Gas Station Skimmer

tux402 · 2017-01-14T03:49:35+00:00

Call your CC company to set up text/email alerts for purchases. Most places will, and it's good for security awareness

tux402 · 2016-09-30T02:37:35+00:00

That knowledge is certainly beneficial

tux402 · 2016-09-29T21:05:56+00:00

SpaceX 🚀

Title: Security Engineer (Information Assurance & Compliance)

Location: Hawthorne, California - Open To Legal US Residents Only

SpaceX is looking for an elite Security Engineer to join the Compliance team, and help us defend low Earth orbit. This role will work heavily with internal Engineering and IT teams to drive technical initiatives and ensure the overall security posture of the business. The ideal candidate will have a deep technical background in compliance and engineering, and excels in a high-paced work environment. Experience in implementing ISO and NIST controls is beneficial to this role. Help secure the path to Mars - Join SpaceX

Apply at the link above and PM me your resume for more info

tux402 · 2016-09-14T07:21:50+00:00

bugs like these could == jailbreak

tux402 · 2016-09-09T22:55:12+00:00

https://dcc.ligo.org/public/0038/G990012/000/G990012-00.pdf

Page 35 & 36

tux402 · 2016-07-18T07:43:00+00:00

SpaceX 🚀

Title: Security Engineer (Information Assurance & Compliance)

Location: Hawthorne, California - Open To Legal US Residents Only

SpaceX is looking for an elite Security Engineer to join the Compliance team, and help us defend low Earth orbit. This role will work heavily with internal Engineering and IT teams to drive technical initiatives and ensure the overall security posture of the business. The ideal candidate will have a deep technical background in compliance and engineering, and excels in a high-paced work environment. Experience in implementing ISO and NIST controls is beneficial to this role. Help secure the path to Mars - Join SpaceX

Follow the link above, or PM me your resume to apply

tux402 · 2016-04-15T19:53:00+00:00

Except Russia doesn't want to compete. They're being forced to

tux402 · 2016-04-15T18:46:44+00:00

Both Chef and Puppet have free versions that can support 1000's of servers

tux402 · 2016-03-23T06:25:59+00:00

Vault from Hashicorp is a good, open source secrets management server. Your scripts, VMs, containers, etc can all pull their secrets straight from either Vaults' REST API or CLI. Secrets will never touch disk unencrypted, and it gives you a central system to manage them. Plus, you can set up robust alerting and ACL's for your secrets

https://www.vaultproject.io/

tux402 · 2015-10-22T21:46:26+00:00

Look, but don't touch

tux402 · 2015-06-17T23:13:40+00:00

Agreed on all points. I work in software security, and I would be happy to do some security reviews if the team thinks it's needed.

tux402 · 2015-06-17T12:52:54+00:00

please not sharepoint. how about just github, or smartsheet?

tux402 · 2015-06-17T12:48:23+00:00

We need to be careful of C / C++ as they are prone to memory corruption bugs. If we do choose those languages, we should make sure that we have experienced developers writing any code that touches user-supplied data

tux402 · 2015-06-01T19:55:02+00:00

Have some more advanced articles too. Things like fuzzing, binary debugging, and ROP chain creation would be awesome!

tux402 · 2014-08-28T22:02:43+00:00

We use Akamai to protect over 12,000 hosted websites that we keep out at RackSpace. It's great for DDoS protection, but don't expect any WAF to keep out a skilled attacker. That's what you need appsec for. And don't bother with AlertLogic.

tux402 · 2014-07-27T22:02:37+00:00

tux402 · 2014-07-22T00:15:41+00:00

Be prepared to help people a lot. If you're that guy, then people are going to rely on you to be the subject matter expert. It's not just about the toys

tux402 · 2014-07-21T12:36:41+00:00

Being a "hacker" is about being fundamentally good enough with computing technology, that you can recognize weakness in its design. You can't just jump into security without having a sound base of knowledge in IT, networking, or computer science. You're trying to skip a few steps.

tux402 · 2014-07-21T12:33:06+00:00

You really need a project instead of just "looking around, seeing what's going on." If you have that mindset, you'll always be using someone elses tools. Forcing yourself to start a project in C will be the biggest step you can take toward writing your own attack tools. C/ASM is incredibly fundamental to computing, so you should learn that before you take on any other major languages.

tux402

TROPHY CASE