2 ms·

Sometimes I really wish I learnt how to do this sort of cybersecurity/analysis. I can't even imagine how it would begin, finding some bugs and exploits seem to

Sometimes I really wish I learnt how to do this sort of cybersecurity/analysis. I can't even imagine how it would begin, finding some bugs and exploits seem to just rely on dumb luck. Reminds me of https://bugs.xdavidhu.me/google/2022/11/10/accidental-70k-google-pixel-lock-screen-bypass/ https://bugs.xdavidhu.me/google/2022/11/10/accidental-70k-go... How does one start this as a career? Is worthwhile employment?

f_devd 3y ago
From what I've seen it's extremely multi-faceted if you want to do the things described in the article (OS/binary zero-days), however there are somewhat simpler things to start with such as websecurity (XSS, request smuggling, fuzzing, sql injection, etc). There are many resources to get started (recommend some of LiveOverflow's videos) but one practical way is CTFs which challenge you in mock scenarios. Also financially & satisfaction-wise (at least if you are into learning/puzzling) it is quite good as something to pursue.