Live data from Hacker News

Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

news.ycombinator.com

31–40 of 52 posts

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#31

Really nice to see the 'plumbing' mindset catching on. When the parallels to real-world utility work were first pointed out a lot of people were resistant to it because they felt insulted to have their high technology work compared to dirty low technology.

only business types make make this analogy

I've been mistaken for many things, but never a business person.

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#32
Wow, this looks great, thanks for sharing!

You mention this book as targetting pentesters. Do you have any advice on tools or skills to know for a software engineer to transition to a pentesting role?

I ask because there are many resources for pentesting, but not any that I have found to reflect what happens in industry.

Thank you again!

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#33
post #27
post #22

Earlier quoted context omitted.

It's 5.18.19 on the side I'm on too.... did something happen recently that reduced the price of knowledge?

Was it not showing $0 for you pests? Just want to make sure I'm not hitting some threshold with Gumroad...coming up on 2000 copies requested!

Oh no it worked fine! I think people having issues are finding the link other ways or accidently removing your discount in the URL.

My comment was unfortunately a snarky response to what I thought was a complaint about the full price that I felt was unwarrented at the time.

I've started reading and had already intended to email you my thoughts. Thank you for your work!

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#34
post #26
post #19

Looks great, thanks for sharing. Any plan to make an epub available? I’d love to read it on an e-ink display.

Haven't had too many requests for that yet. Do you have any recommendations for creating an epub file? The book was written in LaTeX with VS Code. I worry that a lot of the command line stuff and images wouldn't look good on a reader.

Pandoc will convert LaTeX to epub.

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#35
This looks great. Though I must admit, 'SSH Tunnel Like a Boss' did make me intially doubtful. I wondered if it might be advice on how to find someone else to set up an ssh tunnel for you, while staring angrily at a command prompt and shouting.

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#36
post #26
post #19

Looks great, thanks for sharing. Any plan to make an epub available? I’d love to read it on an e-ink display.

Haven't had too many requests for that yet. Do you have any recommendations for creating an epub file? The book was written in LaTeX with VS Code. I worry that a lot of the command line stuff and images wouldn't look good on a reader.

There are definitely several options, but I would recommend Pandoc to compile an epub from LaTeX source — off the top of my head.

Images are not problematic at all on an e-reader. Here’s an example of how an illustration looks like on my old Kindle:

https://i.imgur.com/zfqbnOO.jpg

Tables and such are also usually just raster images embedded in the epub’s XML:

https://i.imgur.com/SHYUrNL.jpg

https://i.imgur.com/u0tZ2TO.jpg

…and so are code blocks, usually displayed in a monospaced but condensed font and converted to raster image as well to avoid wrapping:

https://i.imgur.com/d7ly8GH.jpg

https://i.imgur.com/g0lIPpj.jpg

Long story short: Images are not an issue, and there’s a way to ensure code blocks will look good by converting them to images. That would indeed require some work, but maybe there's a tool to automate that?

Edit: All examples are from UNIX and Linux System Administration Handbook by Garth Snyder et al., Addison-Wesley Professional; 5th edition (2017)

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#37
post #21
post #18

Earlier quoted context omitted.

That's a shame. Plumbing is an essential and frankly civilization-changing technology

Indeed. It's always amazing to me when I think about the incredible applications of running water and plumbing in ancient Rome that was effectively lost for so many centuries starting with the dark ages.

The Minoan civilization flourished on the Isle of Crete in the Mediterranean from 3000 to 100 BCE. Until Roman times, Minoan plumbing and drainage were the most developed in what was then the Western World.

I found it to be extremely advanced tbh.

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#38

Really nice to see the 'plumbing' mindset catching on. When the parallels to real-world utility work were first pointed out a lot of people were resistant to it because they felt insulted to have their high technology work compared to dirty low technology.

only business types make make this analogy

Contrariwise, those who dismiss this analogy probably only deal with domestic plumbing while being exposed to industrial networking. Comparing it to industrial plumbing, long distance pipelines, and the like makes it a lot more plausible.

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#39
post #36
post #26

Earlier quoted context omitted.

Haven't had too many requests for that yet. Do you have any recommendations for creating an epub file? The book was written in LaTeX with VS Code. I worry that a lot of the command line stuff and images wouldn't look good on a reader.

There are definitely several options, but I would recommend Pandoc to compile an epub from LaTeX source — off the top of my head. Images are not problematic at all on an e-reader. Here’s an example of how an illustration looks like on my old Kindle: https://i.imgur.com/zfqbnOO.jpg Tables and such are also usually just raster images embedded in the epub’s XML: https://i.imgur.com/SHYUrNL.jpg https://i.imgur.com/u0tZ2T…

Cool, thanks for the recommendation.

Re: Show HN: The Cyber Plumber's Handbook – SSH Tunnel Like a Boss

#40
post #32

Wow, this looks great, thanks for sharing! You mention this book as targetting pentesters. Do you have any advice on tools or skills to know for a software engineer to transition to a pentesting role? I ask because there are many resources for pentesting, but not any that I have found to reflect what happens in industry. Thank you again!

In my experience, if you're going into security, it's good to have a solid foundation in either networking (routers, firewalls, switches), system administration, or software development. In your case, being a software engineer allows you to tweak, improve, or write your own tools. For example, some security tools have a hard coded HTTP User-Agent string that is flagged by security devices as a "hacker" tool. If you know how to go in and change it, it makes you harder to detect (assuming you're doing an ethical pen test / red team engagement).

Check out Hack The Box (hackthebox.eu) which are a bunch of vulnerable virtual machines that can be hacked. It's totally free. The Offensive Security Certified Professional (https://www.offensive-security.com/information-security-cert...) is the gold standard in terms of getting a cert. You get 24 hours to exploit 5 boxes and elevate to admin/root.

Post reply on HN