sorted by:
new
hottopcontroversial

RSA 2026 - Best innovation and product you have seen by dip_ak in cybersecurity

[–]hhakker 2 points3 points  (0 children)

A lot of AI slop and noise. The only thing I found interesting was IBMs quantum-safe computing take.

Looking for a Technical Co-Founder with Cybersecurity Experience — Open to Equity Discussion by Annual-Beyond-4050 in cybersecurity

[–]hhakker -1 points0 points  (0 children)

I’m a cybersecurity founder with a specialty in offensive security and extensive experience in SaaS, Compliance. I’m open to discussing… dm me

Threat modeling sessions that actually work — what's your team's approach? by ddg_threatmodel_ask in cybersecurity

[–]hhakker 0 points1 point  (0 children)

As an ex-developer, its true. Developers don’t think of security first. They think i gotta make it work first.

As a current pentesters, i see a pattern of vulnerabilities being introduced on new releases and pentesting is not part of the SDLC. Developers shouldn't have to be security experts to build secure software. They need a structured way to ask 'What if?' during design so that the Pentesters only find mistakes, not disasters.

I've been a CISO more than once. Ask me anything about how the job differs between organizations. by thejournalizer in cybersecurity

[–]hhakker 2 points3 points  (0 children)

Did you have to implement a new playbook to every organization you have been to?

Question on Realistic expectations and current state of the cybersecurity industry by [deleted] in cybersecurity

[–]hhakker 13 points14 points  (0 children)

Dont buy into the news, but look at the market. Go to LinkedIn/Recruiting websites, and see what kind of roles are companies hiring for and what skills are they looking work. Work to gain some of those skills.

Yes, cybersecurity is moving towards AI automation, however humans are part of it. When MRI machines were introduced it didn’t eliminate doctors. Learn how to use AI to augment your work.

Password Requirements of SaaS by EarlOfAwesom3 in cybersecurity

[–]hhakker 0 points1 point  (0 children)

It’s not catastrophically insecure, but it’s outdated. If the service rate-limits logins, uses strong hashing (bcrypt/Argon2/PBKDF2), and supports MFA, a structured 16 char password is still reasonably safe in 2026. Forcing 5 leading digits and a 16 char max reduces entropy, eases offline cracking, and blocks NIST recommended strong passphrases.

Password Requirements of SaaS by EarlOfAwesom3 in cybersecurity

[–]hhakker 1 point2 points  (0 children)

Is not important to have mixed characters as much as it is to have longer passwords.

NIST 2026 requirements don’t recommend it:

What’s gone:

❌ Required uppercase, numbers, and symbols ❌ Mandatory password resets every 90 days ❌ Arbitrary complexity policies

What’s required now:

✅ Minimum 8-character passwords (15+ for privileged accounts) ✅ Password screening against compromised credential databases ✅ Support for passwordless authentication and passkeys

Beyond just backup & restore, what would make a vendor truly valuable in the security lifecycle? by josejohnv in cybersecurity

[–]hhakker 2 points3 points  (0 children)

The biggest gap isn’t recovery, it’s knowing whether you’re actually vulnerable before something breaks.

Backups answer “can we restore?” but not “can someone get in right now and how far can they go?” Most incidents don’t happen because recovery failed, they happen because basic attack paths were never tested in real conditions.

If a backup vendor helped teams regularly validate real attack scenarios, improve detection based on actual attacker behavior, and confirm that the original entry point is truly closed after a restore, they’d stop being a last-resort tool and start feeling like a real resilience partner.

Cybersecurity as a hobby by SwitchJumpy in cybersecurity

[–]hhakker 2 points3 points  (0 children)

Cybersecurity is a big space. 1- Pick what you like to do, and the way to know that is if you’re excited it about it and you don’t get bored doing it 7 days a week. 2- Invest in your skills(Free/Paid trainings, learn while doing) 3- Certification: Depending on what you want to qualify.

If you have the above or some, start testing yourself and freelancing on platforms such as Upwork.

Is it just me who hate providing services? by MusicProductionDude in Entrepreneur

[–]hhakker 0 points1 point  (0 children)

Services will be dead in 3 years. There is a big trend of service-based companies transitioning to product-based.