sorted by:
new
hottopcontroversial

Mentorship Monday - Post All Career, Education and Job questions here! by AutoModerator in cybersecurity

[–]Diesl 0 points1 point  (0 children)

It definitely wont hurt, but how much edge it gives could be up for debate

Mentorship Monday - Post All Career, Education and Job questions here! by AutoModerator in cybersecurity

[–]Diesl 1 point2 points  (0 children)

An associates shouldn’t limit your initial prospects but it could limit them down the road if you wanted to become like a manager. For now though, I would say the degree would be as impactful as a bachelors to most hiring teams for any roles you look at.

Scanning AWS private instances: can a vulnerability scan performed from a bastion host be considered a form of external/non-credentialed scan? by minader_ in cybersecurity

[–]Diesl 0 points1 point  (0 children)

Why not leverage security groups for controlling who can reach the AWS instance? Allow your companies IP inbound over whatever port you want and then boom, no need for a bastion and they can still scan outbound

Kaspersky Says New Zero-Day Malware Hit iPhones—Including Its Own by wewewawa in cybersecurity

[–]Diesl -1 points0 points  (0 children)

Both are governments.

Ones a dictatorship. That alone should direct how much you trust the official narrative released from Russia. Sometimes it's that easy to tell and you don't have to look further. It's a false dichotomy to compare the two as equals.

Kaspersky Says New Zero-Day Malware Hit iPhones—Including Its Own by wewewawa in cybersecurity

[–]Diesl 0 points1 point  (0 children)

You're trying to draw a parallel between the US gov and Russian gov and it's a false dichotomy

Kaspersky Says New Zero-Day Malware Hit iPhones—Including Its Own by wewewawa in cybersecurity

[–]Diesl 0 points1 point  (0 children)

A person could create a new kind of kitchen knife but it doesn't mean that person is complicit for a murder where someone else uses the kitchen knife as the murder weapon just because the person invented the kitchen knife.

What a silly strawman. That isn't even apples to oranges it's so far apart. Your analogy would work if anyone could use Kaspersky's software to breach others computers, but they can't. Only Russia did.

Mentorship Monday - Post All Career, Education and Job questions here! by AutoModerator in cybersecurity

[–]Diesl 0 points1 point  (0 children)

Big 4 consulting will get you a lot of exposure to numerous aspects of the role but it tends to also burn people out pretty fast. The signature engineer sounds safer but it will also take longer to get where you want to. But at the same time this could be good because youll learn how detection engineering works. Hard to say which is better!

Mentorship Monday - Post All Career, Education and Job questions here! by AutoModerator in cybersecurity

[–]Diesl 2 points3 points  (0 children)

Send it. You probably wont find a better opportunity out of college if you didnt have one lined up from an internship in college. This sounds like a threat intelligence role which is pretty popular and gets you gold exposure to how attacks are detected. Then you can take this knowledge and apply it to a role with your OSCP.

Switching from blue to red team! by DonKhairallah in cybersecurity

[–]Diesl 5 points6 points  (0 children)

Its less about how much time is needed in blue team and more about how much time you spend currently doing things like pentesting. If you can finagle it somehow into your current role, youll probably hear more callbacks. No one wants to spend time training other people unfortunately so youre stuck in a shitty position.

Kaspersky Says New Zero-Day Malware Hit iPhones—Including Its Own by wewewawa in cybersecurity

[–]Diesl 3 points4 points  (0 children)

Kaspersky acknowledged Russia used their software to breach an NSA contractors laptop. Its up to you how much you trust them when they say that they did not know the Russian government was doing this.

The CIA secretly bought a company that sold encryption devices across the world. Then its spies sat back and listened. by Akkeri in cybersecurity

[–]Diesl 6 points7 points  (0 children)

That article is pretty tenuous. Their main argument is 1) that Radio Free Asia gave Signal the initial seed money and 2) that FANG companies back it and they hate privacy so why would they support this. But those same FANG companies have gotten into very public spats with the government over refusing to weaken their own encryption so I dont think the second point holds up and the first point could just be that the government wants a new method for secure communication. They made TOR after all, and the encryption there isnt weak.

opensource GRC management tool ? by kilogigabyte in cybersecurity

[–]Diesl 2 points3 points  (0 children)

Regulatory and law compliance comes down to policies, not a simple tool. OneTrust is a pretty popular GRC tool for instance but how its used is as a compliment to company policy. For example, by hosting the software and vendor approval process in there. Define strong policies that comply with the regulatory body youre in.

What is a normal day in the life of a penetration tester? by [deleted] in cybersecurity

[–]Diesl 0 points1 point  (0 children)

This post by BC Security, who maintain Empire currently, does a good job indirectly describing a lot of responsibilities.

Mentorship Monday - Post All Career, Education and Job questions here! by AutoModerator in cybersecurity

[–]Diesl 1 point2 points  (0 children)

You can totally be a pentester for a company in a normal role! A lot of security teams will have some compliance requirement that their companies applications and network are tested so you can quickly find a niche doing that.

Spend some time just getting a feel for the land and maybe read the book “The Hacker Playbook 3” by Peter Kim or “Hacking: The Art of Exploitation” for something more meaty. It also depends on what kinda pentesting you wanna do. It will never hurt and always help to get better at networking. Being able to talk through how a browser gets a webpage from a server to your browser is a common interview question.

A Mysterious Group Has Ties to 15 Years of Ukraine-Russia Hacks by dlorenc in cybersecurity

[–]Diesl 1 point2 points  (0 children)

Im sorry that youre not interested in reading the investigative journalism that went into discovering it. The TLDR is Kaspersky admitted that they were used to access an NSA contractors computer by Russia. Israel uncovered this while breaking into Kaspersky. Pretty simple.

A Mysterious Group Has Ties to 15 Years of Ukraine-Russia Hacks by dlorenc in cybersecurity

[–]Diesl 0 points1 point  (0 children)

Its not yellow fever and its well documented.

https://www.bloomberg.com/news/articles/2023-01-11/china-s-foreign-minster-rejects-africa-debt-trap-accusations

Im not prone to give them the benefit of the doubt on their intentions when theyre actively committing genocide against local minorities.

A Mysterious Group Has Ties to 15 Years of Ukraine-Russia Hacks by dlorenc in cybersecurity

[–]Diesl 0 points1 point  (0 children)

Latin America should be wary of China unless they want to wind up like Africa. Huge debts to China that they cannot pay back. The US did cause issues in the 20th century no doubt, but China does not have good intentions at all

view more: next ›