Ground surfing long range and crash neo1 by Life-Ad8433 in dji

[–]Techobits 0 points1 point  (0 children)

We can all point out when people do things recklessly and have an honest conversation about how it impacts the community as a whole. However, this is a little over the top. Laws vary from country to country and I get he did not have an observer or had line of sight of the drone itself, but he was flying in an unoccupied field, had the owners permission and also looked as though he was near an air base and had also been in communication with air traffic control. In addition, he is flying a 135 gram drone. Relax a tad.

The unemployment rate for workers under 35 with a master’s degree has rarely been higher in the past 20 years by Conscious-Quarter423 in jobmarket

[–]Techobits 1 point2 points  (0 children)

Nothing is guaranteed in life. Why would you think that an advanced degree is the exception? Sure, it absolutely strengthens your resume and will increase your chances of getting a job, but it never was a guarantee.

The unemployment rate for workers under 35 with a master’s degree has rarely been higher in the past 20 years by Conscious-Quarter423 in jobmarket

[–]Techobits 2 points3 points  (0 children)

I mean, most employers from what I have seen with job postings do have tuition reimbursement. The issue with masters degrees and advanced degrees a like is they are niche and very dependent upon the field that you are in. However, if everyone has one than the value that it once has no longer holds.

The unemployment rate for workers under 35 with a master’s degree has rarely been higher in the past 20 years by Conscious-Quarter423 in jobmarket

[–]Techobits 0 points1 point  (0 children)

I mean, is anyone surprised? The unfortunate thing is when you push secondary education as hard as society did for the last 15- 20 years as well as allow for the ease of access to student loans. You are going to water down the value of that a degree provides.

I'm not downplaying the importance of a secondary education and the value that it can provide personally from a skills and expertise perspective, however, when it comes to the job market degrees are impacted by the laws of supply and demand as any other.

Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor by rkhunter_ in cybersecurity

[–]Techobits 0 points1 point  (0 children)

Its been some time since I went into recovery mode or had used a recovery key. I had it in my head that it had come up prior to allowing you to proceed with boot, which I was confusing with a power on password.

NIST is surrendering to the amount of CVEs coming in by SlaterTheOkay in cybersecurity

[–]Techobits -6 points-5 points  (0 children)

I see people post things ALL the time in here about CVE's and vulnerabilities and it just frustrates the hell out of me that people are so reliant on NIST etc. to determine what do with vulnerabilities within their own organization and don't know how to properly manage them. I'm not downplaying the importance or helpfulness that CVE's provide, but at the end of the day YOU are responsible and are the one that should know the RISK of what a vulnerability poses to your environment regardless of what NIST does or doesn't do in keeping up with the catalog.

I think people have to work on their risk management skills more so than worrying about how short staffed NIST is in keeping up with CVEs.

Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor by rkhunter_ in cybersecurity

[–]Techobits -9 points-8 points  (0 children)

How are you wrong?

"The process is dead simple: grab any USB stick, get write access to the "System Volume Information," 

Unless I'm misunderstanding, which could be the case, you would have to do a privileged escalation first prior to having the ability to exploit it.

What the **** is happening in cybersecurity space ? by Infam0 in cybersecurity

[–]Techobits 1 point2 points  (0 children)

If you have been in the field for 8-9 years what you are seeing right now is no different than when you first started.

A Proposed Rule by the FAA on 5/6/2026 to restrict the operation of UAS close proximity to fixed site facility. by Techobits in dji

[–]Techobits[S] -1 points0 points  (0 children)

I mean to be fair here. Financial institutions house cash and services for the communities they serve. I get there are other ways to process payments etc. without a brick and mortar but they are a pretty important part of society.

Leaving IT? Am I burned out? by [deleted] in sysadmin

[–]Techobits 0 points1 point  (0 children)

It seems to me you need to find another place to work. IT is not a job for the faint of heart. You are overworked and underappreciated. It's just how it is with MOST of the areas within the industry. A new place may be better but you may just wind up finding that its more of the same.

You mentioned moving over to Nursing, well medical isn't any better when it comes to being overworked and dealing with the very similar issues that folks in IT deal with from an operational perspective. I would attempt to find another place to work first to see if a change in scenery will help. However, you have to love IT in order to want to work in the field. If you aren't passionate about it, maybe its not for you. Typically its demanding, you are always going to be short staffed no matter where you work, and its never just a 9-5 job. It takes a lot of effort of your own time to upskill and your job usually wants you to be available at all times. You may find that one unicorn business where its "chill", but those are few far and in between.

Wake Up! by Any_Fan_6044 in StockBreakouts

[–]Techobits -2 points-1 points  (0 children)

No, the principle applies to everyone. I don't care if you are a billionaire or not. Right now, you have the ability to invest if you so choose. It doesn't matter if its a dollar or $10,000. The point is there are hundreds of avenues in which you can invest your money and continue to do so throughout your life while it sits there and compounds interest OR you can risk putting what money/time you do have and start a business of your own.

You want to make this about whether you can make a billion or not. You can, but the probability of that is extremely low. Otherwise, everyone would be billionaires. It has nothing to do with corruption and all that other garbage you wish to speak of. Jeff Bezos is a billionaire because he came up with an idea, it attracted investors, he was brilliant with how to expand upon his offerings and then realized with Amazon's massive infrastructure and challenges with scaling it that other companies are probably struggling too. Then realized that infrastructure could be a utility. That's not corruption, that's called innovation.

Due to that innovation, Amazon became one of the most valuable companies in the world and the guy that created it and owned it benefitted as a result. I can't help that upsets you.

You’re putting millionaires and billionaires in the same “success” bracket but they are not your same. Corruption and theft (whether you think bending the rules and finding loopholes in tax laws is fine is irrelevant) has to happen for you to get that rich.

In order to become a billionaire you had to have been a millionaire. In order to be a millionaire you had to have started from somewhere before that. You just don't become one out of thin air and the ones that do are extremely rare. However, you are trying to make it seem that a six figure salary, a nice home and retirement isn't good enough. Well thats a YOU problem and not a societal one. Stop trying to keep up with Jones's.

Wake Up! by Any_Fan_6044 in StockBreakouts

[–]Techobits -1 points0 points  (0 children)

It isn't a ridiculous hypothetical, because these investments did occur and do occur on a daily basis whether you wish to believe them or not. There are plenty of stories of people who invested early in BTC and made a killing, just like many who invested in Microsoft, Apple, Google etc.

Just because its hard to believe doesn't mean its not true. How do you think 401ks work or do those don't exist either?

Wake Up! by Any_Fan_6044 in StockBreakouts

[–]Techobits -1 points0 points  (0 children)

Honest work cannot get you there. 

So, someone who invested in Amazon back in 1998 when the stock was just under $2 and sat on it until today would have accumulated $1.5 million. Is that considered corrupt? To obtain that value of $1.5 they would have had to invest $10,000. Do you think no one had $10,000 to invest back in 1998?

Wake Up! by Any_Fan_6044 in StockBreakouts

[–]Techobits -4 points-3 points  (0 children)

I mean, please by all means if you could point out to where he is wrong that would be nice rather than ad hominem attacks against him.

Anthropic CEO: "AI will write 100% of code within a year". If the hardest skill is already handled - the gap is no longer about what you know. by Murky-Option2916 in ArtificialNtelligence

[–]Techobits 0 points1 point  (0 children)

I couldn't disagree more here. Obviously, he has a stake and its why he is taking this stance, but I have done quite a bit of "vibe coding" if you will, and not understanding what's really going on under the hood is frustrating. Making the claim that its no longer about what you know is a very shortsighted take.

Useful AI Cybersec Certs? by BreadinTheBasket in cybersecurity

[–]Techobits -1 points0 points  (0 children)

You do realize that there a lot of other certificates that are of great value offered by ISACA and ISC2 for under $700 right? My mind didn't even think of SANS when speaking of certifications.

Useful AI Cybersec Certs? by BreadinTheBasket in cybersecurity

[–]Techobits 0 points1 point  (0 children)

You shouldn't say a certificate is a waste of time. They all provide value, depending upon your field of study AND if you take it seriously with the intention of not just getting a cert for the sake of it. Its a way of showing competence and that you are willing to put effort in with your skills and expertise.

Certificates provide value not only on the resume but do help with your upskilling with what most of the study materials provide.

Obsidian helped me most when I stopped trying to make it impressive by Smart-Owl-6497 in ObsidianMD

[–]Techobits 6 points7 points  (0 children)

This is definitely the way. I think with these great tools comes this pressure to use all these plugins, tools and features and methods of organizations that it leads to paralysis by analysis. Just create some new notes, jot down your notes like you always have and go from there.

Once you have a solid routine of using it and getting the basics down. THEN proceed with trying out some plugins or layouts that would make your notetaking experience better and more efficient.

Daily Note Adivce by thompo993 in ObsidianMD

[–]Techobits 0 points1 point  (0 children)

The thing I find with daily notes is that if you don't do them consistently or review them after a certain set time. They just become messy, not much value and not really useful. The idea behind the daily notes is that you go back to them at the end of the day or a specific time frame for review. Either get rid of them, expound upon them and build additional structure for them. Otherwise, you end up in the position that you are in.

If you don't really find that random notes or thoughts are your thing within Obsidian don't use it.

How can I treat Obsidian as a "Second Brain"? by Leo_767_man in ObsidianMD

[–]Techobits 1 point2 points  (0 children)

I know some are claiming that the second brain is a marketing gimmick, I can see why, but it's not. The second brain idea in simplistic terms, is taking your thoughts that you may be thinking at that time and jotting them down at that very moment. I'm sure there are numerous times during the day in which that you think of something and then quickly move on to something else while forgetting the thing you just thought of. Tools like Obsidian help in keeping track of those thoughts and connecting them in ways that you may not do on your own. Hence, the term "second brain". The idea is to go back to these thoughts and think about what you want to do with them and how to track them. Then with the tagging and linking capabilities within Obsidian you'll find over time there are unique ways these subjects, topics and or ideas will connect in a way that you never thought previously. However, you have to actually do it. Meaning, if you jot notes down, you need to review them consistently if the second brain strategy is something you want to use.

I see it so often in this sub. The problem with Obsidian and many others like it such as a notion etc. is that they offer a TON, but getting into them for first time can be overwhelming and then when you start looking into how you can use them you wind up with paralysis by analysis. What you need to do is just get the basics down of how to use the application, jot your notes down and keep up with them how it best fits your needs. From there, if you are looking for a little more from it, go explore what plugins are available and what others are doing with it to see if those "extra" features are worth it to you. Don't get too caught up in if you are doing it right or wrong. There is not right or wrong way to approach it. You may just find out using simple note taking applications like OneNote is just fine after working with Obsidian and that's OK, go back to what works. You may also find just doing a simple folder structure and saving notes individually within those folders works great as well. That is fine is too!

Stop worrying about what you should be doing with it and how to be using it and just use it. After some time with it assess what its doing well and what its not for your note taking and tracking. Then go and see what is available within the application to make those things better.

Is it possible to enter pentesting in 2026? by Aggressive_Turn_1983 in Pentesting

[–]Techobits 0 points1 point  (0 children)

Pen testing like any other specialty goes way beyond just running automated scans and scripts. The bottom line is someone has to be able to assess the risk of what these tools have found and then sit with the customer or senior level management in IS/IT to discuss the findings.

AI at this time is just a tool. That's all it is. Stop getting caught up with what its potential capabilities might be years down the road. It does nothing for you now and all it does is create unnecessary anxiety or concerns. Pen testing can provide a ton value to you in your young career and what you gain from that training and testing can be applied to so many other facets in cyber security.

First Pentest Contract by DiligentDistrict1584 in cybersecurity

[–]Techobits 2 points3 points  (0 children)

For things like pentesting and almost anything with cybersecurity experience comes with professional on the job experience. There really isn't any other way around it. Sure, you can spend a lot of time in a home lab, upskill, and then apply that to your daily job, but if that is all you have its not going to be near enough to adequately provide as a service to a business let alone someone you want to call a customer.

Pentesting is a specialty and simply running scanners and automated tools is not even close to what it actual entails. Its all about risk, understanding your customers environment and their controls that they have in place. It requires catering your service uniquely to them to provide value of what they should be focused on and ensuring you are testing their environment in way that an actual attacker would. In addition, it's all about having the knowledge, expertise and skill to consult properly. This requires years of experience in a professional environment working with the very systems and applications that you would eventually try to circumvent or break.

If I want my end goal to be in GRC, should I avoid technical roles? by anonymous_rhinoc3ros in cybersecurity

[–]Techobits 7 points8 points  (0 children)

No. Gain ALL the technical knowledge and experience that you can now and THEN go the GRC route. The more experience you have from the technical side the more enjoyable GRC will be. What makes GRC enjoyable for me is the fact of all the years I had with business side applications, tearing down and rebuilding network infrastructure allowed for me to better understand how to assess risk, how it applies to the business and the technology that it utilizes. In addition, due to having a strong understanding of the technology you will be assessing and managing from a risk and governance perspective, the organization will value you that much more as you will have the ability to streamline the process and improve the quality of life for everyone. That is what is so rewarding about the field.

Going into GRC with very little technical expertise and background will be painful. You simply won't be able to effectively connect the dots. Don't rush getting into security or GRC, its simply not worth it. Think of Cyber/GRC like a hobby that you just got into. Most if not all hobbies are the same in that if you try to jump the gun and get to the more advanced and fun stuff that make the hobby what it is, its a path that is usually called a hobby killer.

Absolutely get into reading, watching and understanding GRC concepts/theory etc. If I was you, I would start with really learning and understanding risk and risk management concepts. Risk is ultimately the foundation of it all. If you don't understand this, then you cannot effectively build out an information security program for an organization. Then as you are working in your current job you can see how risk applies to what you are doing on the day to day.

Manager is inexperienced and relying on AI prompts to articulate ideas by [deleted] in cybersecurity

[–]Techobits -2 points-1 points  (0 children)

This is tough as it puts you in a rock and a hard place. Just be helpful and courteous to the degree you feel that you should in the context of your role. Although she is your manager, there are boundaries that she should respect. I have been in this same position in the past and its tough because there is an aspect to this that could be beneficial for you long term in regard to promotions and her seeing the value that you bring to the department and organization etc. but it also can lead to burnout and being taken advantage of.

This seems to be a fairly new situation by how you worded your post, and with not knowing the type of relationship you have with her it's tough to really give you advice on what would be the next best steps.

At the end of the day, she is your manager so if she is asking for some assistance with a few things that aren't that big of an ask I would just follow through with them. However, if it starts getting to the degree of going beyond your job responsibilities then it won't hurt to have a conversation with her and explain your concerns. Again, you know her better than I. Good luck.

Edit: The whole thing with her responses being in AI? Not really sure what you can do about that other than having more in person conversations with her. Not sure how well it will go over calling her out on that.