- 0 Posts
- 92 Comments
Yeah. The demand for red team skills is complicated.
There’s plenty of work to do. But there’s a lot of anxiety, and in some cases laws, that make hiring managers cautious.
When a team member is going to sometimes physically break into a data center, things are much simpler if they have an unimpeachable reputation.
And that, itself, is unfair, since everyone’s definition of “unimpeachable reputation” is going to be a bit different. I’m inclined to factor in motives, but not everyone can.
So it’s not the end of the world for a young hacker with a conviction, but they definitely have a more difficult time.
They have a good point though. Pen testing is a vanishingly small corner of our field, and I haven’t seen anyone with a past conviction get hired for those roles, in a long time. (Edit: Of course, I work with privacy respecting folks, so there could be, and their conviction just isn’t famous.)
I’ve seen too many hacker kids think their hacker reputation is going to get them out of trouble, and it didn’t.
doubt the furries will care much about being outed as furries, but cybercrime is a big no-no when it comes to actual employment
Absolutely.
I would prefer our gay furry hackers keep things fully legal, for their own sakes.
That said, Mike needs help from folks like me to catch these kids, and as long as they’re sticking to ethical hacking, I’m not motivated.
Also, I don’t like Mike.
His claim that he actually has my kind of help, actually on his side, is… overconfident, I think.
I can’t guarantee that, though, so I’m glad to hear our ethical hackers have decided to lay low.
In any case, everyone has a slightly different perspective on what counts as ethical, so I hope they’ll stick to legal as much as their conscience will allow, from here out.
Lol. The gay furry Cybersecurity activist’s reputations are already established.
We like them.
I appreciate what they’re doing, and hope they keep a strong eye on where their ethical boundaries are, and keep out of anything too hot for their opsec to handle.
But Mike Howell needs to watch Ocean’s 13.
“I know all the guys you would send after me. They like me more than they like you!”
Asshole lawsuits and “day one patches” finally killed my love for the Switch.
I don’t feel good about sending money to Nintendo anymore. And I don’t feel confident that my physical media Switch cartridges will stand the test of time after Nintendo shuts the patch servers down.
But I’ll always appreciate the innovation. I’m not buying games for it anymore, but it’s a fun part of my home game setup.
The obvious solution is to commit more than the average number of crimes of your fellow citizens.
Or, more specifically, more crimes than the average of your cohort of facial recognition doppelgangers.
That way, when the AI brings you to justice, it’s likely to be justice for a lesser crimes than the ones you already got away with.
(Sarcasm)
Yeah. That’s (arguably) the background scenario to Asimov’s book “The Naked Sun” https://en.m.wikipedia.org/wiki/The_Naked_Sun
Edit: Ooh, Django already gave a cooler link to the same: https://discuss.tchncs.de/comment/10729278
Pandora’s Box is a game machine, with games pre-loaded. It tends to have thousands of arcade games pre-loaded.
It’s a popular choice for restoring actual full size arcade machines, with dead motherboards. It’s also an option to upgrade (or just revive from motherboard death) an Arcade1Up.
With some effort, a cheap PC will do the same job, but some folks like that they’re premade and ready to use.
So, they are just a fancy decoration?
Exactly. There’s so many better ways to play these games:
- Pandora’s Box
- Batocera / Emulation Station / RetroPi on a Raspberry Pi
- Various mini systems with a jailbreak (Sega Genesis Mini and PlayStation Classic are particularly good)
- SteamDeck or PC with Emulation Station and RetroArch
So the price is really only justifiable, to me, by thinking of the cabinet being a piece of the decorated furniture.
As someone who sometimes buys these, the price, when on sale, is often cheaper than buying wood and hardware to build my own outer cabinet, control deck and screen.
There’s trade-offs - the materials used aren’t quite as nice as I would pick, but then the included, already applied, art is very nice. And there’s the convenience of not having to plan out all the details like control layout, monitor, side art, top bezel.
To me, it’s really a piece of furniture, rather an affordable way to play the included games.
The CPU cores also only last about 5 years, for me. Which isn’t good, considering that a cheap modern computer will easily last 8-15 years.
I, personally, don’t give a ton of consideration to the included games. I’m really just buying the outer shell and licensed artwork. That’s what I’ll be looking at when not playing.
I’ll replace the innards with a Raspberry Pi when it dies, if not sooner. So I’ll play whatever games I want that fit the control scheme.
I also replace all of the controls, about half the time. The included controls outlast the CPU core, but don’t feel as nice to play on as a set that’s reasonably easy to replace them with.
I haven’t, personally, had good luck running Docker/podman on Raspberry Pi. I haven’t tried on a Pi 5, though.
Previous Pi models didn’t seem to have enough mulicore power to get responsive docker/podman runs, for what I was trying.
I don’t recall that I was trying anything too crazy, but arguably my baseline weekend project is a bit crazy, so your mileage may vary.
It’s been awhile, but I feel like I ended up running Podman, instead of Docker, for some esoteric reason of my own. It was probably easier to build for the ARM processor.
But again, it’s been awhile, and my memory is famously bad about these things.
I got the pointers on what’s expected to be checked…
If it’s really an audit, it should come with specific questions that you need to provide answers to (or at least the best evidence you can find.)
If someone is both calling this an audit, and using light terms like “pointers”, you’re maybe being framed for a crime that’s happening, or something. Probably not that extreme, but they don’t sound like an ally.
I mean I might as well read the whole repo, but maybe that’s too much?
You can stop reading when you find the answers to the requested questions. On the first one you do you’ll read everything more than once. On future audits you’ll know where to look and it’ll go much quicker.
Python reimplemented the same dep management wheels 5x each, and I have no idea what common stacks look like anymore, but every time I encounter Python projects, something is always broken.
We need just one more complete re-engineering of the packaging standard. We promise to get it right, this time. No take-backs.
Yeah. This is going to suck worse before it gets any better. The good news is that all the useful content (outside of sales gardens) is going to be here in the Fediverse.
The other good news is that the state of Cybersecurity investment is abysmal, and the walled garden content is going to get breached/leaked/pirated a lot, for a long time to come.
Ditto on the Tic-80 recommendation. It’s pretty sweet.
Also, you may want to check out Pyxel which is extremely similar, and also free, but the games are coded in Python.
Pirating dev tools in 2024 sounds like a misstep to me. Most of us (professional developers) gave up paid software about a decade ago.
There’s so much competition for developer eyeballs, we (professional developers) have become accustomed to there being a good-enough free version of every good tool.
Usually the paid version just adds enterprise bullshit that only managers of developers (such as myself) want.
If you’re worried that the “community edition” of the dev tool you want to try is under-powered, most aren’t. To be sure, you might ask over in one of the programming Lemmy’s.
Edit: And to be clear, I pirated the hell out of the developer tools I learned on, as a kid. I highly approve, and most developers do, of pirating dev tools to learn. But due to that community value, the free versions of great dev tools are almost always fully featured, today (finally).
https://pine64.com/product/pinetime-smartwatch-sealed/
The PineTime will get you quite a bit of your list, while you save up for something else:
- affordable ~$30
- battery life: I charge it about every 4 days, out of habit, but it seems like it should go for over a week as it has half battery left when I recharge
- notifications, media controls
- no vendor lock in
- ability to turn stuff off, it’s fully open source, no vendor is forcing features
I appreciate what BeeHaw brings to the wider community, and particularly appreciate the reminder of the values that power that.
Thank you.