3 ms·
There's no standard path in information security, most schools don't offer information security degrees and many extremely successful people in security didn't
by arkadiyt 8y ago
There's no standard path in information security, most schools don't offer information security degrees and many extremely successful people in security didn't come from a CS background at all.
Some general recommendations:
- follow smart security people on Twitter, which is the defacto medium for information security discussion
- read publicly disclosed bug bounty reports on Hackerone and Bugcrowd
- read The Tangled Web by Michal Zalewski
- learn to use Burp Suite
- strictnein 8y ago> - learn to use Burp Suite Burp Suite is an awesome tool for devs as well. The Repeater tool is better for messing with API calls than any of the browser dev tools, imo. For people finding the proxy setup stuff annoying: install Foxyproxy in Firefox and it makes your life really simple.
- andromedavision 8y agoHow about for proxy servers in headless browsers; what do you recommend? Any experience with how public and premium proxies vis-a-vis uptime and reliability compare?
- strictnein 8y agoSorry, no experience with that.