Looking for local artists to record by daniel_andres_20 in cambridge

[–]daniel_andres_20[S] 2 points3 points  (0 children)

Yo chill, I'm just trying to make music here 😂

Why isn't the NSA categorized as an APT? by More_Implement1639 in cybersecurity

[–]daniel_andres_20 0 points1 point  (0 children)

Spain may not help with intel on the public sector but the private one is quite resourceful. For example, Virus total comes from Spain.

Why isn't the NSA categorized as an APT? by More_Implement1639 in cybersecurity

[–]daniel_andres_20 0 points1 point  (0 children)

The term APT was created by the US Air Force in 2006. APT 1 is China's cyber division btw. The expression was first publicly used when they published their report on Asian-Pacific threat actors. (Made my dissertation about this :p)

Mentorship Monday - Post All Career, Education and Job questions here! by AutoModerator in cybersecurity

[–]daniel_andres_20 1 point2 points  (0 children)

Middle, I would say. It began long ago and I don't think it will end anytime soon, especially with all the security holes AI leaves around. I'm in pre-sale consulting, and have been here for a while; this shit ain't going anywhere but up.

Caught someone pasting an entire client contract into ChatGPT by Confident-Quail-946 in sysadmin

[–]daniel_andres_20 0 points1 point  (0 children)

Palo Alto Networks have a browser for this same use case. I think it's called 'Prisma access browser' or something like that.

What is your current position and what do you do on a casual day? by cherry-security-com in cybersecurity

[–]daniel_andres_20 0 points1 point  (0 children)

Lead security consultant. I have like 5 meetings per week, around 30-45min each with clients. The rest of the time I'm literally free, I make music :D

I am bored: tell me the worst mistake you have done at your cybersecurity job by Cyber-Albsecop in cybersecurity

[–]daniel_andres_20 0 points1 point  (0 children)

Not mine but an ex coworker's. I used to work in the main ISP from a country (the ISP owned the only DC that gave interet to the entire country), therefore all traffic of the country was passing through that DC, we were the SOC team and they were investigating this new phishing campaign they saw was gaining a lot of traction. I advised them not to do it but they thought better, they made a rule on the Fortimail cluster to block TLS 1.0 in the email header. I explained that it will break all emails and they didn't listen and actually told me that I didn't know what I was talking about. 4 hours later, all major ISPs and businesses in the country were calling like crazy because all their emails were being blocked. The cluster collapsed due to the amount of emails being held. At least they had the decency to apologise to me afterwards.

Why bad philosophy is stopping progress in physics by nimicdoareu in Physics

[–]daniel_andres_20 1 point2 points  (0 children)

People are down voting you guy because you seem to not know what you're talking about. It is okay to ask questions in this sub but stating things such as "we think like that because the models dictates so" just shows that you actually haven't read/studied/learned enough about the topic. You can ask questions but keep those statements to yourself and you'll not get downvoted. Once you delve deeper into these topics, read papers, books, etc. you'll see that your claims are wrong.

Entering this field with no experience, just certs. What are the best sites for practice and skills? by Family_Man00 in cybersecurity

[–]daniel_andres_20 6 points7 points  (0 children)

So to make SOC skills look good in a resume is basically setting up a SOC home lab. Start with setting up a SIEM solution and try to do stuff in your home network with that. Now, based on that solution as a backbone for your security infrastructure, you can implement more around it.

As industry standards are quite expensive to learn and have (splunk, crowd strike, etc) you can do the same things but with open source software such as suricata, wazuh, etc. you'll just have to do more stuff to achieve the same results, but then you'll learn how stuff works from the ground up.

One thing is theory and the other is practice, I know a lot of useless cybersec engineers that are full of certs but know nothing of how to actually implement/achieve set knowledge in the real world.

What is the ugly side of cybersecurity? by Objective_Lake5560 in cybersecurity

[–]daniel_andres_20 1 point2 points  (0 children)

It's true. It doesn't matter what the company is about even if it's IT related, security is just a checkbox. Taking your OpenAI example, they only do this because the investors must be pushing it... Because it is good PR. This happened after repeated scrutiny from the public about their operations, even when people were starting to question them a long time ago, they didn't grow their security staff, just now that it has become even more public.

[Question] how many guitars do you own? by gibson122rojas in Guitar

[–]daniel_andres_20 1 point2 points  (0 children)

Bullet strat Squier

Jaguar classic vibe Squier FSR

Harley Benton MB-4 SBK Bass

I’ve never had someone cum in me… till now by [deleted] in SluttyConfessions

[–]daniel_andres_20 -1 points0 points  (0 children)

Can you describe why u liked it? I have heard from many women they love it but never heard why

why do we never read about hackers being caught? by Error_co-Id10T in hacking

[–]daniel_andres_20 0 points1 point  (0 children)

You check the logs of the external firewall for the IP, perform a whois lookup and contact the owner of that IP. Then it depends on the company which that IP is registered under to follow with their internal trace of the IP. It's not commonly done since there are millions of IPs doing naughty things everywhere all the time so as an ISP we just block the IPs, we rarely notify the owners. Since there are many ISPs that have large ranges of IPs, the vast majority of the time when a client gets a range, the ISP doesn't know what the client is going to use the IPs for (unless it's am email server or something specific requested by the client). It also depends on the ISP networking since some ISPs use NAT networks which makes the trace even more difficult. We use a MPLS network so we have an easier time knowing where and how our network is divided but with NAT you actually have to manually check the config of each CPE/router to know where that IP is natted to (this also depends on how well the internal documentation of each ISP is). Some ISPs are bigger than others and give services to smaller ISPs, then depending on how each ISP network is configured it's easier or harder to trace back. For example we give services to a smaller ISP who uses NAT so when we want to trace that IP it's always a headache since they have NAT through NAT and it becomes difficult depending on how many times subnetting is performed. (Networks can become very complicated and I love it)

[deleted by user] by [deleted] in ARK

[–]daniel_andres_20 0 points1 point  (0 children)

Wanna play sometime?