adricnet

It aligns quite well with the study (in diagrams and commented assembly) of x86 in POC || GTFO starting in pocorgtfo04.pdf chapter 3 provided by Shikhin Sethi.

Comment · 8 years ago

Thanks for the share. I enjoyed this article and may be able to put some of it to work. I don't quite understand all of the negative responses.

Comment · 8 years ago

The Nature article and notebooks from a few years back are still pretty good for demos, though everything has updated since then , especially iPython -> Jupyter.

https://www.nature.com/news/interactive-notebooks-sharing-th...

hth

adric

Comment · 8 years ago

Over The Wire challenges are awesome. Bandit is very educational and easy to start. Others are quite a bit more challenging.

Comment · 8 years ago

I do agree. That's actually part of why I called out the language: maintaining balance (as well as not cussing in front of the wrong people) are critical skills for security professionals and sorely lacking in many would-be candidates.

His educational advice was good but the attitude he shares via diction is unhelpful at best especially to folks who do not _yet_ have an awesome job in infosec.

Thanks, have a great weekend, cheers,

adric

Comment · 8 years ago

The advice is pretty good overall, but the excessive profanity is unprofessional and distracting.

It is interesting that he values "SANS" certifications, but not the courses for them.

Besides my own rambling[1] you might find these resources valuable instead:

* https://tisiphone.net/category/security-education/

* https://krebsonsecurity.com/category/how-to-break-into-secur...

* https://s3ctur.wordpress.com/2017/06/19/breaking-into-infose...

[1] http://dfirnotes.net/ etc.

hth,

adric

Comment · 8 years ago

I found Tobias Klein's _A Bug Hunter's Diary_ to be quite readable and enlightening even if I couldn't follow all of the code.

https://nostarch.com/bughunter

Comment · 8 years ago

This mirror of a Purism blog post to his personal blog looks pretty interesting but I'm having trouble accessing it on homelinux or puri.sm domains due to reputation.

Here's G cache: http://webcache.googleusercontent.com/search?q=cache:dH0AFM8...

The OP, afaict: https://puri.sm/posts/primer-to-reverse-engineering-intel-fs...

Thanks for sharing!

Comment · 9 years ago

Thank you for sharing this. It was interesting and a bit sad.

Comment · 9 years ago

_The Week_ is quite good (US or UK). They have people read many of the things you don't have time to (including _The Economist_ :) ) and pull highlights from them across a broad range of topics.

Comment · 9 years ago

This is an interesting and thought-provoking read. Thank you for posting it.

Comment · 10 years ago

On Android or iOS or did you mean sign a source release ...?

My guess is because of potential friction with reproducible building (for Android) and this for iOS: https://github.com/WhisperSystems/Signal-iOS/issues/1063

hth, adric

Comment · 10 years ago

Yes, but that was consumer / education market gear first (iMac) as I recall.

More or less back on topic ... I bought a HP Probook for my on-the-road studies/work last cycle because I needed a portable that I could do _work_ with and repairability, matte screen, mouse buttons, VGA, HDMI, and whole lot of other things were much more important to me than width or mass or shiny. It came with Windows and it's well supported.

I would like to get another 17" macbook pro someday (mine is pretty old and 80% retired), and this move and the messaging around it suggests that Apple doesn't care to make one. It's no surprise, but it still stings a bit, and as noted else where it is breathtakingly clumsy for their remaining mac business (as is that press conference).