yao420

CTF style challenges like praetorian are the standard for offensive security roles. They are a fun time and really let the teams understand how you approach things.

Only bad experience with that was patreons ctf, the containers didn’t work so I spent the hour interview trying to get it to run. Horrible experience.

Idk but Correlium virtualizes iOS instances and was sued by Apple before settling the case.

I can’t think of a single software that does not have fierce competition. Just today, YouTube, slack, chrome, Claude, burpsuite, interm, obsidian, nest, outlook, Zillow, AWS, cloudflare,GitHub, Roborock, jetbrains.

They could all be replaced and do 90% of the job immediately and a week later figure out the last 10%.

As as for work, coinbase is not the only exchange, square is one of many, meta is another social media site.

Literally every software I have ever used or company I worked for has had multiple competitors doing the exact same thing.

Wouldn't it be great if you could just walk up to a local business and offer to pay them in some new cryptocurrency they've never heard of.

Not being snarky but why would this be great for anyone? What would be the point?

Why specifically non-VC?

I’m working on something which I think would be a great product but a direct competitor got $25 million in VC funding in 2021.

He posted on that his source was unreliable and he retracted his articles.

https://krebsonsecurity.com/2022/08/final-thoughts-on-ubiqui...

I’m not a crypto hater (I used to work security at coinbase) but I think that while a chrome or iPhone zeroday might be worth less in bug bounty it’s worth more for a security engineers career long term.

Having the iPhone bug and the accompanying conference talk and blog post will allow you get hired by nearly any good security or tech company. No one cares about blockchain bugs except other crypto companies. When I and a bunch of other coinbase engineers were looking for jobs we were looked down at for even working in crypto. And weren’t even in the blockchain team! Just regular engineers.

I myself have dedicated a couple of months to testing gnosis and curve that each have $2 million bounties but turned up short. Last year I switched to a ML based fuzzing research and was able to speak at defcon and got crazy offers after publication.

I actually think people haven’t found anything because few skilled hackers have dedicated time to it.

If the project zero team or Tavis by himself dedicated time to reviewing bitcoin it would fall apart like any other software.

What are miners doing with GPU’s?

So what’s up with that Oracle buyout/integration?

According to https://usds.tiktok.com/ all US user data is on Oracle servers.

Is that still happening?

I have not used the online version but you could have just as easily walked into a western union and done the exact same thing for substantially less fees.

I hate the term cyber over infosec but anyway I’ve spoken to two CISO’s just this month who told me their primary directive is integrating LLM’s into event analysis and triage. So it’s definitely happening.

I live in Austin and lived in San Antonio and the same complaints about the DA and underreported crime are rampant, especially if you believe the subreddit or my uncle who lives 6hrs away in small town and hasn’t visited in 4 years. How true is that really?

Spectrum is the ‘most popular’ internet with the most customers in my area.

Not because they are liked but because they are the only option outside of maybe starlink.

Sounds nice. I grew up in El Paso Texas and there is a huge refinery in the lower valley and it completely ruined the quality of life. It’s located in a poor immigrant neighborhood right in the city core.

You can see the flares burning all day and all night. The smell in the surrounding neighborhood is unbearable. Every day tankers line up outside causing traffic jams so much that the refinery has to hire police traffic controllers. More than once I recall a truck crashing and spilling its contents while growing up.

Really sucks all around.

The portswigger courses from the creators of burp and the employers of this researcher are the best. Free too.

You post this type of message in nearly every crypto thread yet every time you are pressed you don’t name a single company, project, or thought leader.

Personally I’ve worked at both coinbase and a blockchain company called avalanche. I think crypto is scams all the way down.

QuickCheck is not a true fuzzer, it is a property tester.

Doesn’t seem to work on mobile. I’m only see the titles.

Are you paying taxes on every conversion? Because if no that would classify as illegal.

Is it a dead project now?

I searched on the coingecko link you provided and only see $3.9k in liquidity and a single $65 trade in the last 30 days.

Austin is like that, the crane is our unofficial mascot.

But meta, google, bytedance, intel, ibm, indeed and others have said they are canceling leases on these big beautiful downtown office towers and have been laying off mass amounts of local people.

I don’t know about these specific finance firms but in Texas companies move corporate headquarters for tax benefits but don’t move the workers.

Space X and Tesla made a big deal about moving to Texas but it was recently announced they are closing the small engineering teams and moving the ‘engineer headquarters’ back to Silicon Valley.

I used it on the htb cyber apocalypse ctf a few weeks ago. It did phenomenal and I was able to get a ton of flags on the crypto and ML challenges I otherwise would not have even tried.

Why when USDT is printing a billion in tether several days a week. They are artificially pumping the price.

https://twitter.com/whale_alert/status/1649159592520085507?s...

Interestingly my immigrant welder/mason grandfather (RIP) told me the same about 20 years ago.

He was dropping me off at a mechanic shop for an automotive Boy Scout merit badge and I think he thought I was interested in becoming a mechanic. He told me before dropping me off that if I wanted a trade electrician was the highest paying and easiest on the body.

Copilot?

I’m paying the $10 a month and I hate subscriptions.

What are the best ones for code? I’m looking to write and measure the coverage of generated fuzzers and unit tests.

I’ve worked in security for 10 years at startups to faangs and have even presented at defcon a couple of times and don’t see the concern. I take my iPhone and regular laptop to defcon for a decade.

What is the worst that can happen? Everything is ssl with hsts so even if they own the wifi connection they can’t eavesdrop. Do you expect someone to launch an apple zero day?