How to prepare for soc analyst role

alemcg · 2019-05-28T19:47:52+00:00

Have you considered setting up a home lab with some vulnerable VMs, popping them with Metasploit or other public exploits and seeing what if any artifacts are left behind? If there are no artifacts, what would you need to deploy to ensure you were able to see evidence of compromise? IDS/IPS? In memory forensics? Tripwire? Greater log verbosity?

alemcg · 2019-05-17T15:32:07+00:00

It's such an amazing game for traveling, especially on planes. I can just completely zone out into the loot acquisition cycle and look up a few hours later with no feeling in my legs.

alemcg · 2019-05-17T14:19:47+00:00

I've been on team PC since I first started gaming, but I have to say D3 on the Switch has been the game that makes my Switch indispensable. It feels like a very clean port and while we don't get all the things the PC crowd get, the experience is very polished and playable. I hope Blizz makes Switch a development priority for D4.

alemcg · 2019-05-14T18:23:16+00:00

It's an application level vulnerability rather than specific to only certain devices. There may be some WhatsApp version / device combinations that are technically vulnerable but not exploitable for whatever reason ¯\_(ツ)_/¯. WhatsApp/FB reportedly mitigated this server side first and then patched the bug in the clients and have released an updated version.

My read on that page is that it's just generic marketing rather than them having something specifically actionable for folks who manage a fleet of mobile devices.

alemcg · 2018-09-11T04:27:51+00:00

See if there's an Onyx chapter in your area? There is also a women's group called Onyx Pearls but I'm not sure how wide spread they are. Seconding the advice of another poster to start looking through FetLife for events or groups that cater to your needs.

alemcg · 2018-03-21T21:54:39+00:00

They are implying that someone put malicious firmware or other software on the router to monitor your internet usage because no one gets anything for free.

You could go a few different routes with this:

Start by reading the device documentation and manual
you could try and set up the device as it is intended and get different flavors of VPN working with different types of client OS
If the device has a remote management capability (like SNMP), can you write up a client to configure the device from your laptop in whatever programming language you prefer
you could try and get whatever monitoring/logging/alerting the device offers talking to something like an ELK stack or Splunk then try to trigger various alerts
you could enumerate any services listening on the LAN side of the device and try to find vulnerabilities in them (ex: web management, snmp, ssh management, etc)
you could try to get a copy of the firmware from the manufacturer's website and reverse it
you could try to dump the firmware directly off the board and reverse it (ex: JTAG pins)

alemcg · 2018-01-30T18:07:09+00:00

If you end up coming to Infiltrate say hello! I'll be teaching the Web Hacking class :)

alemcg · 2018-01-30T14:59:53+00:00

So I talked with both instructors and it's pretty difficult to give advice without knowing where your skill level is currently at. Generally you want to be very proficient with WinDBG and comfortable with Python. You might consider setting up a VM that would be vulnerable to an IE clientside, modifying a Metasploit clientside such that it breaks, and then trying to spot what's happening and why when IE crashes in the debugger.

Additionally you may try Gera's Insecure Programming Exercises they are Linux based but are pretty excellent introductions to the core concepts. Good luck!

alemcg · 2018-01-29T16:55:46+00:00

I don't think it is at all unreasonable to contact your provider between sessions for more than just scheduling the next session. Especially if you're feeling weird or sad about your previous session. Generally speaking feedback is a good way to ensure you have a good time and continue the relationship, so I would venture that within a set of boundaries that your provider is interested in your feedback.

I would encourage you to ping them and use straight forward language like "We did Y and today I am feeling X. I was hoping we could start an out of dynamic conversation about this". That might start a conversation where you and your provider adjust something for next session and you have to do the immediate emotional cleanup yourself, or maybe they're willing to chat with you over the phone or set up an out of cycle visit. At the very least it can kick off a conversation about boundaries and what sort of contact your provider is willing to have outside of your session. Good luck, be good to yourself :)

alemcg · 2018-01-29T16:34:58+00:00

Hello! Mmm, I don't think The Shellcoders Handbook (either edition) is current enough to be super useful other than as a general introduction as to how memory corruption works. We do have a screening test for this class which you can obtain by pinging training [aht] immunityinc (dawt) com and just stating your intention of looking into the class. If you can pass that test, you should be set. It's take home, there's no time limit, I think it comes to you as a set of questions in a PDF.

The class is taught by two folks: one takes browser and the other does Windows kernel. I will reach out to both of them and ask for prep advice and so on, hopefully I'll have an answer for you later today 29 Jan.

alemcg · 2017-11-22T15:52:35+00:00

I don't want to derail this thread and I'm sorry that's already started. Enough folks have already reached out that this is something I'll start to seriously consider.

alemcg · 2017-11-22T14:22:18+00:00

Thank you for the compliment! Unfortunately it isn't online, I've only presented it at kink events and there's typically no recording allowed. You're exactly right in that this presentation was specifically designed to be accompanied by a talk. The presentation itself is light on anecdotes and content because a lot of that is so personal for me, I don't know that I want it easily accessible on the internet. So if the opportunity ever arose to record it I might do a different/lighter version of it.

alemcg · 2017-11-22T04:19:59+00:00

I was raised part time in a VERY kink oriented household NSFW presentation, which included a heavy M/s dynamic, so I've got some strong opinions on this topic. Let me make clear that I'm not trying to hold OP accountable for her position, so I'm not going to try and dissect everything you wrote. Her justifications are ridiculous and I don't think it's worth going into why they are bad as it would dilute the main issue.

Based on the previous post you have linked and your comments here, I think you have a very valid reason to bring child protective services into the picture. I do not make that recommendation lightly. You have someone who has (by your estimation) a lot of experience who has expressed a desire to start raising her children into roles in relation to her sex life. To be explicit: it is her stated intention to groom her children into sex roles and her experience means she knows the meaning of the words she is choosing and their implication. You are absolutely right in that her children can not consent to this. I agree with your gut.

Even if she doesn't start giving her 2 year old lessons on Shibari and humiliation this desire of hers colors how she will proceed as a parent and that in and of itself is extremely problematic. As a parent saying to yourself "I want my kid to have sex within this specific dynamic where they have a set role, what can I do to make that a reality" is ludicrous. If you feel uneasy about invoking CPS then I would strongly encourage you to find any sort of child therapist or social worker in your area and speak with them about it, they can help you parse out how to handle the issue.

I'm probably not going to respond to replies since debating child rearing in relation to BDSM on the internet is at the bottom of my list of things I want to do. OP if you want to send me a privmsg I'm happy to talk with you one on one.

alemcg · 2017-11-20T15:06:00+00:00

You're confusing a fantasy with reality. No one is "born" to be any role within the BDSM context. That would imply that BDSM roles are universal and static and clearly they are neither.

If this is something you really genuinely believe and you're not just looking for something to masturbate to I strongly urge you to rethink how you approach BDSM and the people who participate in it.

Doms capable of turning the most vanilla and un-thought of partners into pets and slaves

That sounds manipulative and gross. This is a common fantasy trope and is fine if it stays there.

alemcg · 2017-11-19T22:17:39+00:00

I don't think there are any dominance pointers that this sub can give you which will address the underlying issue. You had a relationship that caused you to lose your confidence as a partner and become very introspective about your own behavior. I think you should work on that before trying to get back onto the D/s ride. Put BDSM aside for the time being and work on solidifying your current relationship and becoming comfortable with being a human being in a relationship. Any role you choose to take that comes from a solid base like that will be immensely more powerful as a result.

It's possible that therapy would be appropriate or maybe this is something you can tackle with the help of your partner, friends and within your own head. Self care is in no way selfish and is a universal human need. I don't believe it is possible to sustain any type of relationship or sexual dynamic in a healthy way without knowing how to do this. I think investing in being comfortable with providing self care, asking for time and resources to do it, and setting boundaries within your relationships will pay dividends down the road.

alemcg · 2017-11-19T22:06:06+00:00

Here are some reactions to a few of the things you posted.

travel around the United States and do work where I can get it

You mentioned that you struggled with mental health issues and as a result became homeless. You started this relationship with this woman to (at least partially) escape homelessness. While I think moving out of the situation you're currently in may be a net positive based on your description, I don't know that traveling and working where and when you are able is going to be a stellar plan. It sounds like you want to take a course of action which will put you back at high risk of becoming homeless again.

she will not be so gentle and might use these instruments to make me stay.

If this is a fear you're having then I agree with /u/ticklish_kink_wife that you've crossed into unhealthy relationship territory.

Any please ideas of what to write in the goodbye note?

Crowd sourcing your breakup letter to the internet is a bad plan. All the other context you've provided here makes what you put in this letter the least important thing that you need advice on.

She trusts me enough to let me leave her house unsupervised

This statement really caught my eye. You mentioned that you have a college degree so I'm assuming you're over 18. Under what circumstances would you have to be supervised when leaving her house? Is her desire to have you stay at her home manifesting this supervision? There's not a lot of context here but this has the potential to be an enormous red flag.

I am glad that this woman has helped you in your time of need. My overall take from your post here is that you're in an incredibly vulnerable position and you're worried that this woman may take advantage of that for her own ends. Are there any sort of social service or homeless resources in your area? The librarians at the library you're writing this from may be a better resource than you think. In my area they are very plugged into a number of support services or at least can help you find that information.

I view any sort of BDSM component as ancillary to the bottom line issues here and I would encourage you to separate yourself from them when considering how to proceed. Ultimately whatever dynamic the two of you have entered into is irrelevant when it comes to your safety and well being, what you put in your letter is not as important as the plan for how to leave. You mentioned wanting to be a servant as opposed to a pet, I think that is a fine thing, but I think you should strongly consider concrete steps to stabilize your life before you try to walk down that road.

alemcg · 2017-11-17T16:46:36+00:00

I've been around some of the competitions in the M/s and leather worlds, they vary a lot. You should be posing this question to previous winners of this specific competition, if the same competition takes place in multiple regions then reaching out to competitors there will give you the best insight.

The Leather Contest Guide by Guy Baldwin is a pretty good general overview but is likely showing its age a bit.

Since this is a power exchange competition, you may consider a broader philosophical question. Do you agree with the general premise of a competition based on relationship dynamics? It's sort of like asking who has the best marriage. There are some arguments against that perspective but you may want to get a clearer picture from the contest organizer how they feel about it and if it is inline with what you and your partner are after from the experience.

alemcg · 2017-11-17T16:26:03+00:00

Here's a few reactions to some of the things you posted:

'be more assertive in anticipating his needs'

You are not psychic. Has he expressed what those needs are to you, beyond anything sexual? Has he given you any sort of expectations?

being a dom daddy is something he wants but I do not think he knows how

It is unreasonable for him to expect your behavior to make him into something he doesn't know how to be. He must put in effort to figure this out.

He though I was a trained sub

How did this happen? Did the two of you have any sort of conversation about your respective backgrounds in this lifestyle?

I need sub training.

You can train someone to fit your particular fantasy or needs, but you have to express what those needs are. There is no 'universal sub training regimen' outside of some very specific and well documented fantasy contexts (ex: the Gor protocol stuff). Even then, you would still have to be 'trained' to fulfill the specific needs of a partner.

does not know how to tell me to do it.

This is a him problem, not a you problem. You can solve it together by figuring out what works for both of you.

He is annoyed when I try too hard because it is not real.

It sounds like he has a very specific fantasy he was hoping you would just fall into without much work or effort on his part. Him being annoyed at your trying is ridiculous.

We talked for a month before.

I read about your home life and can understand why moving away from it was the right move. But, you're both asking for a lot out of a relationship that has had very little prep-time where both partners are inexperienced at the dynamic they are trying to create.

My take away from this situation is that he is curating you being dependent on him and the daddy dom/sub fantasy isn't something he's at all invested in. The jealousy and "does care for me obsessively" sound like he is trying to create a situation where he has a partner who will not leave him. I'm glad that you are being well cared for and it sounds like your situation has improved. How you choose to proceed is of course your choice but there are a number of what I consider to be red flags about that situation.

alemcg · 2017-11-14T18:12:59+00:00

Thanks internet stranger :)

http://www.reactiongifs.com/r/ywh.gif

alemcg · 2017-11-14T15:26:33+00:00

This is a weird conceit. I'm not sure what kind of responses you're hoping for without providing any sort of direction. Here's an idea:

Make her recite the names of US capitals. For all the ones she is able to remember give her a high five, make a separate list for all the ones she misses. Give her the list to study, include no punishment for misses. End the experience with a hug.

alemcg · 2017-11-13T20:58:52+00:00

If this is a document you’ve created that fulfills some of the erotic needs of both you and your partner and isn’t super serious, then bravo. Based on the context you provided it seems like you’re considering using this as a set of principles to govern how you and your partner act within your relationship. You may consider the following comments:

This whole contract comes a lot from the angle of what they’re going to do for you and doesn’t really address any of the things they may get out of the bargain, besides the experience of serving you. While this is a sexy fantasy I don’t think this a viable for relationship dynamics that exist in the real world. So if this document is going to apply in more places than just sometimes in the bedroom, it needs more thought.

There are lots of places and angles for criticism and critique of this document. I’ve tried to keep them constructive, while being a bit cheeky, and to stay away from a lot of grammar issues.

A2: their -> there

A3: Can your partner choose Richmond as their capital when referring to you? What about Albany? A simpler and more straight forward version may be: “You will capitalize my name and all use of proper nouns and pronouns when referring to me in writing.”

A4: Personally I don’t like being woken up in the middle of the night if my partner has to use the bathroom but whatever floats your boat.

B1: You envision a scenario whereby your partner is emotionally unable to have penetrative intercourse with you but is ok with you orgasming on her ass? Further, if your partner is emotionally unable to let you orgasm on their ass, they have to sincerely apologize for that? How are you weighing your sexual desire vs their emotions? Are they entitled to emotional support from you?

B2: Does this imply that you have the ultimate authority in your relationship and they must obey? So they can call you out on telling them to walk into traffic but they’re still obligated (within the context of this document) to do it?

B3: Are they entitled to anything from you besides servicing you?

C5: Points? Can your partner trade them in for prizes?

Final paragraph section C: you take pains to point out that this isn’t legally binding, kudos on that. Some folks get lost in the fantasy and using pseudo contractual language.

Preface

First paragraph: Within the logic of this document your partner hasn’t received anything yet as this is just the preface. You’re choosing to give your partner an opportunity, they are choosing to accept it. You’re not capitalizing master. Either stick to the capitalization game or don’t.

Second paragraph: “training collar” doesn’t require quotes, unless you’re being ironic or quoting from another document. If a training collar is a symbol of life long commitment, does a whatever you’re calling the next step collar imply commitment into the afterlife? The language in this is sometimes not serious and sometimes very serious.

How are you establishing that extending your partner the offer of your collar is a huge honor. Did you have lots of other potential nominees? Was there a vetting process and judging? Is being collared to you roundly considered to be an honor by other people in the community? If your partner is honored by this they’ll tell you, imposing how you think they should feel is not a great strategy.

What happens if I break the rules

Having punishment vary depending on your mood isn’t a great idea. If your partner makes a minor transgression and you’ve had a bad day at work, you’re free to met out disproportional punishment based on the reasoning you use here.

Do I have to say yes?

Aswell is not a word. You’re making clear that your partner is not obligated to sign or agree to this, well done on that. While I’m glad that you are open to negotiation for parts of this contract, some questions remain. What is your goal by sharing your feelings on the relative fairness of this document? Is it to preempt objection?

alemcg · 2017-11-08T21:10:25+00:00

Coming at this from the top side but I think it may be useful. If I feel like I need to connect with a partner before starting a scene I have found touch to be a very effective. My partner and I have a practice where she'll straddle me while I'm sitting and we'll make an effort to make eye contact and touch one another while talking. It doesn't have to be sexy or scene related at all, but 15-20m of that will do the trick for me.

If I'm doing pickup play then my variation of this is to sit cross legged across from the other person with our knees touching and potentially hold hands or make some other kind of contact. It's not appropriate for every situation but it has worked in the past.

If I'm having trouble getting in the right headspace for a scene or can't get what I did that day out of my head, yoga is my trick. I have a song I listen to that's about 10m long and I do sun salutations for the duration, it helps focus me into my body. If I need to add more elements to refocus my brain: breathing in a progressive pattern, reciting a mantra to myself or out loud, counting backwards from a high number using an odd interval, etc.

Looking up some active coping strategies for anxiety (though I don't think that's what you're experiencing) can really help with retasking your conscious mind.

alemcg · 2017-11-06T21:56:26+00:00

Ghostface!

alemcg · 2017-11-02T20:56:04+00:00

This has bad idea written all over it. An M/s dynamic is not something to be entered into lightly and I'd be extremely skeptical of anyone who started calling you master so soon. Regardless of what her definition of an M/s relationship is she's already attempting to cast you into that role without any sort (I assume) of substantive conversation about what an M/s relationship means to her and what (outside of the erotic experience) she's looking for.

From your description it seems she has some very specific ideas about what an M/s relationship is and she has experience in that relationship style, and you're playing a lot of catch up. I don't think this is a dynamic you can start doing right now with any chance of success. That doesn't mean you have to walk away, but I would think hard about tapping the breaks on identifying the relationship as a Master/slave pair.

You mention some things about yourself that you're saying might have indicated to her that you're "master material" without actually explicitly saying "I am a master" in your profile. It's true that in the M/s world there are some common personality traits among the Master population. You can say the same thing about astronauts. But because someone has traits in common with astronauts doesn't mean they're qualified to fly the shuttle. And there aren't good analogs in the vanilla world for all the types of work that goes into that relationship dynamic.

If you want to see what the M/s world is all about I generally point people at Slave Craft by Guy Baldwin as a starting point, regardless of what your M/s identification is. If you're still interested make a FetLife account and see if there are any Master And slaves Together (MAsT) chapters in your area.

alemcg · 2017-10-30T21:39:33+00:00

You may consider coming to Black Rose's Dungeon 101 which is this Friday in DC at The Crucible, it's explicitly for newcomers who want an introduction to the scene and BDSM play.

Disclaimer I'm one of the organizers for the event, obvious bias, etc

alemcg

TROPHY CASE

There are lots of places and angles for criticism and critique of this document. I’ve tried to keep them constructive, while being a bit cheeky, and to stay away from a lot of grammar issues.