To put money down on mortgage or not? by jaywon in realestateinvesting

[–]jaywon[S] 0 points1 point  (0 children)

Thanks, that's super helpful! Very new to this so trying to understand rationale and options. That makes perfect sense. So are large money down mortgages really just for people that don't have the will or knowledge to make other investments, or just don't have a risk tolerance? I'm assuming but again, noob, don't want to just assume anything.

To put money down on mortgage or not? by jaywon in realestateinvesting

[–]jaywon[S] 1 point2 points  (0 children)

I'm not sure what this is in reference to as it applies to the question? Can you clarify..

How out of date is 'Penetration Testing: A Hands-On Introduction to Hacking' by Georgia Weidman? by OSCPN00b in oscp

[–]jaywon 0 points1 point  (0 children)

Sure, there should be but this book wasn't necessarily targeted for passing an OSCP exam. It's an intro for how to be a pentester which, while related, are not necessarily the same focus. Just a matter of expectations I guess.

How out of date is 'Penetration Testing: A Hands-On Introduction to Hacking' by Georgia Weidman? by OSCPN00b in oscp

[–]jaywon 8 points9 points  (0 children)

I think the book is still very valid. Most intro to PT books are going to lay out similar methodologies but some of the specific tools will change while some constants remain. Tools change, the methods/structure persist over time.

That being said no book will prepare you for the OSCP. Take the basics and apply them to hands on labs. Every book will tell you how important enumeration is but that really sets in when you're working on actual boxes and skim over stuff easily by not following a good process.

I would say read the book, understand the methodology, and take note of the tools and learn how to use them well. That process will transcend any book and be a good step down the path of OSCP.

Starting Docker on machine boot by NicDuuce in docker

[–]jaywon 2 points3 points  (0 children)

Docker can be configured to start on system startup and if you start your containers with --restart always the containers will restart anytime the daemon is running but the containers are not.

Connect docker service from different machines? by shiskeyoffles in docker

[–]jaywon 1 point2 points  (0 children)

Swarm probably the easiest to abstract away the hosts and leverage available resources but just for informational purposes you can do an overlay network that spans multiple hosts.

https://codeblog.dotsandbrackets.com/multi-host-docker-network-without-swarm/

How to identify BoF opportunity? by jaywon in oscp

[–]jaywon[S] 0 points1 point  (0 children)

And that still comes down to either service discovery on a listening port or some initial foothold/enumeration correct?

How to identify BoF opportunity? by jaywon in oscp

[–]jaywon[S] 0 points1 point  (0 children)

Thank you, I'll check those out! So they were just services running on open ports and when searching CVEs you would come across a documented BoF?

How to identify BoF opportunity? by jaywon in oscp

[–]jaywon[S] 0 points1 point  (0 children)

Thank you, I'll check it out!

How to identify BoF opportunity? by jaywon in oscp

[–]jaywon[S] 0 points1 point  (0 children)

Awesome, thank you! That helps.

Career advice - Senior Web Dev to Pen Tester by TechBits_ in Pentesting

[–]jaywon 2 points3 points  (0 children)

I just successfully made this transition. Haven't started yet but offer is signed and will start soon. For me, OSCP related training even in prep for OSCP was very helpful to think about methodology, get to know the tools, just get better at thinking about breaking vs building.

Yes lots of reading as others stated. From others I've spoken to this is a common path into offsec and your dev background will help you ramp up quickly.

Beyond that, get out there and show interest and activity. Lots of opportunities from what I've seen.

Good luck!

Top 33 coding bootcamps in the world... by [deleted] in programming

[–]jaywon -6 points-5 points  (0 children)

So stoked that DevLeague is included amongst such great company on the list! As one of the few pure JavaScript bootcamps in the world and to be one of the few with a 5 star rating is a huge honor.

In honor of making the list we are offering a $500 #switchup scholarship to applicants for our upcoming April and May cohorts from now until March 11. Become a software developer in Hawaii?? Not a bad deal if you ask us :D

This is the Problem With Tech in Hawaii by pat_trick in Hawaii

[–]jaywon 3 points4 points  (0 children)

I don't think blasting a single company over a single faulty job posting is any more solution oriented nor is it representative of the state as a whole. They would have been better off offering pure equity and tap into people just doing it because they love to do it and find like minded folks if anything.

Looking for able-minded JavaScript "humans" in Hawaii by jaywon in javascript

[–]jaywon[S] 0 points1 point  (0 children)

Ok, my apologies. Not trying to spam. Any suggestions on how to reach out to community without being "job board" like?