Live data from Hacker News

How to learn hacking

fsecurify.com

31–40 of 46 posts

Re: How to learn hacking

#32
post #23

Unrelated: It's not cool to put all the logos of companies just because you found some low sev bug there, not even saying the name is kinda similar to known security corp F-Secure...

I thought it would be a good motivation for others. Also, I did receive a book "Intro to Algorithms" by MIT Press Director on urgent delivery. So I think its okay to show other people what exactly they can achieve by going through the stuff I posted.

Best Regards.

Re: How to learn hacking

#33
post #14

If people actually care about this topic, and want to see someone doing a genuinely good job, check out LiveOverflow. Some other posters here will make fun of his dubstep intro music, green on black terminal text intro with the Rabbit, but he admitted in his first QA it was tongue and cheek. His subreddit: https://reddit.com/r/liveoverflow His YouTube channel: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w…

Thank you so much! I have also recently started building https://liveoverflow.com , which might have a better structure than a YouTube channel or subreddit. Also some people may have actually seen a video of mine, because my most popular video so far is the DirtyCow video which got referenced by news sites and on the dirtycow github repository. My personal recommendation is to checkout the AngularJS Sandbox bypass se…

That is a very nice website/videos you've put up. Thanks.

Re: How to learn hacking

#34
post #12

Earlier quoted context omitted.

Not to mention violently right-wing and believes he was, for a short period, a god[1] >.> [1]: http://www.catb.org/~esr/writings/dancing.html

Just read the linked post in full and that's an awfully reductive comment on the experiences he describes there. I suggest taking a more intellectually honest look at that writing (not to defend any of his other writing or views, which I haven't read).

I think we're all pretty sure ESR is not in fact a god, and that nothing could have occurred with ESR or his magic flute to have demonstrated to him that he was. Rather, the story is more broadly illustrative of a pretty extreme narcissism and --- challenging --- variant of self-awareness. For a more down to earth example, consider how many of us would non-ironically write the following passage:

I’m wondering about this because my wife Cathy asked me a simple question last night, and I realized I didn’t have an answer to it. “Are you” she asked “the most famous programmer in the world?”

This was a question which I had, believe it or not, never thought about before. But it’s a reasonable one to ask, given recent evidence – notably, the unexpected success of my Patreon page. This is relevant because Patreon is mainly an arts-funding site – it’s clearly not designed for or by techies.

It goes on in this vein. Here, by the way, is a link to his Patreon page:

https://www.patreon.com/esr

Apparently we value "the code that makes our digital world work" a bit less than we value the person who fries our french fries at McDonalds. If that sounds mean, well, it is, but it was also Eric Raymond who put forward the idea that his Patreon page may indicate that he's among the most famous programmers in the world.

For a nerdier take on ESR's merits, hunt down Terry Lambert's take on fetchmail. (You should know who Terry Lambert is, if you don't already).

Re: How to learn hacking

#37

So what's the business of this company and its CEO? Other than trying to collect subscribers to his blog. Also really confusing name considering there's the Finnish security company called F-Secure who also have a technical blog: https://labsblog.f-secure.com/ And now also run a security course in Helsinki University: http://mooc.fi/courses/2016/cybersecurity/

If you think I am trying to collect subscribers, I have removed the "Subscribe to us" text from the post. F stands for my name and I liked the domain. There is no business of this company. All I do is learn stuff, try to come up with good articles and post them. I plan to convert it into a proper company once my studies are over. I am just a student at the moment. Hope everything is good now. Best Regards.

"All I do is learn stuff" sounding phrase dot com would be more inline with your stated objectives.

Currently, name & logo look like something a company would use and are potientally easily confused with other companies using similar names; as mentioned in other comments.

Just to be clear, it is obvious you put a lot of work into this, thanks for sharing. Keep it up!

Re: How to learn hacking

#38
post #34

Earlier quoted context omitted.

Just read the linked post in full and that's an awfully reductive comment on the experiences he describes there. I suggest taking a more intellectually honest look at that writing (not to defend any of his other writing or views, which I haven't read).

I think we're all pretty sure ESR is not in fact a god, and that nothing could have occurred with ESR or his magic flute to have demonstrated to him that he was. Rather, the story is more broadly illustrative of a pretty extreme narcissism and --- challenging --- variant of self-awareness. For a more down to earth example, consider how many of us would non-ironically write the following passage: I’m wondering about t…

Not to mention that ESR was, at some point, a multi-millionaire. Pretty sure he still is, in which case that Patreon page of his would be nothing but a con.

Re: How to learn hacking

#39
post #14

If people actually care about this topic, and want to see someone doing a genuinely good job, check out LiveOverflow. Some other posters here will make fun of his dubstep intro music, green on black terminal text intro with the Rabbit, but he admitted in his first QA it was tongue and cheek. His subreddit: https://reddit.com/r/liveoverflow His YouTube channel: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w…

Thank you so much! I have also recently started building https://liveoverflow.com , which might have a better structure than a YouTube channel or subreddit. Also some people may have actually seen a video of mine, because my most popular video so far is the DirtyCow video which got referenced by news sites and on the dirtycow github repository. My personal recommendation is to checkout the AngularJS Sandbox bypass se…

I am so glad one of my highest grossing comments is talking you up, sir!!! How do I donate to you, by the way? I have been meaning to.

Your Angular stuff is my personal favorite, as I have not even done a sufficient amount of web hacking.

I happened to bring up your videos at a recent, very expensive infosec cert course and no one had heard of you. The instructor did take refs to the guy you cite for the Angular XSS bypasses, as he was European knew that guy, and I sent him your stuff too. Super happy to talk you up!

Re: How to learn hacking

#40
post #24

Earlier quoted context omitted.

Thank you for the videos. They are such a valuable thing for infosec students. Please keep up the excellent work.

If you have feedback from infosec students, or topics that would benefit students, please contact me :)

As you wish. I will be more vocal on your subreddit.

More stuff with radare, please! Hopper seems cool, as does Binary Ninja, but I see us like scientists, and I don't like IDA and their ilk with their price tag. Not because I cannot afford it, but how do we as IT professionals not take reproducible research seriously!?

Also, keep up with your slick GDB fu. I watched you Boston Key Party vids last night and they are an education, let me tell you.

Post reply on HN