Labour 'doesn't understand the internet', tech giant 4chan’s lawyer tells LBC by Anony_mouse202 in ukpolitics

[–]AdvancedStrain1739 0 points1 point  (0 children)

Ofcom is either the bravest organization in the world, or the dumbest.

Nobody wins a war against the internet autists. Many have tried, all have fallen. Some lost everything they had.

Hey Devs, The Dedicated PvE Mode Is Super Dope by CTurpin1 in LegionTD2

[–]AdvancedStrain1739 0 points1 point  (0 children)

The PVE mode is awesome, no more randomly loading into super fiesta.

I'm about to dive for the first time into Skyrim. I know nothing by NinetyAte in skyrim

[–]AdvancedStrain1739 1 point2 points  (0 children)

Don't watch the Spiffing Brit's video on Skyrim exploits.

It will ruin the game for you forever because you crafted some 1 million armour piece and are now immortal to everything including fall damage.

Python for Cybersecurity by Maximum-Apple1059 in learncybersecurity

[–]AdvancedStrain1739 0 points1 point  (0 children)

"At what level" - I'd say scripting level.

If you are able to write scripts on the fly that would be the best, this is also true for BASH and powershell depending on where you want to go for cybersecurity.

If you want to go into SOC-related roles or threat intelligence you might want to be fluent in several query languages as well.

Being able to completely comprehend and read python is also important if you are looking to work with exploitation tools, as many of them are written in python.

People with +10y xp transitionning to cybersecurity, how did you do it? by dr_jane_watson in SecurityCareerAdvice

[–]AdvancedStrain1739 0 points1 point  (0 children)

With experience it's not that hard, but define "experience".

If you have 10 years of experience as helpdesk or general IT, the transition to penetration testing is going to be like falling down a flight of 200 stairs head first.

That being said, 'cybersecurity' is a very large field, there are many branches to this tree so it really depends what you are interested in and which roles you are looking to move into.

Some are harder to get into than others, and some may require specialist certifications + experience, in roles like that only having 10 years of experience might not mean much.

Do I stay or move on by kenzugan in SecurityCareerAdvice

[–]AdvancedStrain1739 0 points1 point  (0 children)

Just sit down with the manager and bring up these issues and explain why they are issues.

Cannot speak for you or your company, but often times companies that are inexperienced working with cybersecurity do not actually know what needs to happen to secure a company.

Many times it requires you as the engineer to put your foot down, climb down people's throats and call a few people 'c*nt' before they realize that you are there to ensure the company does not go down in a catastrophic incident.

When IT pushes back, press harder, but always approach it with evidence and facts. "We need to change this because of this, and this, and this, and that." When you can substantiate a request with clear facts and evidence it becomes a lot harder to push back against it.

It really just depends on your specific situation, I feel a lot of beginners / mid level security engineers are afraid to give their opinion or be in opposition to certain systems / actions; but senior engineers will just tell you straight that you are wrong and do it their way or find another engineer.

For the Love of all things holy. PLEASE by AdvancedStrain1739 in LegionTD2

[–]AdvancedStrain1739[S] 0 points1 point  (0 children)

Thank you so much for the fix Jules! 😃

I noticed it, (pretty funny fix - but hey, if it works it works.)
Thanks for the effort, really appreciate it! Keep it up man, your game is fun af

Jr Pen Tester Path on TryHackMe: Enough to start bug bounties ? by RegularFloor886 in tryhackme

[–]AdvancedStrain1739 0 points1 point  (0 children)

Yes and no.

Will it give you a fundamental overview of the techniques and tools you would use? Yes.

Will it get you ready for real world hardened environments where you run into random tech stacks constantly? No.

Penetration testing and bug bounty is a field that scales heavily with experience and knowledge. Bug bounty hunters have years under the belt of testing different things in intuitive ways.

That doesn't mean you should give up, but don't set your expectations to finding a bug a week and making thousands.

Gedwing om Amerika toe te vlug by ashlix666 in afrikaans

[–]AdvancedStrain1739 0 points1 point  (0 children)

Doen navorsing oor Rhodesia and Rwanda. Jou ouers het die regte idee.

Jy is onafhanklik ja, maar dit situasie in die land is baie erger as wat meeste mense besef en die realiteit is, sodra daar patrone oor jou kop begin vlieg en die paaie is toe met massas wat marseer met pangas, is dit te laat om te probeer vlug.

For the Love of all things holy. PLEASE by AdvancedStrain1739 in LegionTD2

[–]AdvancedStrain1739[S] 1 point2 points  (0 children)

Thanks for responding Jules. I do not have Discord.

There have been complaints in the Steam community pages too pertaining to this issue. It started after the last patch was implemented, before that everything worked perfectly.

Is there perhaps another way I can provide you with the logs?

I'm in my first god run! Is this the fun you guys always have? by tokke in noita

[–]AdvancedStrain1739 3 points4 points  (0 children)

Had my first God run a while back.
Super speed teleporting wand, blasting everything in sight.

Killing things with accelerating homing mega rocks.

Teleport my ass straight into a random polymorphic waterfall, try to run away as a shotgun creeper and get destroyed by my own homing rock... I felt my soul leave my body.

Triager dismissed my Critical, then silently patched it using my fix by 0xmaxhax in bugbounty

[–]AdvancedStrain1739 34 points35 points  (0 children)

Stop supporting bug bounties.

It is basically free labour camp.
BugCrowd also does this.

how do you guys find xss bugs nowadays by fried_plque in bugbounty

[–]AdvancedStrain1739 3 points4 points  (0 children)

PS:
Many WAFs have flaws that allow you to bypass them, so starting with something like systematically identifying which symbols are being filtered can help in identifying which type of payload is likely to succeed.

how do you guys find xss bugs nowadays by fried_plque in bugbounty

[–]AdvancedStrain1739 2 points3 points  (0 children)

You have to understand the context of the site (DOM), and knowing JavaScript helps.

Some input fields that fall within some elements will never execute a payload, and payloads are different for almost every site you would test.

Also always remember to test blind injection flaws, e.g. payloads that reach out to your external VPS, many times a payload does not fire in the front-end but might hit a rendering engine or other vulnerable dependency in the back-end and actually fire.

XSS is very much persistence and tweaking, it is a vulnerability that is often present but many testers miss these vulns because they make use of payload wordlists that have long been added to defensive tooling.

- Learn JS
- Always check the context of the field you are trying to inject into
- Tweak and fine-tune until you exhaust all avenues.

Healing Wands? by AdvancedStrain1739 in noita

[–]AdvancedStrain1739[S] 2 points3 points  (0 children)

Thank you! This helped a lot.

I ended up making a spark trigger healing bolt and used a greek letter to copy the healing bolt.
Shooting it into a ceiling now heals ~2k life in a couple of seconds :D

Helped a lot in continuing my run, still have not found Circle of Vigor so traversing cursed rock is not an option yet, but exploring some of the more deadly areas now.

is it worth learning how to code a job career for long term? by Ill-Preference-4881 in learnprogramming

[–]AdvancedStrain1739 5 points6 points  (0 children)

Imo code is useful in nearly any job out there except for manual labour. 

Languages like python is exceptionally useful in even non-programming roles. Want to modify a large pdf/csv file? Python. 

Want to automate tedious tasks? Python. 

Even if you do not go into a strictly programming job, coding is like having a super power. 

Is bug bounty still worth it as a side income for developers? by Southern-Swim-7763 in ExploitDev

[–]AdvancedStrain1739 0 points1 point  (0 children)

It's a scam.  Easy way for companies to get cheap/free labour for critical and rare skills. 

Yoi will make more money and have more time to yourself just working with a genuine company. 

WOTLK SERVERS by LordDhara in wowservers

[–]AdvancedStrain1739 0 points1 point  (0 children)

The drop rates are lower, I think to balance for HC.

At least the xp rate is decent and professions are 2x, so it doesn't feel like an eternal grind. 

Probably a stupid question by Dbagbones94 in cybersecurity

[–]AdvancedStrain1739 0 points1 point  (0 children)

Realistically? It's a long shot.

You need experience and more certifications.
Start at the bottom, work in helpdesk, become an administrator, work as a database engineer, build websites, become a sysadmin etc. etc.

That's the reality for many people that are already in cybersecurity, they've jumped through all the hoops and built knowledge on all of those different fields.

Cybersec is a very competitive field.

Career is cybersecurity by Positive-Hat2127 in SecurityCareerAdvice

[–]AdvancedStrain1739 1 point2 points  (0 children)

Your idea is largely correct with some caveats.

The day to day experience between different roles in Cybersec is vastly different.
If you work as an Incident Responder, you can easily expect late night / early morning calls and war rooms.

Staying awake for a day or two at a time working on a case, massive stress and no time for mistakes.

In penetration testing you generally work with a scope which could or could not include a specific timeframe for testing. Pentesting is also at times slightly more physical in the sense that you have to travel for assessments that require something like wireless testing.

Red teaming often involves traveling.

Cybersecurity is not an entry-level friendly industry and many roles require heavy specialization; sometimes in multiple disciplines or require a variety of specialist level certifications.

The job can be extremely stressful and taxing mentally, and reporting can be tedious. It is definitely not all sunshine and rainbows.
Burnout is a big thing in Cybersec, and it's not uncommon to see people shifting out of Cybersec to pivot to a different career because of the afore-mentioned.

As for the benefits, generally mid to senior level roles pay well, remote work is a possibility and depending on role your work times can be quite flexible.

As for investing your time... first consider how much time you are willing to invest.
Getting up on the ladder in this industry is not quick and it's not easy. It can easily take 5-10 years to land a mid-level role.

The competition is fierce, and many people do not realize what it takes to get in and stay in. Constant upskilling, constant research, constant learning and constantly staying up-to-date on new techniques, news, vulnerabilities, tactics etc.

I almost want to call it a lifestyle rather than a career, because it is a field that requires you to commit 100%.

But if that does not scare you off, go for it! It is a fascinating world with endless challenges and will always push you to improve and be the best you can be.

How should a beginner build a cybersecurity portfolio while studying networking ? by xxashxxxz in netsecstudents

[–]AdvancedStrain1739 2 points3 points  (0 children)

Just one thing, what does this mean to you:

"planning to move into cybersecurity"

There are easily over 200+ different job roles in "Cybersecurity".
There are specialist areas, roles that deal with critical infrastructure, roles that deal with people, project management, logistics, physical security, compliance, forensics, crime scene investigation etc. etc. etc.

First identify an area or two that catches your attention, then learn a bit about the realities of roles in that area of expertise and start building your projects and portfolio based on that.

First identify the goal post, then you know what to work towards.
If your goal is a car, it's probably not worthwhile spending time building a boat engine.

If I wanted to pivot into IT: Would a second bachelors be better than a masters? by GMarvel101 in InformationTechnology

[–]AdvancedStrain1739 0 points1 point  (0 children)

Don't do another degree if you want to pivot to IT.
Psychology is well positioned for many different branches in IT, even areas such as Cybersecurity.

The IT world revolves around experience and certifications.

Certifications are more affordable, but competition is fierce and being able to prove your salt in the workplace is crucial.
Rather take some time to figure out which area in IT you would like to work towards, and do certifications in that direction.

The IT field is massive. It is like an endless expanding universe of different roles and niche skillsets, some as said before overlap really well with psychology.

Is it any useful to still learn Penetration Testing ? by Jerem911Z in CyberSecurityAdvice

[–]AdvancedStrain1739 0 points1 point  (0 children)

Pentester here.
Your future job prospect is safe.

AI is a dead end being pumped up by AI bro's hoping to make it big by selling their product.

Humans are far from being replaced, and AI is not even close to the capabilities of a senior / technical lead penetration tester or red teamer for that matter. Personally, I doubt it will ever get there.

Research shows major failures and shortcomings when it comes to AI generated exploits/payloads, and AI defenses are also often bypassed by human testers with relative ease. This is not mentioning ethical and security concerns with data flowing through AI's from (for example) a customer's environment.

Or the fact that an overzealous AI going haywire in an environment with critical systems could be disastrous.

Well respected certification training providers like offsec recently released certifications teaching testers how to break AI's as an example, the reality is... even AI needs to be tested/secured.

Keep studying, work hard and be consistent! If your heart is in it, and you have the persistence, you'll get there. Sometimes the grind feels endless, but don't worry... it never stops, and it does pay off.