eswat

11 ms·

91.
by eswat 6y ago
These are the big hindsight takeways I’ve seen as I’ve pivoted from web design/development towards information security. 1. For me it's hard to stay motivated learning a new technical topic if I can't connect it to some plaus
92.
by eswat 6y ago
There are a few RCE disclosures for Valve games related to this previously - https://hackerone.com/reports/542180 - https://nvd.nist.gov/vuln/detail/CVE-2020-9005 - https://nvd.nis
93.
by eswat 7y ago
Isn’t this something you should be asking your manager or leadership? How are we supposed to know what metrics are important for your company for you to hit? Or by individual do you mean personal growth?
94.
by eswat 7y ago
Likely would. The `validMAC` function doesn’t just fail silently if the regex fails, which would get past naive signature detections. Oh and feeding user input directly into `exec`…
95.
by eswat 7y ago
Mostly continuing certifications in InfoSec. Got OSCP recently, will be getting GWAPT in a few months. Looking to earn OSWE before the end of the year.
96.
by eswat 7y ago
A bit. A gaming channel that I've been hanging around in since 2003 made the bittersweet move of migrating to Discord as more and more people stopped using IRC. Given that a lot of InfoSec teams I'm in also use Discord I didn&#x27
97.
by eswat 7y ago
I just completed a difficult cybersecurity certification exam (OSCP) and if I had to summarize my learning path for that: - Figure out a time where you want to become proficient in the skill by – something that balances between setting a fi
98.
Applied Critical Thinking Handbook (Formerly the Red Team Handbook)(hsdl.org)
9 points by eswat 7y ago|0 comments
99.
Destiny 2 Outage and Rollback(bungie.net)
2 points by eswat 7y ago|0 comments
100.
by eswat 7y ago
This may be sound for someone with a moral compass. But you could also say wealth is the value you take from others (scams or well-meaning offers to others with highly questionable value).
101.
by eswat 7y ago
Have you looked into cybersecurity in a non-engineering role? I’ve transitioned from a web development background towards penetration testing specializing in web applications. While I don’t get to code as much as before I still get to retai
102.
by eswat 7y ago
Canadian version: https://i.imgur.com/zlGnuDO.png
103.
by eswat 7y ago
I wonder if this can have a detrimental effect for compulsive buyers: “Oh I shouldn’t buy this widget but a chunk of it will go towards my retirement anyway!”
104.
by eswat 7y ago
To add context to the other reply, it’s not uncommon for penetration testers to have Postman in their toolbelt, in addition to traditional security tools like Burp, Metasploit, sqlmap, etc.
105.
by eswat 7y ago
True. Clear markings are like a deterrent control in security. They can mitigate damage but something that prevents wrongful use needs to be used in the end.
106.
LifeLabs pays ransom after data breach affecting up to 15M Canadians(theglobeandmail.com)
73 points by eswat 7y ago|50 comments
107.
by eswat 7y ago
For those wanting more examples, some probably more nefarious, look into Google dorking. Here’s an execellent presentation from Blackhat many years ago but is still relevant: https://www.blackhat.com/presentations/bh-us
108.
Minutes a Day, Until 10 P.m.: China Sets Rules for Young Gamers(nytimes.com)
10 points by eswat 7y ago|0 comments
109.
by eswat 7y ago
> Only other scenario that would work is for Joe to fly over there... which probably wouldn't happen. I wouldn’t want to see a Sean Penn/El Chapo incident[0] happen with these two. [0] https://theintercept.com/2
110.
by eswat 7y ago
Yup. There’s plenty of places along "the corridor" – Kitchener/Waterloo, Toronto, Ottawa and Montréal – in eastern Canada that could cater to the OP's goals and hop between them if there's a particular event happeni
111.
by eswat 7y ago
Don’t have those apps on your mobile devices and block them with your hostfile on desktop. If I really want to check something I have to modify the hostfile and I always put the site back in when I’m done. But each person responds different
112.
by eswat 7y ago
Yeah, it seems the download on the site is a free alpha before they plan on releasing it on Steam as an Early Access title.
113.
by eswat 7y ago
First, review your threat model [0]. Then I recommend this podcast [1] for some ideas on how to scrub yourself from the internet. Realistically you’re not going to be able to remove anything close to all your footprints, but things like usi
114.
by eswat 7y ago
Part of the problem that I realized after hearing the author promotin this book in a podcast is that many people not only want to solve problems but also put their own spin/branding on it, even if it’s not actually much different from
115.
by eswat 7y ago
If nothing else I feel C&C has remained popular in the internet zeitgeist. The series is very ”meme-able”, especially Red Alert and Generals due to their quirkiness of geopolitical issues that have always remained hot topics to a wester
116.
Bunz locks down employee BTZ wallets as former admins lead mass exodus(betakit.com)
2 points by eswat 7y ago|0 comments
117.
by eswat 7y ago
Being able to swap modules out of your phone like you can swap components out of a PC is very enticing to DIYers. With enough maturity there could be a new market to sell modules for very different purposes than phone manufactures intended
118.
by eswat 7y ago
The main benefit behind TOTP is that you can tie its value creation to a second factor, such as something you own like a device (instead of something you know like a password). It’s arguable that you’re removing that second factor when you
119.
by eswat 7y ago
Sure, I know a few people that use iPod touches as their “main phone” using VoIP apps. But they’re of the paranoid hacker type and want a device that’s easy to lock-down from phoning home 24/7. It works out for them since they don’t te
120.
by eswat 7y ago
That is how I read it as well. I’d imagine being someone that is cynical and wealthy protects your wealth from forces that would suck less cynical people dry (multilevel marketing, get-rich-from-real-estate seminars, stocks currently riding

More ›