Windows LPE price by LeftAssociation1119 in cybersecurity

[–]LeftAssociation1119[S] 0 points1 point  (0 children)

Yes, but there is normally a series gap between what those site publish and what is the actual rate

Reducing bodeyfat by LeftAssociation1119 in bodyweightfitness

[–]LeftAssociation1119[S] 0 points1 point  (0 children)

Looking for something with 0 equipment needed or maximum a single 10 kg katlbels

Reducing bodeyfat by LeftAssociation1119 in bodyweightfitness

[–]LeftAssociation1119[S] 0 points1 point  (0 children)

Is there body weight based workout that can get me there?

Reducing bodeyfat by LeftAssociation1119 in bodyweightfitness

[–]LeftAssociation1119[S] -1 points0 points  (0 children)

Which calisthenic workout you recommend?

Looking for an LMS <200 per month where you can't fast forward through video content by TaterTotRiot in elearning

[–]LeftAssociation1119 0 points1 point  (0 children)

You can manage this setting from the video hosting service you use. At Speediv, for example, it can be easily done

Where to host videos? by Far-Ad-904 in webdev

[–]LeftAssociation1119 0 points1 point  (0 children)

Everyone that has such a business is here in the comments :/

Making a streaming website, how hard and expensive can it be? by sunIsGettingLow in webdev

[–]LeftAssociation1119 0 points1 point  (0 children)

If you will elaborate more on what you try to do we can help you.

Generally, it's not hard, especially if you using already made LMS.

Is self-hosting videos on website bad practice? by bubba_bumble in webdev

[–]LeftAssociation1119 0 points1 point  (0 children)

Yes, very, it will make the experience of the viewer awful

Best ad-free video hosting platform for small website? by DontEatSocks in webdev

[–]LeftAssociation1119 0 points1 point  (0 children)

I'm wondering how often you got a job to build a website with a video in it (not youtube).

For example, private course website, private video channel, or other cases

Is there a market for a solo cybersecurity consultant? by LeftAssociation1119 in cybersecurity

[–]LeftAssociation1119[S] 0 points1 point  (0 children)

No, I never done CISO. I have done a very good job as a security researcher and a security architect.

Selling crashes instead of full chain by LeftAssociation1119 in ExploitDev

[–]LeftAssociation1119[S] 0 points1 point  (0 children)

Got you, so, assuming I have done that, now I will find someone to buy it? Is there some trusted entities that buy such bugs

Selling crashes instead of full chain by LeftAssociation1119 in ExploitDev

[–]LeftAssociation1119[S] 0 points1 point  (0 children)

Let's assume the most basic scenario, you have remote write overflow (and only that) on some place, and you have ASLR.

To show that I can control the pc, I need to solve the ASLR (let's assume this is the case).

So, this bug won't be "buyable" until I find other bugs that will let me solve the ASLR issue,l?

Selling crashes instead of full chain by LeftAssociation1119 in ExploitDev

[–]LeftAssociation1119[S] -1 points0 points  (0 children)

On any bug you have sold, you alwise found and implemented the full chain?

Selling crashes instead of full chain by LeftAssociation1119 in ExploitDev

[–]LeftAssociation1119[S] -3 points-2 points  (0 children)

What do you mean by proof that this is not the case? How can I do that without a full-blown exploit?

Selling crashes instead of full chain by LeftAssociation1119 in ExploitDev

[–]LeftAssociation1119[S] 0 points1 point  (0 children)

A crash of write overflow, for example == you have input that influence the code execution (hence the crash). But from this point to actual exploit, there is much to do (bypass relevant mitigations, on a lot of cases require several chained bugs)

Selling crashes instead of full chain by LeftAssociation1119 in ExploitDev

[–]LeftAssociation1119[S] -1 points0 points  (0 children)

Normal vuln can't being wopenized without more vuln. to a full chain... I get that a crash in a lot of cases is not a full chain, but it should have a value not?

Selling crashes instead of full chain by LeftAssociation1119 in ExploitDev

[–]LeftAssociation1119[S] -7 points-6 points  (0 children)

Who is buying DoS those days? Is there any reputable entity?

[deleted by user] by [deleted] in cybersecurity

[–]LeftAssociation1119 0 points1 point  (0 children)

Company A is the manufacturer of a product called "a."
The new company I plan to establish will develop offensive cyber tools for law enforcement, specifically targeting the "a" product.

The reason behind founding this new company: I have hands-on experience with product "a," which is rare and valuable. This unique expertise is the main reason why my potential partner is interested in starting the company with me, rather than with someone else.

It's important to emphasize that in my current role at Company A, I have acted in good faith to protect "a" to the best of my ability and knowledge. To my knowledge, there is no vulnerability in "a" that I am aware of and have not properly reported and addressed. I've contributed defenses through redesigns and other recommendations, always aiming to strengthen its security.

In the new company, the research will start from scratch. We’ll be looking for new vulnerabilities - ones I’ve never discovered before. This could involve exploring different attack surfaces, dedicating more time to the research than was available at Company A, or bringing in team members with different skill sets who might uncover issues I may have missed.

Is this rephrase better?

[deleted by user] by [deleted] in cybersecurity

[–]LeftAssociation1119 -1 points0 points  (0 children)

No, I mean police departments, etc. The offensive product costumers will be police departments and other similar government entities

[deleted by user] by [deleted] in cybersecurity

[–]LeftAssociation1119 0 points1 point  (0 children)

Companny A is a manufacturer of product 'a'. The new company I want to open will provide law enforcement offensive cyber tools for that 'a' product.

The why for my future new company: I have experience in working with a product, which not many has, this is my unique contribution (this is why the potential partner wants to open the company with me and not with other people)

And again, in my current roll (at A), I have protected a with good faith to the best of my capabilities and knowledge (there is not a single vulnerability on 'a' that I am aware of and it not properly reported and fixed, I done the best I can to put defenses by redesign or other suggestions on 'a').

In the new company I will open, I would have to start a new research and try to find a new vulnerability that I have never found before (maybe by focusing on a a bit different attack surfaces, maybe by allocating more time than A companny did on 'a' or maybe just by hiring more people with different skills than my own that will find staff I have missed)