ZeroSolstice

9 ms·

1.
by ZeroSolstice 26d ago
Can you expand on this a bit? Shouldn't you be asking and then through study ,reading, exploration and testing answering your "ok but why" question? I could be misunderstanding what your stating but this would read as being &
2.
by ZeroSolstice 9mo ago
I think the saying is "missing the forest for the trees.[1]" Referring someone to another food bank or resource is not addressing or owning the immediate problem, which is what the experiment showed. Those organizations failed at
3.
by ZeroSolstice 1y ago
Correct, which is why .local wouldn't become a TLD or part of a standard for home network reserved domains.
4.
by ZeroSolstice 1y ago
I agree it would be great to get some of the vendor pushed / common domains put into an accepted standard. In my interaction with IETF standards they are created / implemented in two ways: 1. They set the forward direction for
5.
by ZeroSolstice 1y ago
I didn't see a specific RFC that reserved .lan however from the proposed standard RFC 8375 home.arpa is suggested. https://datatracker.ietf.org/doc/html/rfc8375
6.
by ZeroSolstice 1y ago
Where? Should they drop them at a starbucks out front? Have an employee volunteer their home address? Put them out front at the office? How long should they hold onto the "free" cables that people are going to ask ridiculous quest
7.
by ZeroSolstice 1y ago
Free pickup? at a secure data center? Lets use some logic here. The disposal company is taking the cables with them to recycle them for the copper wire. Same with power cables.
8.
by ZeroSolstice 1y ago
This is common compliance nomenclature. The only people paying the high cost to have a full sized piece of equipment destroyed are governments or R&D companies with unique prototypes. The hard drives are most likely being shredded since
9.
by ZeroSolstice 1y ago
I found that the book "Writing to Learn" by William Zinsser was excellent in convening this process. As noted in the book the author advocated for more writing to be included in all subjects. <https://goodreads.co
10.
by ZeroSolstice 1y ago
Reading, writing and math have been the constants utilized throughout life and as such have been core subjects carried through educational systems. I'm not quite sure what subjects and topics we would be teaching future generations tha
11.
by ZeroSolstice 2y ago
This quote mostly applies to people who don't want to spend the time learning existing tooling, making improvements and instead create a slightly different wheel but with different problems. It also applies to people trying to apply &q
12.
by ZeroSolstice 2y ago
> The frontpage should directly show the list of papers, like with HN. I disagree. There are numerous times where I have browsed the comments on a HN post where people haven't read the article and are just responding to the comment
13.
by ZeroSolstice 3y ago
> it hasn't turned around in cyber fwiw and it's been growing for probably 2 decades, 1 decade in earnest. Perhaps b/c SWEs are a profit center vs. the security > cost center, there'll be motivations though
14.
by ZeroSolstice 3y ago
> Because the project was big enough to warrant more than one person. But based on what, the scope? If you weren't familiar with the tech stack how would you gauge that? I understand people can conceptualize frameworks at a
15.
by ZeroSolstice 3y ago
I'm not sure I see this as a reality anytime soon. > Those folks have a lock bc there’s a small group of who knows assembly and OSs across multiple systems very well and knows if from a security context. There is two parts t
16.
by ZeroSolstice 3y ago
You will start to see this turn around as companies realize they need to go back to the path of entry -> mid -> Senior/Principal. For cybersecurity this is operations and/or development -> cybersecurity w/ focus on e
17.
by ZeroSolstice 3y ago
Why did you think you needed to hire a junior dev before even starting work on the application? I know estimation can be a difficult task but the typical "I'm moving so fast..." type experiences usually mean you didn't o
18.
by ZeroSolstice 3y ago
Honestly it sounds like it wasn't a tool that is needed often, if it was you or someone else would have already written it. Or you don't regularly day-to-day program enough in javascript / python to do this quickly. There isn
19.
by ZeroSolstice 3y ago
80% of being a good security engineer is knowing the big picture, all the parts and how they work. The correlation that LLM produces has no value if its not actionable. You are the one that determines the weights, values, and features that
20.
by ZeroSolstice 3y ago
Well two things: 1. Maybe you aren't the intended audience for this. 2. They are lecture notes and homework which are typically distilled from a textbook or industry experience topic. These are helpful items for someone teaching or spe
21.
by ZeroSolstice 3y ago
The lectures aren't a how-to guide. The items that are explained are to provide reference to the lecture material. For example the apache2 setup could just as easily be nginx, lighttpd on Windows, FreeBSD, Redhat, etc. Its explaining t
22.
by ZeroSolstice 3y ago
Says its lecture notes right at the top. > "Think of these lecture notes as a living textbook that strives to strike a..." Why would you need to watch a video on lecture notes?
23.
by ZeroSolstice 3y ago
Can you elaborate on what you would add for the cloud, AD, or vulnerability content? In my perspective what you listed are simply tools and vendor offerings of which reading the documentation or getting a vendor specific certification is th
24.
by ZeroSolstice 3y ago
At what point though is this just consulting? Since everyones risk tolerances are different and may or may not have good network architectures or software practices how would this apply generally to other companies or networks?
25.
by ZeroSolstice 3y ago
I would add the additional problem of CVE's being devoid of any useful information which lead to generic tests being created by vulnerability scanners as they have the same lack of insight as everyone else thats trying to patch the iss
26.
by ZeroSolstice 3y ago
Shouldn't your analysis/understanding show that upgrading the library is enough? If a CVE or vulnerability scanners test isn't telling you the problem that needs to be solved upgrading a library or anything else won't ma
27.
by ZeroSolstice 3y ago
What sources do you have to cite on development costs and regular maintenance? Autonomous trucking is an add-on to existing trucks which are already being built regularly. We already perform road maintenance and account for it in local, sta
28.
by ZeroSolstice 3y ago
This is my thinking as well. We need to build for the task at hand not try and integrate into what we already have. The first sentence in this article is where the failed assumptions are. "Trucking was supposed to be the ideal firs
29.
by ZeroSolstice 3y ago
Unfortunately we didn't expand upon thinking about multiple intersections and their traffic lights being a network. We have fixed programming of lighting schedules that don't change unless a traffic survey is done. In most cases
30.
by ZeroSolstice 3y ago
Stop being moronic. Different transportation mediums exist for a reason. Trains in the US are currently suited for long haul transportation at which they excel at. We already tried running rail lines to warehouses and distribution centers a

More ›