@Matthew yeah I know actually he's just scary at web app. vulns full stop, I read his write-up of finding a blind SQLi in an encrypted field, was impressive
@AviD Here's another funny vulnerabilty agility.... function is declared public / defaults to public. One function isn't properly protected, but the coder expects it to be only accessible within the code. For example, you'll check an input get/post variable, and then call a function if it's okay... well, the funny thing is you can modify the javascript to point to that function and call it directly
@AviD If your pentester doesn't find them, they've probably not looked. The good ones will find logical flaws in your systems, infrastructure failings, and even developer stupidity
@MarkBuffalo I did a great demo at a big european bank few years ago - chaining low level flaws between apps to achieve takeover of (simulated) criticial system
Any individual one wouldn't give you much. But taking them together resulted in a critical flaw in the overall system, making use of application and infrastructure level issues
What sorts of jobs are there, in which organizations, with what sorts of day-to-day responsibilities?
What areas are good for folks coming out of school, vs what are good 2nd careers for experienced folks coming from various disciplines?
@bob Excludes those that would traditionally be labelled "retarded" as they're unable to do anything about their affliction - true fucktards are 100% responsible for their situation and provide vast entertainment as they are usually blissfully unaware of their own Fucktardery. Most politicians for example.
The latest developments made it very clear, how easily basically all communication channels can be wiretapped. However, I think most people still ignore this fact. Especially in business most confidential information is still sent totally unencrypted (at least at my company). I wonder if people a...
@MarkBuffalo there's an easy fix, microwaves will fry the implant, so you just need to stick your head in a running microwave for a while and that'll fix it
they're primarily mastering plugins anyway so that's not really an issue
it just means that once a project gets to the final mixing/mastering stage I can't use that project on the SP4s because it will break those plugins when I reload it on my main machine
Got my work laptop stolen off an airplane. It was encrypted, I have two factor authentication for practically everything, I've revoked sessions... and sometime tonight I'll rotate every password.
@kalina so here's an example. blood tests for me cost about $300 total. The insurance covers very large chunks of each test, meaning I have to pay roughly $5
however, my clinic leverages insurance in a interesting way
if you don't have insurance, you pay a charity rate. If you do have insurance, the clinic bills insurance and uses that money to cover someone else's medication
What sorts of jobs are there, in which organizations, with what sorts of day-to-day responsibilities?
What areas are good for folks coming out of school, vs what are good 2nd careers for experienced folks coming from various disciplines?
