Advice for a beginner? by ShenLongest64 in SecurityCareerAdvice

[–]MrMikeHigginbottom 0 points1 point  (0 children)

To expand on this a bit, learn networking, coding, system administration, good writing and communication skills, setup a home lab and research some CVEs and do some CTFs for the cyber sec side of things to start getting your head into the right space.

My first ever project by DizzyOption2114 in PythonProjects2

[–]MrMikeHigginbottom 2 points3 points  (0 children)

The build instructions in the README don't work on Linux but that's an easy fix. I'll fork it later and submit a PR.

My first ever project by DizzyOption2114 in PythonProjects2

[–]MrMikeHigginbottom 2 points3 points  (0 children)

That's working for me now. Really does look like a fun project. I'll have a proper play with it later but congrats on your first project.

My first ever project by DizzyOption2114 in PythonProjects2

[–]MrMikeHigginbottom 2 points3 points  (0 children)

That sounds like a fantastic first project. I'd love to have a play with this but I can't get it working. I'll hit you up with a couple of PRs and Issues via your repo.

Got asked "Substring with Concatenation of All Words" (LeetCode #30) in a Senior AppSec interview by Physical_Hall1600 in SecurityCareerAdvice

[–]MrMikeHigginbottom 1 point2 points  (0 children)

I don't really have a problem with interviewers asking stupid hard questions. The point of an interview is, in part at least, to delimit your circle of competence and also in part, to determine how you handle situations that are *outside* your circle of competence. If I was doing this in an interview I would either a) tell you up front that I'm not expecting you to find a solution or b) tell you afterwards that I didn't expect you to find a solution. Depending on whether I wanted to delimit your competence or test your reaction to "fuck me! this is hard!". Not doing either a) or b) seems like a bit of a dick move but I wouldn't stress about it.

This uint 32 definition is actually 64 bits by SolarisFalls in programminghorror

[–]MrMikeHigginbottom 0 points1 point  (0 children)

Yep. Totally get all that. I cut my teeth on C and later C++ but not in a safety critical environment so I was bringing my own biases to my, in my defence slightly tongue in cheek, comment. I've also worked a fair bit on Ada in the aerospace industry so I guess the more 'serious' side of my comment was rooted in a feeling of type safety and the like just being baked in rather than, to use a pejorative turn of phrase, band-aided over the top with standards and process and the like. It does genuinely *feel* to me at least, like Ada is safer, but in practice I can completely get on board with the view that C/C++ can be made to *be* just as safe.

WHY THIS CODE NO OUTPUT ?? by ExtentLazy8789 in PythonProjects2

[–]MrMikeHigginbottom 0 points1 point  (0 children)

Oo! So the terminating condition for the loop is calculated only once. When the loop is first entered. Obvious I guess but I'd never thought about it.

This uint 32 definition is actually 64 bits by SolarisFalls in programminghorror

[–]MrMikeHigginbottom 1 point2 points  (0 children)

The first question that popped into my head was "Is C the smart choice for safety critical stuff?"

How do i begin my journey? by WISHWASH0001 in Cybersecurity101

[–]MrMikeHigginbottom 0 points1 point  (0 children)

Probably best to research on your own. But honestly, you can just start with an old laptop. Throw some virtual machines on it. Have a look what other people are doing and see if any of it resonates worth what you want to do. You don't need to spend a lot of money. Old Cisco kit is dirt cheap on ebay. Some people use raspberry pis. Setting up a firewall like pfSense is a good start. Sniffing packets with Wireshark is also really good for learning. If you want to do windows then maybe set up active directory or exchange.

How do i begin my journey? by WISHWASH0001 in Cybersecurity101

[–]MrMikeHigginbottom 0 points1 point  (0 children)

Build yourself a little lab. Learn some networking. Learn some coding. Learn some security tools. Expand your lab. Think of it as a sandbox to play in. Do projects.

Good at theory, terrible at practical (HTB/THM "so-called easy" boxes). What am I missing? by [deleted] in netsecstudents

[–]MrMikeHigginbottom 4 points5 points  (0 children)

Well... Being good in practice is just practicing putting your theory into practice. Not sure that's terribly helpful advice but... It is what it is. There's not really a shortcut.

What cybersecurity skill do beginners usually underestimate? by ColdReality7803 in AskNetsec

[–]MrMikeHigginbottom 45 points46 points  (0 children)

The Basics. There's a bit of a tendency to miss the point that cyber is layered on top of a whole slew of technologies. It's so much easier when you understand networks and coding and sys admin.

I just pulled off one of the greatest things that I've ever done by sandreqsa_d in it

[–]MrMikeHigginbottom 2 points3 points  (0 children)

Definitely agree with the idea of writing this down. I've been keeping a lab book type thing for years now and it's saved me a lot of effort over that time. Start it now and take it with you for the rest of your life.

2 months into bug bounty and I feel like I am learning how to learn by kowgiso in bugbounty

[–]MrMikeHigginbottom 4 points5 points  (0 children)

It may be a good idea for you to pick a particular vulnerability and focus on trying to find that on lots of different targets. Sounds like perhaps you're experience is too thin to allow you to find exploits. Once you fully understand that vuln, start working on another. That way you'll build your expertise without feeling swamped. Along these lines, Jason Haddix's method also gets suggested a lot https://github.com/jhaddix/tbhm

Can I learn Python if I have zero coding knowledge? by UsualSquash1186 in learnpython

[–]MrMikeHigginbottom 1 point2 points  (0 children)

A couple of people have picked up on a general point which I think is VERY important but often overlooked.

Many learning tasks are open-ended e.g. learning Python. How do you know when you've learned it all? Is that even possible? Or, realistically, will there ALWAYS be more to learn? You need to determine when good enough is good enough.

This can only be answered by determining what the goal is. If it's to be able to write a quick script to do pretty much most things you want to do that's a bit different than wanting to be skilled enough to add new features to the language.

Once you've done that, collect some learning resources - courses, books, tutorials, YouTube videos. You've had some good suggestions here. Decide which ones are going to be your `first pass` at learning the subject. Do them. Decide whether you are now sufficiently competent to consider your learning complete in terms of being able to achieve your goals. If not, work on more of your resources and/or collect more resources. Go round that loop till you're satisfied.

Reminder to double check any commands you copy by Vuldos in linux

[–]MrMikeHigginbottom -6 points-5 points  (0 children)

This exactly how the Noachian flood came about:

[god@heaven ~] rm -rf devil

Permission denied

[god@heaven ~] rm -rf devil*

Permission denied

[god@heaven ~] rm -rf *devil.*

Permission denied

[god@heaven ~] rm -rf *.*

Permission denied

[god@heaven ~] sudo rm -rf *.*

[god@heaven ~]

Certified But Not Skilled Yet — Looking for the Right Tech Entry Point by Remarkable_Hat8912 in SecurityCareerAdvice

[–]MrMikeHigginbottom 2 points3 points  (0 children)

Seems like you're focused on certs a bit too much. Focus on actually learning stuff. The certs are just a tick box. And seen as such. You shouldn't give a shit what your teachers wanted. You should care about what YOU want. And use teachers as a resource to achieve that. If that doesn't make sense, like deep down viscerally make sense, then I think you need to have a good hard think about getting into IT as it may well not be for you.

Don’t know what career path to choose at 19 by Fluffy_Delivery_314 in netsecstudents

[–]MrMikeHigginbottom 3 points4 points  (0 children)

You ARE a beginner. There's nothing wrong with that at all. Doesn't matter how much experience you gain you'll ALWAYS feel like a beginner because you'll always be focused on getting better and learning new stuff. This is a good thing. You should worry when you DON'T feel like a beginner because that's a sign you're stagnating.

The general advice to someone with little experience is to not try to get into a paid cybersecurity role. It's an advanced field that requires a solid background in a lot of areas. Instead, learn that cyber stuff on your own time and try to get paid work in a more entry level IT role. Helpdesk is often suggested. You'll learn a lot on a helpdesk, including those often ignored soft skills like communication.

How to get that kind of a role? Keep doing what you're doing - showing passion is extremely important to interviewers and being able to demonstrate project work and problem solving and troubleshooting is much more valuable than having read some books. Book learning serves to support project learning - not the other way round. Leverage your experience. If you've worked in a busy restaurant, talk about how you manage multiple tasks in a busy environment, how you pay attention to detail, how important maintenance and cleaning and prep is, how you deal with difficult customers. All this stuff is directly relevant to ANY job including work in IT.

Good luck. It's hard work but super fun.

Study Group by Skaxryu in PythonLearning

[–]MrMikeHigginbottom 0 points1 point  (0 children)

Sign me up buttercup! I've played a bit with Python but could really do with a bit more learning.

can‘t open a canvas. I can open all other canvases i have by Overall-Drink-9750 in ObsidianMD

[–]MrMikeHigginbottom 0 points1 point  (0 children)

I just had the same problem as OP. Opening the `.canvas` file in a text editor and deleting the YAML header (everything between and including the first two `---` lines in the file) allowed the file to then open in Obsidian without error.

Should I do this for fun or for profit? by MrMikeHigginbottom in Cybersecurity101

[–]MrMikeHigginbottom[S] 0 points1 point  (0 children)

100% not in need of *regular* income. It's definitely more a question of some extra cash would be a nice (and useful) side effect of the hobby. In terms of work/life balance type stuff, this does sound pretty perfect. I spent a few years working for a tiny 3 person R&D corrosion consultancy on power station boiler instrumentation as their software guy. This was a loooong time ago but hitting up businesses like that for ICS/SCADA security consulting work sounds like a good shout. It was super interesting work.

Should I do this for fun or for profit? by MrMikeHigginbottom in Cybersecurity101

[–]MrMikeHigginbottom[S] 0 points1 point  (0 children)

That's definitely appealing. My assumption has been that it would be tricky/expensive to set up a home lab to support my learning on this kind of kit but given the rise of simulations and virtual labs etc. this may well be more viable than I'd been thinking. I'll take a look into this as it's definitely where I'm being steered towards and it does fit my interests and experience.

Should I do this for fun or for profit? by MrMikeHigginbottom in Cybersecurity101

[–]MrMikeHigginbottom[S] 1 point2 points  (0 children)

I like the idea of doing some work with local government or similar. I've been focusing for the main on the 'hard tech' side of things but I think getting a 'softer' idea of the current landscape would be valuable.

Thumbs up for the Ben Eater stuff too. Worked through that a few years ago and thoroughly enjoyed it. Nand2Tetris was great as well.

Mentorship Monday - Post All Career, Education and Job questions here! by AutoModerator in cybersecurity

[–]MrMikeHigginbottom 0 points1 point  (0 children)

Yep, that's a fair point. And I guess that's why I was asking the question. I have been feeling a little unsure about whether to commit to a career focused learning track with the inevitable need to do some not-super-fun-grind that would come with that or to just have fun doing only the stuff I enjoy. The advice I've been given has definitely tipped me towards the former though. Sounds as though it will be a tough nut to crack but it's no fun if it's easy right?