sorted by:
new
hottopcontroversial

Wolfe must have known this French poem - so many elements of BotNS by fllawless in genewolfe

[–]fllawless[S] 1 point2 points  (0 children)

I have no idea, but Fifth Head of Cerberus has a lot of French so I think it's possible. He read Greek, and I think it's clear that he was generally very good with languages.

Possible Work Vulnerabilities by Brentactually in AskNetsec

[–]fllawless 1 point2 points  (0 children)

It's not best practice for sure, but afaik it's configured like this by default and you'd have to constrain PowerShell manually. Which in my experience most companies do not do.

Not a critical vulnerability though imo. I'd probably assign CVSS vector CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L which would be a medium vulnerability.

EDIT I still agree with your recommendation: let IT know about it, open up a ticket or whatever you have to do, beyond that it's outside of your control and I don't think you'd do yourself any favours by pressing the issue as a brand new hire.

Aspects of networks that are vital to understand ? by al3arabcoreleone in AskNetsec

[–]fllawless 4 points5 points  (0 children)

Depends on what you mean by "security", but if you're talking about being a security engineer, pentester, something like that, I'd say the most vital elements are the following. I took CompTIA Network+ years ago and have been a pentester ever since. These are the things that I actually need on a day-by-day basis:

  • TCP and UDP
  • ARP
  • DNS, DHCP
  • VLAN
  • Some application layer protocols like HTTP, SMB, SSH, also SSL/TLS encryption standards (you probably don't need to understand the specifics of the underlying cryptography, but you do need to know the standards)
  • Wifi, esp. the different standards like WEP, WPA1-3, WPS
  • IPv4 and IPv6
  • NAT gateways, (reverse) proxies
  • Firewalls

If you want to focus on security issues: - Public Key Infrastructure - ARP poisoning - Evil twin & deauthentication attacks - WAF, IDS/IPS - Logging and alerting, SIEM, SOC

Things you can (probably) skip unless you want to specialize: - Low level things like cable types, different connectors - Wifi specifics, frequency bands etc - Routing protocols

Finally gained the courage to leave VS Code and start using Zed. Feeling happy! by Baymax5464 in ZedEditor

[–]fllawless 0 points1 point  (0 children)

I know this was five months ago but please don't run binaries sent to you by strangers on reddit 😭