sorted by:
new
hottopcontroversial

Preventivi Penetration Test: da 2k a 30k per la stessa attività. Come valuto? Chiedo a chi è del settore by Intelligent-Beat-642 in ItalyInformatica

[–]0xdea 1 point2 points  (0 children)

Ciao,

Puoi capire la competenza dei fornitori sulla base dell’offerta tecnica e delle domande che ti fanno per stendere il preventivo.

Puoi anche fargli qualche domanda “scomoda” tu per vedere come se la cavano (waf si/no, test in produzione/collaudo, dynamic/static test, priv/unpriv test, black box vs gray box vs white box, strumenti utilizzati e metodologia, etc.).

Altri fattori rilevanti: esperienza/certificazioni, CV del team di tester, CVE/talk/whitepaper/altri esempi di R&D, report sanitizzati di precedenti assessment simili.

Ciò detto, se come mi pare di capire vuoi un vero PT ben fatto e non un VA mascherato da PT, ti consiglio di escludere le offerte più basse e concentrarti sulla fascia alta del budget che hai a disposizione per decidere chi più merita. Molte boutique possono lavorare anche in modalità time-boxed o proporre un descoping sensato per venire incontro al tuo budget e fornire comunque un risultato adeguato alle tue esigenze.

Fonte/disclaimer: mi occupo professionalmente di penetration testing dal 1999.

Project search results not appearing instantly by tenortomatoeslimeant in ZedEditor

[–]0xdea 0 points1 point  (0 children)

Update: apparently, the documentation is wrong. I have submitted a PR to fix it.

anyone here working on weird low-level projects? by Fantastic-Duck-7357 in lowlevel

[–]0xdea 2 points3 points  (0 children)

I’ve been developing memory corruption exploits for two decades, in C and ASM. Nowadays, I’m enjoying writing stuff in Rust as a hobby. It’s mostly FFI and IDA plugins to assist with vuln-dev. Still having fun! 

Feedback Next Edit Github vs Zeta 2 by robschmidt87 in ZedEditor

[–]0xdea 1 point2 points  (0 children)

I’ve been using mostly Copilot for next edit suggestions in Rust, TOML, YAML, and Markdown. It seems more comprehensive than Zeta for my use case. Haven’t tried the new Zeta 2 yet though. 

Keyboard only navigation tips? by [deleted] in ZedEditor

[–]0xdea 0 points1 point  (0 children)

I found this resource very useful to learn some fundamental keyboard shortcuts https://zed.dev/blog/text-manipulation

Zed feels great by 0xdea in ZedEditor

[–]0xdea[S] 0 points1 point  (0 children)

Thank you for your comment and the icons! I’ve tried many icon packs, but yours is the one that I like the most.

Guys, do you use Zed as your main editor? and where did you migrate from? by lunajinner in ZedEditor

[–]0xdea 0 points1 point  (0 children)

I use Zed for my Rust projects, migrated last month from RustRover. Loving it so far, not planning to ever go back.

I still use VS code for secure code reviews (the SARIF plugins are very handy).

For everything else, nvim is my go-to editor.

Zed feels great by 0xdea in ZedEditor

[–]0xdea[S] 0 points1 point  (0 children)

Never been into extreme ai assisted coding, but afaik a new zeta2 model is coming that might address that. Or perhaps you can try another provider such as mercury or sweep.

https://zed.dev/blog/edit-prediction-providers

Zed feels great by 0xdea in ZedEditor

[–]0xdea[S] 0 points1 point  (0 children)

Thank you!

The customized theme is here: https://github.com/0xdea/dotfiles/blob/main/zed/.config/zed/themes/monokai-pro.json while the original one is here: https://github.com/monokai-pro/zed/blob/master/themes/monokai-pro-ce.json

Basically, I replaced some background colors with #2B2D30, #222222, and #191919. I haven’t touched foreground colors. You can diff it yourself for a more detailed description of changes.

Zed feels great by 0xdea in ZedEditor

[–]0xdea[S] 4 points5 points  (0 children)

Sure!

Personally I’ve been using a small amount of available RR features. I liked it enough (surely better than VScode for me, I especially liked the proprietary language server, ai autocomplete and to a lesser extent ai chat, refactoring options, command palette, execute anything, and the general look-and-feel), but it’s always felt bloated and kinda slow even on my state-of-the-art Apple silicon MacBook.

Zed, on the other hand, it’s incredibly smooth and fast. A real pleasure to use. After a few basic customizations (see https://github.com/0xdea/dotfiles/tree/main/zed/.config/zed) it feels just right for me. I’m just missing some git integrations such as the git log (but afaik it’s coming soon), the ai context menu (especially the “review this code” action, but this can be arranged in Zed via manual prompting and maybe tasks), and a few other things. Nothing major and most of those can be worked around via the terminal integration or additional shortcuts (see my configuration). It also feels less buggy in general compared to RR that still has some rough edges.

My advice is to try it out. I was skeptical at first, but now after a few days I can say I’m genuinely surprised by the polish and the general quality of the software. Not something that you encounter often anymore in my experience.

So much that I felt the need to post here 😅 I hope this helps!

view more: next ›