41–50 of 56 posts
Earlier quoted context omitted.
> You could continue the bug bounty approach, which leads into vuln selling (with the attendant morality questions) Can you elaborate on this?
Look into Zerodium https://zerodium.com/ . They sell exploits to government agencies. They are one of the more legit outfits, but researchers can also sell exploits to NSO style bad actors.
I’d read PG’s essays (someone compiled them in a pdf on github) and learn about startups. Long term you don’t want to sell your soul to corporations. Continue to learn and try to get some contract work meanwhile. In security this is very common: audits, penetration testing, etc. Good luck!
Start a corporation so that you don't need to sell your soul to corporations?
Earlier quoted context omitted.
If someone wanted to get in touch with you, what would be the best way?
You can either contact me on discord, my tag is xor#0001 or you can shoot me a DM on twitter at https://twitter.com/equat0rium
Earlier quoted context omitted.
You can either contact me on discord, my tag is xor#0001 or you can shoot me a DM on twitter at https://twitter.com/equat0rium
I suppose the #0001 part is not an accident? Mind sharing? :)
Hey that’s impressive that you’re so young and found so many vulns. If I was in your place I would chart out a path for myself to be CISO or CIO at a large org. Continue with your graduation and attempt to get ethical hacking certifications (CISSP or CompTia junior or senior year). I would also start a technical blog about your research (once those are patched ofcourse) This will be a boost to your credentials when y…
Earlier quoted context omitted.
I suppose the #0001 part is not an accident? Mind sharing? :)
Hmm, what do you mean exactly? The # is part of the username that is required to add someone on discord. So, yea, the full thing to add me is xor#0001
I guess you cared enough about this to automate account creation and waited for the right one? That'd be rather commendable attention to detail!
Earlier quoted context omitted.
You can either contact me on discord, my tag is xor#0001 or you can shoot me a DM on twitter at https://twitter.com/equat0rium
I suppose the #0001 part is not an accident? Mind sharing? :)
Try getting a fulltime job if you can. You don't need to join college for CS education imo. There is not much benefit of a college degree unless it's from a elite/great college. The best resources to learn CS are online ex. https://teachyourselfcs.com/ is a good resource to self learn. Imo unless you want to go into academia you don't really need a degree atleast for software/security jobs. As far as socializing and…
Be very careful. It's easy to get an entry-level development job when you're young and inexperienced because you're cheap.
Having hired experienced developers; what happens is that people without degrees get overlooked, no matter how good they are. The reason is that developer jobs get an unreasonably high number of applicants; so things like a college degree turn into basic filtering mechanisms.
IE, it doesn't matter how good or experienced you are, without a degree many places (including me), won't even bother reading your resume.