Comment on Anon is a white hat hacker

Cornelius_Wangenheim@lemmy.world ⁨10⁩ ⁨months⁩ ago

• echodot@feddit.uk ⁨10⁩ ⁨months⁩ ago

  You hope it’ll set off alarms. Sometimes it doesn’t, mostly because they don’t have monitoring setup.

  source

  • jol@discuss.tchncs.de ⁨10⁩ ⁨months⁩ ago

    Or because you hacked into the wrong company. This has happened multiple times.

    source

    • echodot@feddit.uk ⁨10⁩ ⁨months⁩ ago

      That’s what happens when you do off the book stuff on company time. Got to organize yourself better.

      source

      • jol@discuss.tchncs.de ⁨10⁩ ⁨months⁩ ago

        I’ve even heard stories of physical pen testers entering the wrong company. Oops.

        source
• CaptainHowdy@lemm.ee ⁨10⁩ ⁨months⁩ ago

  1. Most folks dgaf about certs, and I agree with them. Certs are BS. I only have certs because employers paid for them and in tech (especially security) there’s a LOT of free time if you know what you’re doing. Certs only prove you can pass a test.

  2. Bold of you to assume most companies have intrusion detection systems and that their monitoring isn’t muted half the time.

  3. Findings come from an automated report generated by a scanner that does literally all the work.

  OP post is really not that far off. It’s an easy gig.

  Source: I’ve worked on both sides.

  source

  • expr@programming.dev ⁨10⁩ ⁨months⁩ ago

    Uh, certs are a huge deal in cyber security. Absolutely useless in most fields, but cybersecurity is not one of them.

    source
  • SaharaMaleikuhm@feddit.org ⁨10⁩ ⁨months⁩ ago

    So pen testing is a scam? I knew it! Opening all my ports right now.

    source

    • TriflingToad@sh.itjust.works ⁨10⁩ ⁨months⁩ ago

      oh yeah I probably should close those unused ports I’ve had open since 2020…

      source
• ameancow@lemmy.world ⁨10⁩ ⁨months⁩ ago

  You’re implying that people who post on 4-chan have no clue how the real world works and no idea what business is like and how people make money!

  source