yao420

CTF style challenges like praetorian are the standard for offensive security roles. They are a fun time and really let the teams understand how you approach things.

Only bad experience with that was patreons ctf, the containers didn’t work so I spent the hour interview trying to get it to run. Horrible experience.

Idk but Correlium virtualizes iOS instances and was sued by Apple before settling the case.

I can’t think of a single software that does not have fierce competition. Just today, YouTube, slack, chrome, Claude, burpsuite, interm, obsidian, nest, outlook, Zillow, AWS, cloudflare,GitHub, Roborock, jetbrains.

They could all be replaced and do 90% of the job immediately and a week later figure out the last 10%.

As as for work, coinbase is not the only exchange, square is one of many, meta is another social media site.

Literally every software I have ever used or company I worked for has had multiple competitors doing the exact same thing.

> Wouldn't it be great if you could just walk up to a local business and offer to pay them in some new cryptocurrency they've never heard of.

Not being snarky but why would this be great for anyone? What would be the point?

Why specifically non-VC?

I’m working on something which I think would be a great product but a direct competitor got $25 million in VC funding in 2021.

I’m not a crypto hater (I used to work security at coinbase) but I think that while a chrome or iPhone zeroday might be worth less in bug bounty it’s worth more for a security engineers career long term.

Having the iPhone bug and the accompanying conference talk and blog post will allow you get hired by nearly any good security or tech company. No one cares about blockchain bugs except other crypto companies. When I and a bunch of other coinbase engineers were looking for jobs we were looked down at for even working in crypto. And weren’t even in the blockchain team! Just regular engineers.

I myself have dedicated a couple of months to testing gnosis and curve that each have $2 million bounties but turned up short. Last year I switched to a ML based fuzzing research and was able to speak at defcon and got crazy offers after publication.

I actually think people haven’t found anything because few skilled hackers have dedicated time to it.

If the project zero team or Tavis by himself dedicated time to reviewing bitcoin it would fall apart like any other software.

What are miners doing with GPU’s?

I have not used the online version but you could have just as easily walked into a western union and done the exact same thing for substantially less fees.

I hate the term cyber over infosec but anyway I’ve spoken to two CISO’s just this month who told me their primary directive is integrating LLM’s into event analysis and triage. So it’s definitely happening.

I live in Austin and lived in San Antonio and the same complaints about the DA and underreported crime are rampant, especially if you believe the subreddit or my uncle who lives 6hrs away in small town and hasn’t visited in 4 years. How true is that really?

Spectrum is the ‘most popular’ internet with the most customers in my area.

Not because they are liked but because they are the only option outside of maybe starlink.