TheD00d's recent activity

  1. Comment on When provided with CVE descriptions of 15 different vulnerabilities and a set of tools useful for exploitation, GPT-4 was capable of autonomously exploiting 13 of which, yielding an 87% success rate in ~comp

    TheD00d
    Link Parent
    This was my first and most immediate thought. Age of the CVE and complications of actually developing a viable PoC/exploit kit is certainly one thing to be concerned about but if LLMs with...

    has the potential to massively amplify the capabilities of your the skript kiddy

    This was my first and most immediate thought. Age of the CVE and complications of actually developing a viable PoC/exploit kit is certainly one thing to be concerned about but if LLMs with specific training sets continue to evolve (and I would be darn sure APTs are already doing so) that just creates more low hanging fruit for the dirtbag bag guys and more headaches for security engineers.

    On the flip side - it would be really great if other LLMs were also leveraged by the good guys to create useful IoCs and even patches for some of these CVEs and exploits created.

    I could see this becoming something akin to an arms race and it makes me think there will be a lot more regulation in the LLMs and AI space (hopefully) but I also feel like Pandora has opened the box and there is not putting the genie back in the bottle.

    2 votes
  2. Comment on There used to be a people’s bank at the US Post Office in ~finance

    TheD00d
    Link
    So I will ask something that Google has not given me a good answer (probably because of SEO spam) but are there any legitimate orgs or movements one could join to try and bring back postal...

    So I will ask something that Google has not given me a good answer (probably because of SEO spam) but are there any legitimate orgs or movements one could join to try and bring back postal banking?

    I learned about this years ago and thought it was such a brilliant idea and I never understood why it was never reimplemented.

    4 votes
  3. Comment on Denim heads - What raw denim are you currently wearing? What would you recommend? in ~life.style

    TheD00d
    Link Parent
    Wash your jeans whenever! The old addage wash them at little as possible but just wash them when they smell or you feel like it.

    Wash your jeans whenever! The old addage wash them at little as possible but just wash them when they smell or you feel like it.

    1 vote
  4. Comment on What actually-useful questions should someone ask when hiring a cybersecurity professional? in ~comp

    TheD00d
    Link Parent
    Not OP but I always like asking that question. It allows me to gauge where they stand from an experience perspective. Some folks will always spey the textbook reponse and say "People". And most of...

    Not OP but I always like asking that question. It allows me to gauge where they stand from an experience perspective. Some folks will always spey the textbook reponse and say "People". And most of the time that is a fine answer.

    But I always enjoy hearing from people who are from mature programs who say something different. For example my one could say - "Our biggest threat based on our current maturity level is XYZ and I think it's XYZ based on %EVIDENCE%.

    An example of I could think of is a companies biggest weakness is data exhilaration, not because they have a poorly trained users sending data to whomever, but because of a strong lack of logical controls or poorly implemented solutions. Then I would look to see what they current process improvement plan might be.

    This will allow me to understand their experiences and shows me their ability to effectively communicate areas for improvement.

    Other technical questions I enjoy asking in no particular order -

    • explain DNS
    • explain DHCP
    • explain infrastructure as code and how it's different from traditional infrastructure
    • let's say you have a laptop without a functioning TPM, this machine will hold sensitive data that needs to be encrypted per our policy. Due to its malfunctioning TPM, it cannot be encrypted. What do you do?
    • Tell me something obvious about Linux (Or if I really want to test their stuff if they claim to be a *Nix nerd - ask them to explain GNU vs Linux
    • Is a hot dog a sandwich?
    • what sound does a laser gun make?

    Just my 2¢ as an IS/CS manager.

    15 votes
  5. Comment on Denim heads - What raw denim are you currently wearing? What would you recommend? in ~life.style

    TheD00d
    Link Parent
    N&F I think is my next logical step. I like the Weird Guy in natural indigo dye but I also wanted something a little more heavy weight. Also double bonus for being made in Canada. Just was not...

    If you already like Unbranded, there's little that can go wrong if you 'upgrade' to Naked and Famous.

    N&F I think is my next logical step. I like the Weird Guy in natural indigo dye but I also wanted something a little more heavy weight. Also double bonus for being made in Canada. Just was not sure of the length or the size and fit. Getting a lot of conflicting info online lol

    I would personally hate to have spent $200 on a pair of jeans that I ended up not liking and being unable to return them.

    Also a huge concern of mine - I want to find a store that has returns if possible.

    But an even better choice is to not bother with anything else and just buy what has already made you very happy.

    I like UB but the front rise is, to be blunt a real ball buster and super not comfy to wear. I might try some of the other fits but not sure about where to buy them.

    Either way, thanks for the input!

    3 votes
  6. Comment on Denim heads - What raw denim are you currently wearing? What would you recommend? in ~life.style

    TheD00d
    Link
    Wanted to include a photo of my UB401s after roughly 7-8 years of wear. Front and back.

    Wanted to include a photo of my UB401s after roughly 7-8 years of wear. Front and back.

    7 votes
  7. Denim heads - What raw denim are you currently wearing? What would you recommend?

    Howdy Tildes, I have been a raw denim "wearer" for close to a decade or so now. I have been a big denim fan ever since my then girlfriend now wife bought be my first pair of selvedge raw denim...

    Howdy Tildes,

    I have been a raw denim "wearer" for close to a decade or so now. I have been a big denim fan ever since my then girlfriend now wife bought be my first pair of selvedge raw denim from American Eagle. Since than I have admired from afar some of the fun collabs of Naked and Famous and some of the beautifully designed and made Iron Hearts. However I have never branched out from Unbranded. Specifically the 401s and the 421s because of cost, fit and not having any raw denim shops within driving distance of my city. Well my UB401s have gotten a little long in the tooth, and to be frank, short in the rinse and I am looking to branch out!

    So normally I'd ask over on /r/rawdenim but I'm trying to kick the shite Reddit habit so I figured I would try asking here and see if there are any raw denim folks lurking! What are you all wearing? What would you recommend? I'm 6'5" and about 205lbs. So fairly tall and lanky and I'm struggling to find jeans that I think would fit. I have a budget of about $200-285 (not a ton I know) - So I was looking at some of the Naked and Famous, Nudie, Rogue Territory but open to others. I dig slim fits but nothing super skinny.

    So, let me know what you think (and any recommendations), lets some some sick fade shots and lets have a cool discussion about jeans.

    19 votes
  8. Comment on 2024 Ford Ranger first drive review: A capable truck I don’t want to drive in ~transport

    TheD00d
    Link Parent
    That was my joke LOL I realize now, text format mediums like Tildes that might be lost on some. My bad. But yes, it's kind of illegal here in Ohio, but I've seen and read about some BMV giving...

    That was my joke LOL

    I realize now, text format mediums like Tildes that might be lost on some. My bad. But yes, it's kind of illegal here in Ohio, but I've seen and read about some BMV giving people real tags so it's a toss I guess.

    1 vote
  9. Comment on 2024 Ford Ranger first drive review: A capable truck I don’t want to drive in ~transport

    TheD00d
    Link Parent
    I would commit a felony to have an Electric Kei truck be available conveniently in my state.

    I would commit a felony to have an Electric Kei truck be available conveniently in my state.

    12 votes
  10. Comment on It’s me, hi, I’m the problem. I’m 33. (gifted link) in ~finance

    TheD00d
    Link
    This was kind of a weird surreal article to me, it kind of made me feeling like just being the slightest outlier in a bell curve. I just turned 30 back in February so I'm not a "peak" millennial,...

    This was kind of a weird surreal article to me, it kind of made me feeling like just being the slightest outlier in a bell curve.

    I just turned 30 back in February so I'm not a "peak" millennial, but close enough. I live in the Midwest and in a LCOL area. Although that is even rapidly changing. I went to my local public university around 2012 and now work in IT.

    My then girlfriend now wife and I bought our home in 2019 (so right before the rush according to this article) but a lot, I would say most of my friends bought houses and then also got married in 2022 - so mid "peak". So it seems, so far, like not being a "peak" millennial has worked out for myself and allowed us to hit some of the outlined milestones early even if only by a few years.

    Then again, how much of my experience and ability to do so is based of both controlled and uncontrolled circumstances? Like my parents, where I grew up vs my major in college and job decisions? I really can't say. However it does make me wonder what my next milestone will be, kids? Moving to our "forever" home? And how might those milestones have greater impacts on the economy and society large. Not sure really.

    I do think that's these booms and busts being caused by millennials really has a lot more to do with chance and circumstances than anything we are specifically doing. I think a lot of social and economic decisions made by groups before us (Boomers) is having an larger-than-intended impact and kind of forcing millennials to do things at specific times, but I don't have any evidence to support it.

    11 votes
  11. Comment on What a bunch of A-list celebs taught me about how to use my phone in ~tech

    TheD00d
    Link
    As much as I would love to be able to ditch my phone when I am not at work, being on call makes that more or less impossible. For those who also work on call, have you been able to ditch your...

    As much as I would love to be able to ditch my phone when I am not at work, being on call makes that more or less impossible. For those who also work on call, have you been able to ditch your phone? Or lead a phone-lite life? If so, please guide me. I'd love some help.

    5 votes
  12. Comment on The 2023 Hugo Awards: A report on censorship and exclusion in ~books

    TheD00d
    Link
    I mean at the risk of contributing basically nothing to this conversation. Is anyone really surprised? Seems like most events in China always have to pass through filters and other censorship...

    I mean at the risk of contributing basically nothing to this conversation. Is anyone really surprised?

    Seems like most events in China always have to pass through filters and other censorship mediums. Yet, people and orgs keep being surprised when it occurs - even though there is already a lot of evidence of this exact thing happening again and again!

    I think the rest of the world needs to understand that if you want to conduct any kind of activity in China. You need to play by their rules. Don't like it? Then don't participate. Not saying I agree with it, but anyone who is surprised by this is just naive at this point.

    As an avid SF fan I'm a little surprised that the Hugo awards allowed this event to happen with all of the censorship. If they care that much about SF and allowing authors freedom to write about whatever concerns them - just don't go to countries that have extreme levels of censorship.

    11 votes
  13. Comment on Butcher block countertops - stain and finishing in ~life.home_improvement

    TheD00d
    Link Parent
    Thank you! As instated in the other post, if I had to redo this, I would just use a natural finish like wax or mineral oil. For now, I'll keep the stain on it and finish it with the watco butcher...

    Thank you! As instated in the other post, if I had to redo this, I would just use a natural finish like wax or mineral oil. For now, I'll keep the stain on it and finish it with the watco butcher block oil and then add a layer of mineral oil+beeswax once it needs some restoration.

    3 votes
  14. Comment on Butcher block countertops - stain and finishing in ~life.home_improvement

    TheD00d
    Link Parent
    Thank you! Seriously. Thank you. I think I was just having a manic moment about these stains and finishes and I appreciate someone talking me down. I also think sleeping helped a bit LOL. Anyways...

    Thank you! Seriously. Thank you. I think I was just having a manic moment about these stains and finishes and I appreciate someone talking me down.

    I also think sleeping helped a bit LOL. Anyways I think you are right, since I am not using these food for prep or cutting, I think the risk is minimal and I will continue with my plan to use the Minwax stain and then "finish" with the watco butcher block oil. If I ever find myself having to do this again from scratch I think I would just stick to beeswax/mineral oil and ensure that the color of the butcher block itself was close to what we wanted and not rely on finishes.

    Thank you!

    4 votes
  15. Butcher block countertops - stain and finishing

    Howdy all, TL;DR - Installed new cabinets, picked up new butcher block countertops to match existing. Stained it - using the Minwax stain and planned on using Watco Butcher Block finish to finish...

    Howdy all,

    TL;DR - Installed new cabinets, picked up new butcher block countertops to match existing. Stained it - using the Minwax stain and planned on using Watco Butcher Block finish to finish it. I am concerned about food safety and health. Note I am not using these as actual cutting boards. Just countertops. Would using the Watco finish be safe/sufficient for sealing the stain?

    So to give a little context, my wife and I moved into our home close to 5 years ago. The person who flipped our house put in standard big box birch butcher block countertops. We like them! They stained them a nice dark color and we have not thought much about them. From what they mentioned, they "finished" the counters with the Watco Butcher Block finish. Occasionally the areas near the sink get grey and dry from water and could use a clean/restoration. Of which I have been using Howard butcher block conditioner and I think it does a great job of giving the wood some life.

    Now I finally got around to installing some more cabinets, and I picked up another countertop. Obviously wanting it to match, I just used the same Minwax stain that the flipper used. I had planned on sanding all of the old countertops re-applying the stain and then coating in some urethane-like topcoat in hopes of helping stop the discoloration and make the counter more durable.

    This lead me down a rabbit hole of a bunch of people online basically yelling about putting anything other than butcher block finish or mineral oil on butcher block countertops and how its not food safe/toxic. So naturally this kind of freaked me out. Is the stain on the current counters harmful? Do I need to sand everything and then reapply with just a food safe option? Can I just sand and add a poly topcoat? Or am I fine to just have the stain on it and use the Watco butcher block finish? AM I POISONING MYSELF?!

    I would like to add we do not use these countertops as actual cutting boards. We always use a "real" cutting board.

    Really I am just looking for some advice or a sanity check to make sure I'm not harming ourselves. Hoping this could also help someone else learn without having to do it the hard way.

    Thanks all so much for any info anyone is willing to provide.

    10 votes
  16. Comment on What is a scam that more people should be aware of? in ~life

    TheD00d
    Link Parent
    It's not a real estate agent. It's a used house salesman.

    It's not a real estate agent. It's a used house salesman.

    18 votes
  17. Comment on Your security program is shit in ~comp

  18. Comment on Your security program is shit in ~comp

    TheD00d
    Link Parent
    I get the authors salt. I can't tell you how many times I've done audits for EHNAC or HITRUST and had the most unintelligent auditors. Going through big frameworks like that is also usually more...

    I get the authors salt. I can't tell you how many times I've done audits for EHNAC or HITRUST and had the most unintelligent auditors. Going through big frameworks like that is also usually more an exercise in patience then actual security control implementation. But on the other hand it's good. Forces you to get your policies an procedures right and gives you a solid foundation to build on.

    If I get the overall message (I woke up like 5 minutes ago and might still be out of it) I understand the authors gripes with non-technical people attempting to lead technical roles or oversee implementation of super technical controls but let's try not to be performative in security. I've seen sooooo many stupid things occur because of egos - both technical and non and it can be super frustrating.

    8 votes
  19. Comment on Lewis Hamilton set to join Ferrari in ~sports.motorsports

    TheD00d
    Link
    Wow. I legit did not see this coming. We are actually witnessing history. Man, didn't he just test drive the new Mercedes? Must have been baaaaad.

    Wow. I legit did not see this coming. We are actually witnessing history.

    Man, didn't he just test drive the new Mercedes? Must have been baaaaad.

    5 votes
  20. Comment on Reddit advised to target at least $5 billion valuation in IPO in ~finance

    TheD00d
    Link Parent
    Reddit IPOs and the next day, WSB is banned.

    Reddit IPOs and the next day, WSB is banned.

    10 votes