noUsernamesLef7

@noUsernamesLef7@infosec.pub

• ⁨Comment⁩ on ⁨What's up with all this data breaches and leaks?⁩ ⁨⁨10⁩ ⁨months⁩ ago⁩:

  As someone in the thick of it, it has been a nervewracking quarter for mortgage company IT and Infosec teams. There have been several very high profile breaches the last few months.

• ⁨Comment⁩ on ⁨Yesterday, Daniel J. Bernstein published a paper alleging that Kyber-512, an encryption algorithm selected as a NIST post-quantum contender, wasn't nearly as secure as its stewards say.⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  It’ll stay low impact until suddenly one day having a reliable post-quantum encryption scheme becomes rather important…

• ⁨Comment⁩ on ⁨Mentorship Monday - Discussions for career and learning!⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  If you’re looking at paying for certs I personally would stick with ones from common organizations, like CompTIA, (ISC)^2, SANS, Cisco, etc. I think a lot of the value in the cert (at least for career purposes) comes from the name recognition and trust placed in the organization certifying you. A recruiter looks at a Sec+ credential and knows exactly what that entails, whereas a certification from a lesser known organization or community college doesn’t do much to tell them what you know or have studied.

• ⁨Comment⁩ on ⁨HW Security Keys - 2023 - State of Tech?⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  I bought an OnlyKey a few months ago and love it.

• ⁨Comment⁩ on ⁨Mentorship Monday - Discussions for career and learning!⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  Hey, I have a career question this week! I’ve been a sysadmin for the last 1.5 years (It’s a small shop so everything security related is currently my responsibility). I’ll soon be graduating with a BS in Cybersecurity & Information Assurance. I’m SSCP, CySA+, and PenTest+ certified. I want to end up in a penetration testing role. Once I graduate, should I start looking for pen testing gigs immediately or do you think I ought to get some experience directly in the security industry first? Would getting OSCP help my chances of moving directly to pen testing?

• ⁨Comment⁩ on ⁨Here we go again⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  Who is going to tell him?

• ⁨Comment⁩ on ⁨What are You Working on Wednesday⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  Updated some diagrams at work today using the newish D2 language. I’ve dabbled before with tools like D2 that generate diagrams from “code”, like plantUML but D2 was really easy and made some great looking images.

  Definitely looks more professional than the ASCII art diagrams they replaced, though I do find the ASCII ones charming.