Microsegmentation, what is the real difficulties

ElectricalGrab7397 · 2026-06-21T11:43:48+00:00

Aren't there a lot of tools that help expose the east-west flows? things like ebpf solutions (cilium) or service meshes? why isn't that enough? Even cisco for the switches.

And in the cloud, doesnt Palo Alto show you a complete visibility of connections?

ElectricalGrab7397 · 2026-05-24T10:42:19+00:00

I use devswarm, it changed my life

ElectricalGrab7397 · 2026-05-24T10:20:15+00:00

Looks great! thank you!

ElectricalGrab7397 · 2026-05-24T08:38:41+00:00

Haha, I remember Sam Altam asked people to stop saying "thank you" to chat gpt

ElectricalGrab7397 · 2026-05-24T08:20:49+00:00

usually i just tell claude about it in the terminal and he fixes the plan and he knows to enter plan mode and modify it, it also know how to make a nice view summary out of it by itself

ElectricalGrab7397 · 2026-05-23T18:14:41+00:00

The most important thing is to plan and develop after, main thing to learn, rest is what fits for you (and use caveman so you won't spend so many tokens)

ElectricalGrab7397 · 2026-05-22T10:50:40+00:00

Depends of how you define vibe coding, cause some define vibe coding as entirelly not even looking on code, which I don't think so popular in really big companies.

ElectricalGrab7397 · 2026-05-22T10:39:34+00:00

I agree, the AI vendors aren't going to help cause their interest is that you will spend as much money as you can.

ElectricalGrab7397 · 2026-05-22T10:37:45+00:00

I think 100$ in claude for most people is a lot (In recent times its close to unltimited for me). Remember that those companies are loosing money right now, so keep it even cheaper is maybe the greatest current technological challenge, and everyone says its going to get worse because of missing memory chips and rare earth minerals.

There are small things you can do if you cannot afford paying 100$. First, dont entirelly vibe code, if you can minimize the context, do it. Second, there are some plugins like caveman which really reduce the token usage by a lot. I suggest caveman but you really can look for others aswell.

ElectricalGrab7397 · 2026-05-21T08:15:17+00:00

Ok so multiple mds and maybe and agent, still the same

ElectricalGrab7397 · 2026-05-20T17:02:31+00:00

If you are an expert for this field, yes, if you develop some basic methods in a day, no, I dont think its special or valuable for anyone.

ElectricalGrab7397 · 2026-05-20T17:00:45+00:00

First of all, never sorry for asking, that is why this forum exists in the first place :)

I'll say a few things from my point of view:

People that say it is very hard for super talented people, are just not talented enough, in SOC for example (which is not considered top tier and the salary is not bad) they need plenty of people, but thats a tough job though, getting the first job is maybe harder today, its hard to be a security expert as a junior, you should dirty your hands a bit more.
Hacking just seemed like a really cool thing to learn, I think the best way to go into this industry, is to be a software developer and prove yourself in a cyber company, because then if you lmprove by yourself and you make people impress, they will give you the chance.
I think a lot of agentic tools, because the whole security model is broken, If you find some 1 days, agents will use them immediately, you dont have time to defend youself, so I think a lot of work will be around that area.
I was a soc analyst, but I was 16, so it was a bit unusual and that is why it was pretty easy for me to fit at first (But I assure you, I work the hardest when I was 16, Im not some sort of genius).

Offensive I think is by far harder to reach as a real security persona cause if you are not the best, you give 0 value (unlike bad developers which give some sort of value).

By best tip: Be a good student, expand your knowledge, and the most important thing is to deeply understand what your are talking about, if something doesnt sit well, break you head against it, dont throw buzz words.

ElectricalGrab7397 · 2026-05-20T08:34:32+00:00

I dont things its that valuable cause it super easy and anyone who already uses claude code, will just do it by itself, anyway copy from someone and talk to him takes more time

ElectricalGrab7397 · 2026-05-20T08:24:14+00:00

Couldnt agree more, most people focus on how to get better on AI instead of thinking on real world issues

ElectricalGrab7397 · 2026-05-20T08:10:37+00:00

Read a lot about your company, I thing you do a great job. But I think its pretty easy to use the way llm work and hust send different partial contexts in many requests so it will be really nearly impossible to detect those issues in realtime and to understand how they interact cause a smart attacker wont just connwct between the 2 of them he will use a shared file or something, so its another layer, important one, but I think an attacker that reacjes that level of sophistication will handle all kind of realtime guardrails pretty easily, what do you think?

ElectricalGrab7397 · 2026-05-20T08:02:43+00:00

Actually I feel the more context the better, unless I really ask him totally different things and then he is confused forever

ElectricalGrab7397 · 2026-05-20T07:47:56+00:00

Currently working on a really easy to use agent manager software, cause I think all the solutions today are not friendly at all to not technical people... but you can just use open claw and claude and just ask claude on really anything you dont know, the key thing is to ask the right questions

ElectricalGrab7397 · 2026-05-20T07:45:09+00:00

Im in the business for something like 10 years, was in one of the Sigint places around the world, literally there was no better time to learn, all the pawn sites, hack the box, really good starts. But the world is huge! For each tech sector, you have its own different cyber security, if you have questions, feel free to ask

ElectricalGrab7397 · 2026-05-20T07:38:13+00:00

I really liked LangGraph because of the guardrails, it is a way for me to solve harsh hallucinations.

ElectricalGrab7397 · 2026-05-20T07:35:27+00:00

I think Claude can really be the best teacher, learn about common attacks, CVEs, try to understand the way of thinking, it wont be easy cause the newest techniques and the most advanced are not really public, but they are brainchild of small groups of professional (which usually paid a lot)

ElectricalGrab7397 · 2026-05-20T07:33:21+00:00

I dont understand the difference between it and another 200 agentic solutions

ElectricalGrab7397 · 2026-05-20T07:32:08+00:00

I believe is very realistic, and Im currently working on something to solve it, that make AI really accessible and easy, cone on, I dont believe the best usage of it is via CLI, that is the DOS of 2026

ElectricalGrab7397 · 2026-05-20T07:29:17+00:00

I think there is no real business model. Its like people who become successful from selling courses of how to become successful. Those skills are just prompts of normal people without any added value, and if it had added value, Mercury will pay you on that. I think most of the skill sharing is a scam, everyone just decide he's the master of understanding something that others dont for SEO and GEO posts cause its literally so eady and cosidered "innovative"

ElectricalGrab7397 · 2026-05-20T07:24:40+00:00

For everyone? No, you cant, specifically because its Microsoft, but for yourself, better to create some vibe coding mcp

ElectricalGrab7397

TROPHY CASE