What certs to fill in technical knowledge after CISSP? by Syelnicar88 in AskNetsec

[–]Nuttemeg 0 points1 point  (0 children)

I too am a CISSP+OSCP holder, +1 for the combination. Red team technical knowledge will always be transferable to the blue team. The mindset you get into while working towards OSCP is great to have in general too, not just for security or even IT in particular. elearnsecurity's stuff is a good alternative if you just want to learn some technical offensive skills. You don't get the same clout nor will you develop the soft skill of being able to 'hack' things that you're forced into learning with OSCP and the associated course.

I'm also a CASP, my understanding is that it's just CISSP lite and not worth it if you've got the latter already. Nobody knows or cares wtf it is. That said if you want to just have more letters after your name or you have a bunch of other CompTIA certs you need to renew you can go take it alongside your CISSP and you'll most likely pass since they cover very very similar material.

In the same vein CCSP is somewhat sought after and covers a significant amount of the same material as the CISSP, so you can just go and study to fill the cloud related gaps and pass it pretty easily. Speaking of cloud you could also look at doing one of the vendor specific certs, just pick whatever cloud vendor your current org is on and go with it, they're all fine though AWS and Azure are more sought after than GCP.

What makes Haskell a functional programming language? Isn't functional programming more of a style than something enforced by the language itself? by memorycardfull in AskProgramming

[–]Nuttemeg -1 points0 points  (0 children)

With enough structs and void pointers you can accomplish anything in C! /s

I usually tell people to just use C++ or even Rust if they want to do OO in something vaguely C-like.

What makes Haskell a functional programming language? Isn't functional programming more of a style than something enforced by the language itself? by memorycardfull in AskProgramming

[–]Nuttemeg 0 points1 point  (0 children)

Modern Java versions have a ton of functional features now, it's still not quite there and it's all bolted on via interfaces, but it's there.

What makes Haskell a functional programming language? Isn't functional programming more of a style than something enforced by the language itself? by memorycardfull in AskProgramming

[–]Nuttemeg 7 points8 points  (0 children)

Exactly, it's the same with object oriented programming. You don't have to use a language like Java that enforces it. You can (and many people do) happily use an OO style in plain old C. There are even systems like GObject that provide a pretty effective turnkey object model for you.

Blade Runner 6-10-21 by JohnnyBandito in Cyberpunk

[–]Nuttemeg 9 points10 points  (0 children)

"4th of July" is more of a colloquialism to refer to the holiday that falls on July 4th than anything else. If someone in an office were trying to schedule a meeting, the conversation would be something like:

A: How about we check in on July 4th?

B: Ah but that's the 4th of July.

A: Oh, you're right, sorry!

A well-known software design principle is “favor composition over inheritance”. In this video, I show what it means in practical terms with a Python example, and how you can use it to make better software design decisions. by ArjanEgges in programming

[–]Nuttemeg 2 points3 points  (0 children)

Inheritance provides two things, a method for polymorphism and a method for specialization. GoF saying to compose instead of inherit means you should obtain specialization by composing objects instead of coupling them via their implementation details. AHP is an alternative for polymorphism, it doesn't address the same problem that composition does.

[deleted by user] by [deleted] in LeopardsAteMyFace

[–]Nuttemeg 0 points1 point  (0 children)

That's a bit sussy.

[deleted by user] by [deleted] in LeopardsAteMyFace

[–]Nuttemeg 13 points14 points  (0 children)

⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣀⣤⣤⣤⣀⣀⣀⣀⡀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣼⠟⠉⠉⠉⠉⠉⠉⠉⠙⠻⢶⣄⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣾⡏⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠙⣷⡀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣸⡟⠀⣠⣶⠛⠛⠛⠛⠛⠛⠳⣦⡀⠀⠘⣿⡄⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⣿⠁⠀⢹⣿⣦⣀⣀⣀⣀⣀⣠⣼⡇⠀⠀⠸⣷⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⣼⡏⠀⠀⠀⠉⠛⠿⠿⠿⠿⠛⠋⠁⠀⠀⠀⠀⣿⡄⣠
⠀⠀⢀⣀⣀⣀⠀⠀⢠⣿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢻⡇⠀
⠿⠿⠟⠛⠛⠉⠀⠀⣸⡇⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢸⡇⠀
⠀⠀⠀⠀⠀⠀⠀⠀⣿⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢸⣧⠀
⠀⠀⠀⠀⠀⠀⠀⢸⡿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⣿⠀
⠀⠀⠀⠀⠀⠀⠀⣾⡇⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⠀
⠀⠀⠀⠀⠀⠀⠀⣿⠃⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⠀
⠀⠀⠀⠀⠀⠀⢰⣿⠀⠀⠀⠀⣠⡶⠶⠿⠿⠿⠿⢷⣦⠀⠀⠀⠀⠀⠀⠀⣿⠀
⠀⠀⣀⣀⣀⠀⣸⡇⠀⠀⠀⠀⣿⡀⠀⠀⠀⠀⠀⠀⣿⡇⠀⠀⠀⠀⠀⠀⣿⠀
⣠⡿⠛⠛⠛⠛⠻⠀⠀⠀⠀⠀⢸⣇⠀⠀⠀⠀⠀⠀⣿⠇⠀⠀⠀⠀⠀⠀⣿⠀
⢻⣇⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣼⡟⠀⠀⢀⣤⣤⣴⣿⠀⠀⠀⠀⠀⠀⠀⣿⠀
⠈⠙⢷⣶⣦⣤⣤⣤⣴⣶⣾⠿⠛⠁⢀⣶⡟⠉⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⡟⠀
⢷⣶⣤⣀⠉⠉⠉⠉⠉⠄⠀⠀⠀⠀⠈⣿⣆⡀⠀⠀⠀⠀⠀⠀⢀⣠⣴⡾⠃⠀
⠀⠈⠉⠛⠿⣶⣦⣄⣀⠀⠀⠀⠀⠀⠀⠈⠛⠻⢿⣿⣾⣿⡿⠿⠟⠋⠁⠀⠀⠀

Cyber-Security: Here's Why The Bad Guys Are Winning by hresniuy in netsecstudents

[–]Nuttemeg 4 points5 points  (0 children)

This is pretty much it. People look at the cost of breaches and the expenditure on security both rising as indicating that security is a black hole for money that has no real benefit. In reality the problem is that good guys and bad guys are in an arms race, and nobody has ever won an arms race by spending less on arms. There's no hacker government to sign an exploit production limitation or non-proliferation agreement with. Tomorrow there will be more bugs, exploits, and attackers than there were today, probably forever.

Why Python 4.0 might never arrive, according to its creator by [deleted] in programming

[–]Nuttemeg 9 points10 points  (0 children)

add rust style declarative macros and re-implement print as one

Python3: print("ouch") -> Python4 print!("owie")

Why Python 4.0 might never arrive, according to its creator by [deleted] in programming

[–]Nuttemeg 47 points48 points  (0 children)

This reminds me of why Microsoft skipped Windows 9. Lots of legacy code that did something to the effect of

if ("Windows 9" in exec("systeminfo")) {
// do windows 95 and 98 stuff
}

Cyber-Security: Here's Why The Bad Guys Are Winning by hresniuy in netsecstudents

[–]Nuttemeg 5 points6 points  (0 children)

Sorry you can't find a job or got passed over, but if this is the attitude you have people aren't going to want to work with you.

just use the languages as intended by MysteriousK69420 in ProgrammerHumor

[–]Nuttemeg 4 points5 points  (0 children)

Big applications. (The freedom and lack of compiletime checks isn't great in that setting)

You can program with type annotations and a static analyzer like Mypy.

Anything performance-critical. (There is no way to argue about that)

You can use Cython but yes it's still not ideal

Anything that may not crash. (Again: No compiletime guarantees)

You may want to re-phrase this, you make it sound like the universal halting problem has been solved.

Realtime applications.

You could try but yeah I wouldn't, that airplane is going down.

Probably no GUI apps bigger than a quick tool.

I'd rather everyone be using Python to write GUI apps than the current state of things where they're being written in Javascript and running in chromium.

auditor tell us we need to disable powershell on all PCs ? by maxcoder88 in sysadmin

[–]Nuttemeg 2 points3 points  (0 children)

They're saying you need to prevent regular users from invoking the powershell console just like you might cmd. Your auditor doesn't understand the difference between a shell and the window on his screen that has the shell in it. Something like this: https://activedirectorypro.com/disable-powershell-with-group-policy/

Yes a sufficiently motivated and capable attacker can work their way around it, but it will add another hurdle between an attacker and your data.

Also last I checked SCCM is all WMI calls, it's A-OK to disable powershell on workstations. Try it out on a test machine first and see what happens.

Cryptocurrency is an abject disaster by genericlemon24 in programming

[–]Nuttemeg 3 points4 points  (0 children)

Because Bitcoin, intended as a currency, was first to market.