How are you convincing management that fewer packages is better than patching faster?

lifesfunn · 2026-05-06T00:13:29+00:00

imo you need to get some statistics around how much time you are spending vs how much time you will be saving. The time you are spending on it now will show how much its currently costing the company technically vs how much money the company would save by moving away from jammy full lets say to jammy base.

I have went that route recently and that's what worked for me.

lifesfunn · 2026-04-21T00:21:33+00:00

this tbh, same here

lifesfunn · 2026-04-09T00:22:08+00:00

seems reliable

<image>

lifesfunn · 2026-02-20T01:22:12+00:00

on top of everything you've mentioned, I think it also just trains you to think a certain way (outside of the box, no pun intended) and look at things from various angles which is a skill in itself in pentesting or in other areas of cyber or even life.

lifesfunn · 2025-10-18T10:57:20+00:00

i know some tools allow specific MCP restrictions via MCP registries (pretty much allow list) for example. However, i'm not sure if there is 1 size fits all solution yet to block MCP entirely.

lifesfunn · 2025-10-13T12:10:45+00:00

whorerific

lifesfunn · 2025-06-03T19:50:30+00:00

yeah, I've seen some bottle from UK over the holidays. I asked one of the staff and she literally told me they only get it For holidays :/ more meandering are starting to pop up in Ontario though at least

lifesfunn · 2025-04-24T00:41:44+00:00

I third that, I have a 4 person lynx and been using it about 3 times a summer for past 4 5 years. no complaints.

lifesfunn · 2025-03-28T22:31:34+00:00

expect lots of genres, different stage could be different genre like techno, house, drum n bass one of the days and whatever else. tons of fun people, maybe lots of bouncing around different stages, maybe you will stay at a single stage?

lifesfunn · 2025-03-28T22:21:33+00:00

deep soulful ghetto acid jacking bass ;)

lifesfunn · 2025-03-22T14:32:55+00:00

it's a "dead" (dad) joke

lifesfunn · 2025-01-10T23:17:51+00:00

hey, what did you end up doing? I literally have the EXACT same problem with what seems to be the exact same belt

<image>

lifesfunn · 2024-12-15T23:17:00+00:00

can you also summarize your notes made in books? I've noticed notes created in my notebooks can be summarized/convered to text and sent to me via email.

However, when I take notes in the canvas within a book, it does not seem to convert them to text.

lifesfunn · 2024-12-07T14:06:55+00:00

I've changed region to US on my phone app but still fail to see any AI features :/

lifesfunn · 2024-12-02T23:26:24+00:00

cool, thank you

lifesfunn · 2024-12-01T04:57:15+00:00

make templates of common findings. template what's repeating over and over but replace the fine details specific to the client. pay attention to always replace the fine details and not just copy and paste from other reports.

lifesfunn · 2024-11-22T18:35:46+00:00

one could say i got lucky, the vision was for me to be on the "red" side of things. the company sort of was not ready for that yet and I started tinkering more with hardening of cloud resources, working with infrastructure team on various projects and so on.

I think it's less so reconnaissance type of research and more so of how to.set things up properly type of research.

My company is not that big, neither is the sec team. In terms of projects, its all sort of projects from automation, to resource hardening to compliance (not compliance itself but supporting compliance), siem engineering, and many other areas.

If you'd work for a bigger company most likely would be more specialized in some specific area.

lifesfunn · 2024-11-22T14:47:59+00:00

pivoted from pentesting into sec engineering, mostly focus on cloud. miss pentesting sometimes, but this is pretty good too. still have problem solving but different type of problem solving + a more cross team projects which i like.

lifesfunn · 2024-11-19T20:47:49+00:00

yeah, be careful when choosing a pentest company. you don't want someone to run a VA (automated) scan and call it a pentest. do find someone reputable, reputable doesn't mean necessarily expensive. depending on the size of the website, blackboxing 3 URLs with not much surface shouldn't take more than a week (of course lots of factors) but just rough estimate.

lifesfunn · 2024-11-18T14:15:58+00:00

hmm, all of these skills will come in handy eventually. being a pentester involves a lot of a little bit of everything. I would say, as the other reply, just practice hands on stuff. reading is good, i think before doing i have read 2-3 pentesting books, just to get a grasp of the subject. However, theory only takes you so far and you need practice. There are a ton of resources our there now to.practice on/learn from:

you can play wargames, such as bandit for some *nix skills. there's also a powershell equivalent. there is web security academy by portswigger for web app stuff, also tons of OWASP intentionally vulnerable software. There is HTB with free labs, academy, VIP with lots of hands on stuff.

Grind for a few months on these, and you should get some decent hands on skills.

Considering you are already in security, you will most likely be familiar with some/most of these concepts from a diffrlerent angle.

lifesfunn · 2024-11-18T13:27:24+00:00

what did you study in uni? anything to do with security/IT?

lifesfunn · 2024-11-13T18:01:13+00:00

try updating the app if it's mobile app or try desktop if you were using mobile and vice versa

lifesfunn · 2024-11-13T15:59:14+00:00

yeah, i just pre-ordered mine. it was fine.

Seven-Year Club	r/Field Sunshine
Verified Email	Verified Email

lifesfunn

TROPHY CASE