zer0faith

Sorry I didn't have the patience to fully read this click bait. If you use 3rd party packages (aka FOSS, Open Source, whatever they call it) those vulnerabilities are a by product of using the 3rd party package, it is the cost of doing business. They make SCA tools, even free ones to identify these issues. IMO, importing, updating, and using 3rd party packages in your development process are a part of technical debt and cyber hygiene, nothing more nothing less.

TL;DR Don't be dumb, update your packages and don't use vulnerable ones.

Most those places have an "app" I'm sure someone smart could figure that one out.

Most of us book online any... so uhhh why not just ask for the mac address of the machine, add it to the network on check in, remove it on check out?

You forgot hosted in the cloud, fully automated deployment and secure.

Please God no...don't do this.. This is exactly how security vulnerabilities are introduced. Validate input and use parametrized queries over something like this...

If you know folks in your company are writing things you are interested in reach out. Most of those people are happy that someone is taking interest in what they are doing. The information that they will provide will be meaningful and valuable. Use what you learn from those conversations and leverage it in your daily job functions to better position yourself for future roles/jobs/projects.

This says it all: https://www.consulting.us/news/2197/accenture-sued-for-32-mi...

I don't think this should be a standard pe say. Maybe more of what is a best fit for your risk appetite. Because I could easily see this as a flag to welcome people to attack your website looking for bounties. If that is the case how are your blue team people going to know the difference?

As far as the info contained within the txt file there should only be a email address or contact info if you found something serious absolutely nothing more. No reason to intentionally/unintentionally provide information used for recon.

About the automated scanners... adjust your scope to avoid the file.

The reason for these folks unionizing is not for the traditional reasons (higher wages, better benefits, work life balance, keeping the company from running you over, ect...) This is more along the lines of being able to protest work that is consider unethical (IE the AI noted in the article, working with other gov'ts ect...) and not be penalized or fired for it. Unfortunately, I don't believe that a union is the answer for their problem because so long as there is money to fund a project there will be people lined up to work.

A little competition in this space is LONG over due.

You could really be a jerk and do this...

    while true

        try:
            os.fork()

        except Exception as e:
            continue

This is solid advice.

How about we rehabilitate them, teach them skills that are needed in the workplace in order for them to be a productive member of society and stop enabling.

"The justices left in place a 2018 ruling by the San Francisco-based 9th U.S. Circuit Court of Appeals that fining or jailing homeless people for staying outside or in unauthorized places if a bed at an emergency shelter is not available is unconstitutional"

It is no secret that San Francisco has a homelessness crisis and if they can't prosecute how are they expected to clean up their city of homeless people?

Edit: This is a legit question why all the down votes?

Does this data include Cyber Security type jobs?

Wheel Of Time is quite honestly the best adventure and most gratifying book series I have ever had the pleasure to read.

Kent Walker voiced his opinion about not sharing all information because folks did not agree

"programmers created a tool that allowed employees to choose to alert Walker with an automated email every time they opened any document at all"

I can't help but feel maybe their culture is a little toxic?

Then why doesn't someone hold them accountable for this type of garbage.

Can someone explain why China is hell bent on stealing IP from nations and companies?

I can't help but feel like this person wants this type of attention.

No where on their website can I find what they are about, how their product adds business value, what makes them different from everyone else selling snake oil... basically nothing.. just some flashy graphics, 10$ words and a company name that makes me think of oxidation (literally rust).. this reeks of marketing.

Sounds more like a prison than a school.

Can't you just base64 url safe encode it and get the same result? Aren't URl strings limited in their length as well?

Why?

I am self taught and yeah I figured it out.

Money is the fuel that feeds the evolution of your business it allows your to expand, grow, change, and hire different caliber of workers. As the business grows it allows you to have more capital to pay your employees and hire more people.

If you have costs that you can't offset...

Your workers are your responsibility, they feed their families with the pay check they are provided. (Speaking from a holistic view) If you can't offset costs, that means you possibly can't provide them the same pay check or bonus they've been getting. Essentially, this ends up being one of those good of the many outweighs the good of the few.

As a business owner if I am required to pay my workers at minimum 15$ an hour I will need to off set the impact to my bottom line. This can be done by:

Automate whatever can be

https://www.forbes.com/sites/edrensi/2018/07/11/mcdonalds-sa...

Raise the price of goods and services

Outsource to other countries (if cost is cheaper)

For those that aren't aware typical rent in NYC on a corner lot for a restaurant is about 18k per month.

Why is Equifax still a thing?

When the F are we going to hold people accountable for piss poor security posture.

Am I reading this correctly.. creating a regexp introduced into a template, then applying that template to a value in the web request?