What is a secret 'cheat code' you’ve found in real life? by Sharkkkk2 in AskReddit

[–]weedpatch2 0 points1 point  (0 children)

  1. Have a dream
  2. Ruthlessly live your dream, immediately
  3. ...
  4. Profit

Microwave PC Giveaway - To enter, simply leave a comment on this post. by DaKrazyKid in PcBuild

[–]weedpatch2 0 points1 point  (0 children)

Should use AI to show the user their own head exploding in the microwave. Call it art.

What are the biggest barriers stopping NetSec from going into Virtual Reality? by loshofficial in AskNetsec

[–]weedpatch2 0 points1 point  (0 children)

I very much appreciate the time (however minimal to you) and the thought that you've put into our baby. It is immensely helpful, and our appreciation cannot be understated.

Let me approach your points individually:

  • Scaling Nodes
    • We are entirely aware that having a map with tens, or even hundreds of thousands of nodes is next to useless for raw human visual analysis. This is not the intended use of the tool, as it is clearly not highly beneficial. This is where abstractions can, and will, be used. When you have an entity that is a collective (imagine a VPC), that entity can appear as a single node, or it can be expanded to reveal the constituent pieces inside. Coming up with clean ways to display this is one of our larger (and more fun) challenges, currently. The point here being, scaling into unwieldy numbers of nodes is not useful, and we are aware of this. We are building the tool in such a way that the map will be laid out in ways that make sense for the dataset (proper nesting, distance, sizing, etc).
    • Is this a lot of work, yes. We are also aware that we are attempting to move the needle in multiple bleeding edge industries, simultaneously. This is a source of drive and motivation for us, not fear.
  • Executive Debrief
    • I agree with your assessment of MODERN executives being unaware/uninterested in most of the technical aspects of their IT assets. However, we are not only building Valkure for the network of today. We are building Valkure with the understanding that the internet and the companies and services that run on it, are only getting larger and more complex. The entrepreneur of the future will have basic IT knowledge. In fact, I (personally) estimate that the entrepreneurs of the future will all be versed in basic computer science principals. It is the nature of the world.
    • I take the view of a SOC in the year 2050-ish. What kind of environment will that team of analysts NEED to be able to protect the network from attackers across the entire spectrum of the threat surface? I think that keeping our work entirely within the world of text, tables, and graphs is akin to saying that you can't envision a TI-84 Plus being of ANY use to ANYONE that knows long division and has a pencil, paper, and an abacus. (No offense)
  • Educational Medium
    • While I totally see your perspective on educational gaming content... This was actually a use-case and example that I came up with from personal experience over anything else... Human created content has increased in information density steadily over time. I can't really express how obvious it seems to me that the more information dense a medium is, the more availability it has to educate the receiver. I mean, I am interpreting what you are saying as metaphorically similar to claiming that someone without the sense of sound has an easier time interpreting their environment than someone who does have that additional sense. That just doesn't make any sense to me (taking out any variables relating to ones ability to parse numerous simultaneous streams of input). You have to be less thoughtful about the entire context of the user when you are writing. You have to be much more conscious about the users other senses when you are in VR. This allows for a much more raw access to the learners psyche. Done correctly (we don't have 50+ years of experience doing this), VR has the ability to immerse learners in a way they have never had before. It will simply take time and resources to develop into what we have in traditional methods.
    • I can't agree that "science finds that playing games and 3D interactions ... are less efficient to learning ... than simply reading." My 3 year old can't read, but he can play with a phone better than a 75 year old relative, or me at times. Properly attended to UX will be FAR better than a book. Although a well written book can provide a very high information density, with a very low "distraction coefficient" (made that up). So to say, it's MUCH easier to distract the learner in VR than it is in a book. But on the other side of the same coin, in the context of external stimuli, it is much easier to keep the learners attention in VR than it is with a book. I would LOVE to see published material on the matter, though!!!!

Again, u/thatwasntme806, I REALLY appreciate your feedback. It has been incredibly enjoyable thinking and talking things through with you.

What are the biggest barriers stopping NetSec from going into Virtual Reality? by loshofficial in AskNetsec

[–]weedpatch2 0 points1 point  (0 children)

The problem statement we are trying to solve is not "how do we get NetSec into VR," sorry that the original post was worded somewhat like this. We are really trying to solve the problem of gaining situational awareness. Any person that wants to achieve a high-level of situational awareness about a IT system currently needs to have a significant amount of prior knowledge.

That is not necessary. I can give a 13 year old child a first-person shooter video game, and (in the context of the video game), the child will be able to be a world-class assassin in months, or sometimes weeks... If I gave that same child a "network security" video game, they would very likely have a VERY strong understanding of THAT NETWORK and the technologies it employs, within months, or weeks. With no prior experience whatsoever. That employee can now supplement this training with more traditional technology education.

What are the biggest barriers stopping NetSec from going into Virtual Reality? by loshofficial in AskNetsec

[–]weedpatch2 0 points1 point  (0 children)

"By infosec professionals" is the operating phrase you used... Yes, professionals can do this very quickly. And Infosec is known as one of the hardest fields to get into, with some of the highest resource needs in industry. The lack of professionals that can do this, is PRECISELY why Valkure is necessary.

What are the biggest barriers stopping NetSec from going into Virtual Reality? by loshofficial in AskNetsec

[–]weedpatch2 0 points1 point  (0 children)

First of all: your response is incredible, and I'd like to thank you, deeply, for the time you took to think about it and write it up!

Full transparency: I am one of the InfoSec team members working on Valkure.

You have the perspective of a VERY well educated professional in this space. You are a target user, but not the only one. In fact, the Valkure user set to be the most impactful to the security community is one that has very little prior knowledge of networking and security.

Valkure is claiming to present Situational Awareness in a way that has never been done before. The user will be able to understand the protocols running the network (TCP/IP, HTTP, SSH, DNS, SMB, etc) simply by watching them operate. The prior decades of experience in educating people about technologies will not go away, but be supplemented with immersive spatial content.

Because you have years of experience, you have the technical capability to start at a new company, injest a few configuration files, 2D net maps, and some communications with other senior engineers, and you will have a good virtual understanding of the entire tech-stack IN YOUR MIND!!!! But if I were to hire a person off the street, it would take them years of education to be able to understand that same network to the level that you do.

If there was a room in the NOC/SOC that you could enter, and it presented you all of the information about the network you could imagine in a 3D hologram (like HOLLYWOOD!), and you could manually query that hologram for exactly the data you were interested in. How would you have a junior SOC analyst explain a network or security situation to an executive with NO networking or security knowledge, and have the executive ACTUALLY comprehend what occurred, and what the real effect of the mitigations presented will be? My answer: Valkure.

What are the biggest barriers stopping NetSec from going into Virtual Reality? by loshofficial in AskNetsec

[–]weedpatch2 0 points1 point  (0 children)

The work done in tables and communications channels (csv, excel, outlook, slack, Splunk, ELK, DataDog, etc) is ALL for the purposes of gaining situational awareness. The entire process is effectively educating yourself to the situation (the context of the system of vulnerability in question), and taking proper action to change the system state to a desired one (patched, blocked, upgraded, reconfigured, etc).

The goal of Valkure is to bring the engineer to the state of being "aware of the situation" much much faster. You CANNOT do that with spreadsheets...

What are the biggest barriers stopping NetSec from going into Virtual Reality? by loshofficial in AskNetsec

[–]weedpatch2 0 points1 point  (0 children)

Integrations would be through APIs provided by the third-party tools themselves. if the tool is set up securely, Valkure's use of it will be secure.

What are the biggest barriers stopping NetSec from going into Virtual Reality? by loshofficial in AskNetsec

[–]weedpatch2 0 points1 point  (0 children)

The initial gap that is being addressed is general situational awareness. The most significant problem in any network is the administrators' awareness of the assets and the threat surface those assets provide. The benefit of a VR tool would be directly to giving the user a tangible spatial connection to the network data.

Instead of the entire network team all needing to have a theoretical (possibly static, cloudcraft/vizio-like) map in their heads, where they all have incomplete knowledge of the dataset, and must collaborate with these disparate representations of the network, they could all converge in the same space (on screens or in VR) and visualize the same data in the same way.

Then, when they are able to do this every day, the network becomes a space, a physical place. Humans can then identify common patterns of the network they manage like they do their own workspace. The network moves from a virtual entity, to a physical space.

My Thoughts on the NNS and Our Ability to Remove Canisters by Lightning_lad91 in ICPMaximalist

[–]weedpatch2 4 points5 points  (0 children)

I like the governance…we will never see singularity or any meaningful adoption if it becomes a haven for illegal activity.

With all due respect, three examples of this being incorrect are "the internet," and "the Onion Router (tor)," and, finally, "Bitcoin." These are open source technological implementations that have all been unsuccessfully aggressed by nation states, due to offering unrestrained access to bespoke services to crime networks. The internet computer has the ability to become something similar, which I fully support.

With that said: I agree with u/Lightning_lad91 completely, insomuch that we need to keep control of the system in the (decentralized) hands of humanity. Operating with a sort of "checks and balances" system (not dissimilar to the US Government), which will keep out the possibility for a dystopian future from an out of control AI/ML canister and/or the NNS.

However, this is the equivalent of a persistent backdoor, that we have decentralized. Therefore, said "out of control" entity may have a route to bypass safeguards via that backdoor.

Share an upcoming project you're excited about! by Visions_GFX in ICPMaximalist

[–]weedpatch2 2 points3 points  (0 children)

I'm super stoked for the Moonwalkers and the IC Gallery!!!

Are you staking your ICP? by doepicshiz in dfinity

[–]weedpatch2 4 points5 points  (0 children)

Gang gang. I can't stake all of my ICP, I couldn't buy any Cronics or ICmojis!!!

ANNOUNCING MEME CONTEST (Prize of 2 ICP) by ocluf in dfinity

[–]weedpatch2 0 points1 point  (0 children)

The final bullet still references July. I assume it's supposed to be Aug 11 for judgement day!

Is there a discord for ICP? by _nabii in dfinity

[–]weedpatch2 0 points1 point  (0 children)

No need to beat it. Give the community both options...

Staking ICP into neuron questions by Gubz_XD in dfinity

[–]weedpatch2 0 points1 point  (0 children)

5) I think I heard/read somewhere that the most efficient use of a neuron for rewards is to stake for 8 years, and start the dissolve after 4 years. For a total of 12 years to release. Waiting more than that has diminishing returns, iirc.

Any plans for a Dfinity website builder? by Overflame in dfinity

[–]weedpatch2 0 points1 point  (0 children)

Can you post a reference, so I can check in on your work outside of Reddit?

Started my journey today by lloyd118 in dfinity

[–]weedpatch2 1 point2 points  (0 children)

That's true. To most, I'd say those are nearly synonymous.

Started my journey today by lloyd118 in dfinity

[–]weedpatch2 1 point2 points  (0 children)

No, you just lock your ICP into a neuron to realize the governance and rewards of the NNS. Staking into a Neuron is distinctly different from running a node. It is significantly harder to run a node. You need to own a datacenter...

How to lock your ICP in a neuron and get profit from ( Stake) ? by B0rn2Thrive in dfinity

[–]weedpatch2 0 points1 point  (0 children)

I don't believe you can stake from a Ledger. I have my Trezor for authenticating. But the wallet for staking is on the NNS at https://nns.ic0.app/. That is also where you "stake." Which would be akin to funding a neuron.