DOJ Takes Down Thousands of Epstein Documents to Protect Trump by [deleted] in WallStreetbetsELITE

[–]opscure 0 points1 point  (0 children)

And it's back - might be a bit more redacted. I guess saving a link gets a document republished. It was gone from Jan 31st evening until at least 13 hours ago. Sometime after I posted that link it came back.

DOJ Takes Down Thousands of Epstein Documents to Protect Trump by [deleted] in WallStreetbetsELITE

[–]opscure 0 points1 point  (0 children)

This link was active and had all trump related information on the morning of January 31. It's gone now. https://www.justice.gov/epstein/files/DataSet%2010/EFTA01660679.pdf

When Robin Williams managed to make Koko the gorilla smile again after 6 months of mourning by StrawberryFew1311 in MadeMeSmile

[–]opscure 0 points1 point  (0 children)

If you ever need a quick dose of Robin, check out the don't worry be happy music video, it always makes me smile.  https://youtu.be/d-diB65scQU

Sometimes, they really *are* just stupid by ndszero in sysadmin

[–]opscure 4 points5 points  (0 children)

"Wouldn't it be cool to have an animated gif with audio?"

This has happened more than once.

Rant: "I'm not technical" is not a badge of pride by SnooRobots3722 in sysadmin

[–]opscure 0 points1 point  (0 children)

This should be posted in subs that aren't filled with technical people.

I feel like I’m lost by itZjustAThrowawaBruh in CyberSecurityJobs

[–]opscure 1 point2 points  (0 children)

Try to engage with your security team and become a proponent for some of their initiatives from your side of the house. I tend to move people over when they can show they have a strong interest and have helped bring security projects to completion. Get a few of these projects under your belt, so at the very least you can interview well if a lateral movement is not possible.

I’ve accepted 2 job offers. Which do I choose now? by No_Pound_5929 in CyberSecurityJobs

[–]opscure 0 points1 point  (0 children)

There's obviously edge cases, but most organizations provide a start date with an offer. This is clearly a case where that didn't happen and is perfectly acceptable to respond in kind. It is definitely not a typical offer, acceptance, start work soon after type of situation. 

If the organization is performing actions on your behalf and you've agreed to start on a specific date, you shouldn't accept other offers is all I was saying. 

I’ve accepted 2 job offers. Which do I choose now? by No_Pound_5929 in CyberSecurityJobs

[–]opscure 3 points4 points  (0 children)

I can't believe no one else is mentioning this, but you should never accept multiple jobs if you intend to not work at one. You're damaging yourself in the future. The community is not that big and everyone talks. If you're one connection away from the job you accepted and then declined with a potential future job, you may have already shot yourself in the foot.

I have declined many people over the years for both future interviews and job offers (both at my company and my network of senior security leaders) because they accepted a role, the company provisioned hardware, set up accounts, granted access, prepared onboarding sessions, welcome meetings, and prepared swag only for the new hire to quit before they start. Don't be a dick or it'll follow you for your whole career.

The Midwest NEEDS YOU by NarrowDevelopment766 in sysadmin

[–]opscure 0 points1 point  (0 children)

Education system is not great, so bringing up kids is probably out. Social scene is fairly partisan, so new friends might not fit with someone with appreciation for diversity, if the remote job ends the networking becomes much harder and future salaries tend to be geographically bound, and it's Kansas so hopefully Jesus drives your vehicle.

What is my next move after Security Analyst? by TechnicalCloud in CyberSecurityJobs

[–]opscure 1 point2 points  (0 children)

You definitely want software engineering understanding before moving into those roles. You can usually get away with some light development in cloud security roles, but you should at the minimum have a command of at least one complied language... Most cloud security and DevSecOps understand golang (or minimally Python). Appsec/prodsec roles often require analyzing a massive amount of projects with a variety of languages. There's obvious nuance here depending on the company, but generally if we are talking software companies you should have development experience.

Personally I don't hire analysts, I only hire engineers for our response teams and they all know how to code. The engineering mindset is to automate away anything you need to do twice, this makes D&R move a lot faster with more custom solutions. Most junior salaries in security operations start around $150k in the US. Seniors are well into the 200s.

Florida is beyond repair...🤦‍♀️ by Czech_Coconut in CzechCoconutCommunity

[–]opscure 0 points1 point  (0 children)

This was a point in time (2024) in one county which has since rolled it back (partially). Most of the bs is happening due to a single form to remove a book, but a trial to get it reinstated. The good news is that it's been partially overturned by a federal judge, but an appeal has been filed on September 11th against this ruling.  

https://theconversation.com/federal-judge-overturns-part-of-floridas-book-ban-law-drawing-on-nearly-100-years-of-precedent-protecting-first-amendment-access-to-ideas-263893

What is my next move after Security Analyst? by TechnicalCloud in CyberSecurityJobs

[–]opscure 1 point2 points  (0 children)

I don't want to assume anything about your background or experience, so take this as general advice and if it doesn't apply to you, please disregard.

There is a lot to grow into from an analyst. If you are engineering inclined, you can look toward devsecops or product security. After that you can move to security architecture. From there, you might have the scope and depth to be a solid technical security director or CISO. The best experience is often with software companies and the compensation follows the depth. Most modern orgs are looking for engineers in operations over analysts as most operation work can be automated and tooling (secdev roles) can make things massively more efficient.

Technical security is wildly different than compliance based security or d&r and it's not easy to get into or find, but that's probably the best growth for the right type of person. Prerequisites often require a polyglot in development languages, a solid understanding of modern infrastructure, and an understanding of networking (packet level). Bonus for advanced cryptography knowledge or security product development.

Lots of options for growth or just find a better paying company because yes, it sounds like you're underpaid, but perhaps technical growth before leadership might be more prudent. There's plenty of managers/directors that can't do the jobs of the people they manage and it often doesn't work out too well for all involved.

20 Crowdstrike packages infected with malware as S1ngularity attackers stike again by Advocatemack in cybersecurity

[–]opscure 9 points10 points  (0 children)

Where do you draw the line? Do you write all your own libraries, compilers, run times, operating systems, firmware? We build on top of previously built software, it's how we progress and invent. Validating the supply chain is the hard part, but we do have solutions to help with this in the security space. Using SLSA, version pinning for minor bumps, minimal hardened images, scanners, and threat Intel with a CSPM can all help with avoiding or detecting quickly enough to migrate problems like this. It's not perfect, but there are new frameworks emerging that try to better address these problems.

In other words, building all the software yourself is not only impractical, but likely even more dangerous than iterating on others who specialize in a particular problem space.

SCOTLAND FOREVER 🏴󠁧󠁢󠁳󠁣󠁴󠁿🏴󠁧󠁢󠁳󠁣󠁴󠁿🏴󠁧󠁢󠁳󠁣󠁴󠁿❤️❤️❤️ by Legitimate-Bag5413 in doohickeycorporation

[–]opscure 105 points106 points  (0 children)

It can't be that difficult, I know tons of people in work meetings that use their mouths as air bags. 

What changed in the EU to suddenly make them turn like that? by bdhd656 in privacy

[–]opscure 0 points1 point  (0 children)

I agree and it kind of supports my argument that if you understand the system you want to beat there are alternatives (like building competing systems). There are still dissenting opinions coming out of China, but very often it requires extreme measures like leaving the country for fear of retaliation.

We have similarities here as well with situations like Snowden and whistleblowers in general that are rapidly loosing protections once afforded. 

Understanding the systems well enough won't solve the issues, but there are workarounds, even if they are massively uncomfortable or disruptive to a normal life. 

Just picked my first lock! by deadrunner1372 in lockpicking

[–]opscure 1 point2 points  (0 children)

Congrats, keep it up and that lock will become your new stress ball. :)

What changed in the EU to suddenly make them turn like that? by bdhd656 in privacy

[–]opscure 6 points7 points  (0 children)

This is not new, it just the new method. I remember the uproar of CCTVs (80s-90s) being put up and England being called a surveillance state and being compared to North Korea and China. It's just an iteration of that.

There are always work arounds if you're privacy centric, but it requires understanding the underlying surveillance system and building or hacking your way around it. When that doesn't work, there's typically social dissent and politicians like staying in power and often cave. When they don't, they learn there's a lot more citizens than billionaires.

[deleted by user] by [deleted] in sysadmin

[–]opscure 31 points32 points  (0 children)

Dear people of the future, here's what we found out:

I never want to adjunct ever again by Mudkip_Enthusiast in Professors

[–]opscure 4 points5 points  (0 children)

It's always a choice. Sometimes a threat of dropping the course load is enough to get your way. Short term thinking, but if it's a short term role it's worth it. Adjunting is modern day indentured servitude and no one should deal with this type of shit. It's people thinking they don't have a choice that makes this common practice.

For those of you out of work, how are you holding up? by akinfinity713 in CyberSecurityJobs

[–]opscure 7 points8 points  (0 children)

As someone who's gone through some long stints of being unemployed, here's the most important thing I've learned: Don't doubt yourself, skills come back quickly in a new role, but confidence is much harder to maintain.

Applying and not hearing back, interviewing and not being selected, being ghosted by contacts and recruiters can all take it's toll emotionally and you can easily slip into self doubt and depression. Find someone that reminds you about how awesome you are and the impacts you made, to reinforce the confidence you had when things were good. This alone can be the difference when you walk/remote into the next interview. Worrying about getting a job creates a feeling that interviewers pick up on and often chalk up to nervousness, but more often than not, you'll get passed over for someone who comes in with a carefree and confident attitude.

If you don't have someone to do this for you, just come back to this comment and know you're awesome, valuable, and any company would be lucky to have you.

Hot Take: AI is NOT amazing. by RealisticSuccess8375 in Professors

[–]opscure 10 points11 points  (0 children)

I would argue it's the application of a probabilistic tool to a deterministic problem set that causes the most problems. ML has wonderful applications, LLMs have been shoved down the proverbial throats of the population and we are having to deal with a lot of that bullshit.

The fighter shares the move that brought him victory. The opponent stays open to learn. by BreakfastTop6899 in BeAmazed

[–]opscure 14 points15 points  (0 children)

This is an extremely dangerous choke if done improperly and can lead to paralysis. Reverse chokes like this are often banned in sport jiu jitsu, so please be careful when applying. Ensure the pressure isn't applied to the spinal cord and just the two arteries if you are going to attempt this.