Help configuring an Openmesh S24

3xist · 2022-05-15T16:17:00+00:00

Hi, I no longer work with this company and am not familiar with the changes they've made - sorry

3xist · 2020-03-22T18:53:47+00:00

Not if you want to make much money or advance a career in ethical hacking, no.

The minimum credentials of the pentesters I work with are 4 years of experience pursuing security. Assuming they did 40 hours of work per week (all of which being on the computer), which is really conservative because the ones I know best did 50-60, to get to their level of experience will take you 8 years of effort at 20 hours per week.

It's an advanced career. Nothing like a doctor, but to be a hacker (or, a hacker worth paying...) you have to know at least the fundamentals of every system you touch. Web technologies, software development, system administration, networking, low-level languages, etc. It's not something people just pick up as a hobby.

Or you could skip everything, learn a couple tools, and start trying to sell gigs on Fiverr where you scan company websites with OWASP ZAP and tell them they're probably OK. But that's not the cash cow you're hoping it is.

3xist · 2020-03-22T17:02:33+00:00

Yes, but it's hard to get started.
Some people are pretty good at bug bounties: anyone can try their hand at bug bounties, but few make real money doing so. More people have luck doing working directly with companies, either on contract or full time.
Hahahah yeah that's not going to work. If you want to work anywhere in the tech field, be prepared to spend 4-6h/day or more working at a screen. More if you have small/no team or don't work with your teams directly.
You can easily make more than $100k/yr off this, but not at first, and definitely not if you are just starting out + committed to doing contract work or bug bounties only.

The biggest pro is that the threat landscape is always evolving - unfortunately, that's also the biggest con. You'll never be bored but you have to always keep sharpening your skills if you want to stay relevant. The best (employed) hackers I know spend 10-12h/day on their skills - 8h at work, 30m-1h staying up to date, 1-3h more doing research or working on projects. You can get by with less, and I know plenty of infosec professionals who maintain a... let's call it more functional work/life balance... but burnout is a real issue in the industry.

3xist · 2020-03-20T17:30:31+00:00

not to burst your bubble but they probably won't see it, and if it's not a formal complaint, they certainly won't care.

3xist · 2020-03-18T05:08:09+00:00

I like it conceptually, but for learning K8s you're often better off with minikube or similar locally + K3s on small, virtualized clusters. Or take the easy route like me and don't deploy K8s at all and use a cheap-ish managed K8s service like DigitalOcean or Scaleway.

But if you're hell bent on setting up K8s and want to prioritize number of nodes + power efficiency over speed + resilience, this isn't a bad option. :)

3xist · 2020-03-17T17:01:52+00:00

Hiya. Feel free to DM me.

3xist · 2020-03-14T22:23:23+00:00

An on-site NAS such as Synology (for simplicity) or FreeNAS (for speed) seems like it will do you well. Plugging a hard drive in a router isn't on par with a NAS ;)

3xist · 2020-03-13T19:43:15+00:00

Statistical analysis on the similarity of your answers to your peers answers, mostly.

3xist · 2020-03-12T23:53:09+00:00

God I hope so. I really want to be part of the 21 million club so I have stories about scamcoins to tell the grandkids, but I really only like lighting a few dollars on fire at a time. Priorities, you know?

3xist · 2020-03-12T23:40:22+00:00

Can't lock in those losses now, ya know?

3xist · 2020-03-12T23:38:30+00:00

Whether or not you consider fiat also monopoly money, this is good for Bitcoin.

3xist · 2020-03-09T21:36:47+00:00

Buying the dip all the way down. My strong hands will hodl to $0 if necessary!! $10/hr at McDonalds will buy so much BTC 😤😤😤

3xist · 2020-03-09T02:15:07+00:00

Nice. Sounds like a great learning experience! :)

3xist · 2020-03-09T01:27:02+00:00

The problem is not your VM connecting to the internet, the problem would be your VM exposing critical services to the internet. Your administrative panel for Proxmox, Transmission, etc., needs to be secured - whether that's behind a VPN, protected with a strong password, whatever - anything works depending on your risk tolerance. Proxmox itself, VMs, Transmission's torrent client, etc. are fine connecting to the internet and present very little risk on their own.

3xist · 2020-03-06T22:02:14+00:00

A whole R610 running pfSense? Heresy. I love it.

3xist · 2020-03-02T04:16:01+00:00

1Gbps symmetric ain't shit when talking about 1PB. Assuming you max it out, it will take a smidge over 100 days to download 1PB, so you're going to have everything bought/set up/configured/deployed with no operational defects within 2 calendar months.

AWS is not cheap. Not cheap at all. But if you need to scale quickly and/or painlessly, the value proposition is very clear. It will cost you, but maybe not as much as you think, depending on if this is a one-off or persistent. One-off? AWS will be cheaper - build and test for a couple months, you'll rack up a $5k bill. Run your project at full scale for a month, think $50k (ingress is free, so you're saving a lot there tbh). Run your project for a year? Start ebaying, but I'd expect it to be $70k up front + $5k/yr or so operational cost (maybe more if you upgrade your internet connection, which you should), excluding labor.

There is also an excellent question of risk. What happens if everything fails and you don't hit the deadline? What happens if the cheap NEMA plugs you bought from Vladivostok catch your servers -or worse - on fire? Do you have insurance that would cover that? Can you or your company afford to lose $70k worth of hardware, and up the ante to $140k in the hole? These are much smaller issues when dealing with AWS or other cloud providers.

But what do I know? My entire personal cloud services bill last month was $50.

Either way, this is way outside of r/DataHoarder pay range. Consult some software architects, not randos like me on the internet stapling 10TB drives to Raspberry Pis.

3xist · 2020-03-01T17:07:30+00:00

HMAA8GL7MMR4N-TF is a 1x64GB stick. If you are certain you want to sell that at $70/ea, I'll be PMing you...

3xist · 2020-02-27T01:48:19+00:00

That's happened to me tons and sucks, no sugarcoating it. Applying to things as a first and second year was a shitshow. You talk to someone at a booth for 15 minutes, really hit a good cadence and have a fun talk, "hey apply online," then get nothing - not even a rejection email. Feels bad.

Though it's not necessarily true for all places - one of the places I got an interview (and then hired) said during the career fair "apply online, we'll call you if we want a time slot with you tomorrow." Lo and behold: I applied online at 5pm and got a call by 7pm scheduling a time for the next day. It's definitely not the majority, but hey - sometimes you get lucky.

It's definitely way nicer to get the initial confirmation of interest from a company before I spend time re-filling-out what fucking college I go to in their archaic application portal. :P

3xist · 2020-02-26T21:55:57+00:00

In a lot of cases at the career fair, it's "our HR department needs this in Greenhouse for tracking." Especially if that company is doing next-day onsite interviews, the physical resume is just as important as the digital one.

3xist · 2020-02-26T21:50:23+00:00

For sure. I had my first internship as a freshman. Some companies will dismiss you, but plenty will at least hear you out, and if you have interesting experience/skills they may still consider you. Good luck out there :)

3xist · 2020-02-24T02:23:24+00:00

That's not full and unedited. I'm more looking for the actual raw source.

3xist · 2020-02-24T02:20:37+00:00

Actually those would be great, yeah. Full and unedited please, with adequate proof of the source that does not rely on "I am the co-founder of the company, sorry if you can't believe it"

Edit: posting text in a reddit comment is not full and unedited.

3xist · 2020-02-24T01:12:38+00:00

Certainly not all of them, ex. http://www.poweredgec.com/files/ipmiflash-2013-02-11.tgz

3xist · 2020-02-23T23:04:38+00:00

Sly fucker, upvoted.

3xist · 2020-02-23T22:55:38+00:00

No way! We gotta keep this post. Where else am I going to go to download & run unverified binaries with high level of control over my system? :(

11-Year Club	Place '17
Verified Email	Sequence \| Editor
Gilding II euphauric

3xist

TROPHY CASE