• 0 Posts
  • 404 Comments
Joined 3 years ago
cake
Cake day: July 2nd, 2023

help-circle


  • Frankly to suggest that an enterprise firewall would be susceptible to a simple path traversal attack is insane. Unless there’s the most embarrassing news story of the decade im missing? That kind of input validation is baked into basically everything these days.

    Maybe you’ll land input validation using quadruple URL encoded ‘…/’ or something but even still I’d doubt that.

    So the person who replied to you is 100% correct in what it’s about, but it doesn’t really explain the comic. Unless it was made in like a decade ago.


  • I gotta say I might dislike Microsoft more than Apple…

    But I kiss ground returning to Linux or Windows after being stuck on Mac OS.

    Windows is an old comfort. I know all the shortcuts. I hate their brand, ethos, etc.

    But when I am stuck using an Apple product I want to rip off my fucking skin. Fuck your command key, stop trying to be special. Your system tray is obnoxious. I hate your unified application menu bar, it makes no sense with un-maximized windows. You got rid of the single button mouse because yeah obviously that was stupid, why not get rid of the rest? Firewire? Fuck off. Those fucking charging cables. Fuck. Off.

    Fuck Microsoft, but Apple don’t catch enough hate. Fuck them too for their benign prison of an ecosystem.

    Sorry. I get way more bent out of shape having to use macos or ios for work than I do windows. Way more. Fuck em both. I can handle powershell. I cannot handle a fucking circus of bullshit.

    Every Mac I must use at work gets a Linux VM. I will not tolerate their operating systems. I don’t do the same for windows at work. I tolerate it.











  • I’m gonna speak generally and it doesn’t quite generalize. Sue me.

    Formal education in computer science is a waste, unless you want to be in academia. A formal education in computer science will either prepare you for higher education in Computer Sciences, or it will drill into you some best practices on how to be a good programmer. You can get the latter through brute force for free.

    That said, I have a formal CS education. It has helped my career 0. I’m 10 years into my career and am the 1 man cybersecurity team (plus my boss and my coworker who does most of our networking stuff unless he’s too busy, then that’s me as well) for a fleet of ~4000 devices across ~1500 folks.

    I have never once needed to explain to someone what von Neumann architecture is, and how it differs from Harvard. I have never once needed to explain two’s compliment or how to represent negative numbers in binary. Knowing what an xor swap is and why it’s used has only helped me solve a leetcode problem exactly ONE TIME. I have explained to many people what P vs NP is (no your suno track will not be the next cultural phenomenon) but nobody cares.

    The stuff that did serve me was like, making the card game of war in Java. Even the GUI. That’s a project I would have never done because who TF would. But it forces you to implement recursion (war within a war), it entails some good validation checking practices, etc. the truth is though, I did not need a college education for that project.

    At the end of the day, technical projects teach technical skills. Not PowerPoints based on textbooks.

    If you wanna learn how to harden your servers, I recommend freemium hands on learning platforms like tryhackme or hackthebox.

    Hack the box has a module on server hardening. It’s my go to for hardening servers. Happy to share the bullet points. It’s not too much. Basically just disable root auth, disable ssh except key-based, enable MFA (I use authelia) and you’re harder than 90% of boxes in the wild. Then just setup Fail2ban and you’re more or less golden for a home server.