Can you expand on this a bit? Shouldn't you be asking and then through study ,reading, exploration and testing answering your "ok but why" question? I could be misunderstanding what your stating but this would read as…
I think the saying is "missing the forest for the trees.[1]" Referring someone to another food bank or resource is not addressing or owning the immediate problem, which is what the experiment showed. Those organizations…
[dead]
Correct, which is why .local wouldn't become a TLD or part of a standard for home network reserved domains.
I agree it would be great to get some of the vendor pushed / common domains put into an accepted standard. In my interaction with IETF standards they are created / implemented in two ways: 1. They set the forward…
I didn't see a specific RFC that reserved .lan however from the proposed standard RFC 8375 home.arpa is suggested. https://datatracker.ietf.org/doc/html/rfc8375
Where? Should they drop them at a starbucks out front? Have an employee volunteer their home address? Put them out front at the office? How long should they hold onto the "free" cables that people are going to ask…
This is common compliance nomenclature. The only people paying the high cost to have a full sized piece of equipment destroyed are governments or R&D companies with unique prototypes. The hard drives are most likely…
I found that the book "Writing to Learn" by William Zinsser was excellent in convening this process. As noted in the book the author advocated for more writing to be included in all subjects.…
Reading, writing and math have been the constants utilized throughout life and as such have been core subjects carried through educational systems. I'm not quite sure what subjects and topics we would be teaching future…
> it hasn't turned around in cyber fwiw and it's been growing for probably 2 decades, 1 decade in earnest. Perhaps b/c SWEs are a profit center vs. the security > cost center, there'll be motivations though. IMO the…
> Because the project was big enough to warrant more than one person. But based on what, the scope? If you weren't familiar with the tech stack how would you gauge that? I understand people can conceptualize frameworks…
You will start to see this turn around as companies realize they need to go back to the path of entry -> mid -> Senior/Principal. For cybersecurity this is operations and/or development -> cybersecurity w/ focus on…
Why did you think you needed to hire a junior dev before even starting work on the application? I know estimation can be a difficult task but the typical "I'm moving so fast..." type experiences usually mean you didn't…
Honestly it sounds like it wasn't a tool that is needed often, if it was you or someone else would have already written it. Or you don't regularly day-to-day program enough in javascript / python to do this quickly.…
80% of being a good security engineer is knowing the big picture, all the parts and how they work. The correlation that LLM produces has no value if its not actionable. You are the one that determines the weights,…
The lectures aren't a how-to guide. The items that are explained are to provide reference to the lecture material. For example the apache2 setup could just as easily be nginx, lighttpd on Windows, FreeBSD, Redhat, etc.…
Says its lecture notes right at the top. > "Think of these lecture notes as a living textbook that strives to strike a..." Why would you need to watch a video on lecture notes?
Can you elaborate on what you would add for the cloud, AD, or vulnerability content? In my perspective what you listed are simply tools and vendor offerings of which reading the documentation or getting a vendor…
I would add the additional problem of CVE's being devoid of any useful information which lead to generic tests being created by vulnerability scanners as they have the same lack of insight as everyone else thats trying…
Shouldn't your analysis/understanding show that upgrading the library is enough? If a CVE or vulnerability scanners test isn't telling you the problem that needs to be solved upgrading a library or anything else won't…
This is my thinking as well. We need to build for the task at hand not try and integrate into what we already have. The first sentence in this article is where the failed assumptions are. "Trucking was supposed to be…
Unfortunately we didn't expand upon thinking about multiple intersections and their traffic lights being a network. We have fixed programming of lighting schedules that don't change unless a traffic survey is done. In…
Can you expand on this a bit? Shouldn't you be asking and then through study ,reading, exploration and testing answering your "ok but why" question? I could be misunderstanding what your stating but this would read as…
I think the saying is "missing the forest for the trees.[1]" Referring someone to another food bank or resource is not addressing or owning the immediate problem, which is what the experiment showed. Those organizations…
[dead]
[dead]
Correct, which is why .local wouldn't become a TLD or part of a standard for home network reserved domains.
I agree it would be great to get some of the vendor pushed / common domains put into an accepted standard. In my interaction with IETF standards they are created / implemented in two ways: 1. They set the forward…
I didn't see a specific RFC that reserved .lan however from the proposed standard RFC 8375 home.arpa is suggested. https://datatracker.ietf.org/doc/html/rfc8375
[dead]
Where? Should they drop them at a starbucks out front? Have an employee volunteer their home address? Put them out front at the office? How long should they hold onto the "free" cables that people are going to ask…
This is common compliance nomenclature. The only people paying the high cost to have a full sized piece of equipment destroyed are governments or R&D companies with unique prototypes. The hard drives are most likely…
I found that the book "Writing to Learn" by William Zinsser was excellent in convening this process. As noted in the book the author advocated for more writing to be included in all subjects.…
Reading, writing and math have been the constants utilized throughout life and as such have been core subjects carried through educational systems. I'm not quite sure what subjects and topics we would be teaching future…
> it hasn't turned around in cyber fwiw and it's been growing for probably 2 decades, 1 decade in earnest. Perhaps b/c SWEs are a profit center vs. the security > cost center, there'll be motivations though. IMO the…
> Because the project was big enough to warrant more than one person. But based on what, the scope? If you weren't familiar with the tech stack how would you gauge that? I understand people can conceptualize frameworks…
You will start to see this turn around as companies realize they need to go back to the path of entry -> mid -> Senior/Principal. For cybersecurity this is operations and/or development -> cybersecurity w/ focus on…
Why did you think you needed to hire a junior dev before even starting work on the application? I know estimation can be a difficult task but the typical "I'm moving so fast..." type experiences usually mean you didn't…
Honestly it sounds like it wasn't a tool that is needed often, if it was you or someone else would have already written it. Or you don't regularly day-to-day program enough in javascript / python to do this quickly.…
80% of being a good security engineer is knowing the big picture, all the parts and how they work. The correlation that LLM produces has no value if its not actionable. You are the one that determines the weights,…
The lectures aren't a how-to guide. The items that are explained are to provide reference to the lecture material. For example the apache2 setup could just as easily be nginx, lighttpd on Windows, FreeBSD, Redhat, etc.…
Says its lecture notes right at the top. > "Think of these lecture notes as a living textbook that strives to strike a..." Why would you need to watch a video on lecture notes?
Can you elaborate on what you would add for the cloud, AD, or vulnerability content? In my perspective what you listed are simply tools and vendor offerings of which reading the documentation or getting a vendor…
I would add the additional problem of CVE's being devoid of any useful information which lead to generic tests being created by vulnerability scanners as they have the same lack of insight as everyone else thats trying…
Shouldn't your analysis/understanding show that upgrading the library is enough? If a CVE or vulnerability scanners test isn't telling you the problem that needs to be solved upgrading a library or anything else won't…
This is my thinking as well. We need to build for the task at hand not try and integrate into what we already have. The first sentence in this article is where the failed assumptions are. "Trucking was supposed to be…
Unfortunately we didn't expand upon thinking about multiple intersections and their traffic lights being a network. We have fixed programming of lighting schedules that don't change unless a traffic survey is done. In…