzle, with the most intuitive use being the GUI presented, but needing to learning how to look at the puzzle. concepts of privilege escalation are simple, and most organizations are vulnerable with low hanging fruit.
- Jach 9y agoI suspect a lot of important personnel in NK (including some programmers and some university students; that set probably overlaps a lot) have access to the internet, or at least most of it, even if monitored. So don't assume that they're not learning in isolation. But even if so, there are common principles you could study from books and test systems. (They'd be smart to apply their people to securing their own systems as well with red/blue teams...) Plus if you know your target, you can dedicate your time to finding ways to attack that target, you don't need to keep up to date with the latest from e.g. tech talks.