761–770 of 1001 posts
tesla.sexy contains the following text, which is slightly concerning: love your fate become your own ubermensch you are the master of your soul be kind there is so much to love, so much to live for follow your heart, ok?
[flagged]
You said it. There are political implications of granting major federal security clearances to someone who the evidence suggests has been fired for leaking internal documents to competitors and soliciting DDoS services less than a year ago.
It has been a fairly common story, and part rumor, that intelligence agencies like to recruit young people active in the cyber criminal scene, and that the IT security industry also adapted this approach. They basically becomes part informer and part subject expert, especially since IT security expertise seems to be a difficult subject matter to teach in universities. When I studied IT security in university, about 1…
Equating script kiddies to some genius cyberhackers worth recruiting is laughable when we literally have PHDs and 6 figure salary professionals willing to be recruited legally with zero baggage. Why are the top digital safety institutions hiring the very bottom of the barrel?
[flagged]
The administration which just fired pretty much the entire national security council as first order of business.
What Olympic leaps are actually required here to be concerned?
Earlier quoted context omitted.
I’d also distinguish between the hacker to gets access to a forbidden system out of curiosity or for a challenge, from a person who pays a ddos service to attack someone they don’t like (one of the accused actions of this kid). The latter displays no competency in hacking or cybersecurity, only the attempt to harm another. My concern in their access to secure government systems is not their hacking competency (which…
Sociopathy is a very strong word, but they do show a pattern of criminal and anti-social behavior. This is not too uncommon in teens, and many young problem kids reform into good members of society either by being shown consequences for their negative behavior, or more or less naturally "mellowing out". The issue here is that these kids seem to fail upwards, and as you say, get rewarded for anti-social behavior, whic…
It has been a fairly common story, and part rumor, that intelligence agencies like to recruit young people active in the cyber criminal scene, and that the IT security industry also adapted this approach. They basically becomes part informer and part subject expert, especially since IT security expertise seems to be a difficult subject matter to teach in universities. When I studied IT security in university, about 1…
> that intelligence agencies like to recruit young people active in the cyber criminal scene Just linking this back to the story, am I mistaken in saying that DOGE is not an intelligence agency? (It certainly is a great position to exfiltrate information however.)
Earlier quoted context omitted.
The Com is just a general term for crime communities on the Internet. Its not a specific group. The Com includes groups that commit crimes stretching from cybercrime to literally the worst crimes you can think of and the vast majority of this is done on Discord and Telegram. You can go down a really dark rabbit hole if you really dig deep into some of these groups within The Com. This is where the worst of the worst…
To what degree is this common knowledge? After 20 years of being highly online I'm surprised to be so blindsided. Not that I work in security or anything.
From Europol:
> Violent online groups are targeting and manipulating vulnerable children and young people across widely accessible online platforms. There are multiple groups, associations and evolving subgroups that make up the online network known as The Com – short for community. The Com is a virtual community of groups and individuals who conduct illicit activities that glorify serious violence, cruelty, and gore.
> Elements of The Com network are known to have extreme ideological views and victimise children, coercing them to commit violent acts. Predators groom their victims through different methods – one approach is establishing friendships based on trust or romantic relationships. Another technique involves the use of power or coercive tactics with one goal – taking control over the victims, while getting them to engage in serious violence, self-harm, or other gruesome. It’s a vicious cycle - the predators in this network influence children or young people into conducting acts that increasingly shame, incriminate, or isolate them, this in turn makes them more vulnerable to further exploitation.
https://www.europol.europa.eu/media-press/newsroom/news/law-...
Earlier quoted context omitted.
Krebs has written other articles about it: https://krebsonsecurity.com/2024/09/the-dark-nexus-between-h...
Yes and he’s literally just a journalist with no real cybersecurity background
Earlier quoted context omitted.
I see you are mixing up IT security jobs where you can hire „mischievous people” with IT admins. I say 90% of security is admin work where one has access to various stuff. Then you have red teams, pentesters, consultants- that don’t have ever privileged access to anything. They should find flaws and pass recommendations to IT admins. If they hack anything at all - it has to be outlined in scope and strictly monitored…
I think you would be a bit surprised with both the university programs that teach it security, and also which companies that look to employ them. IT security can be admins, it can be programmers that focus on exploit vunerbilities, it can be reverse engineers, it can be pentesters, it can be red teams, and it can be people with high domain knowledge in a very narrow field related to security. IT security is a very wi…
I am pointing out that in most places there is separation of duties so you don't give "red teamer" or "pentester" access to any databases when they are in offensive role.
Then most likely administrators (who can have formal education on paper called cybersecurity) who have loads of work so 90% is configuring and keeping all configuration proper will have requirements like background checks and you are not going to hire "mischevious people" for that role.
Security is a broad spectrum but still offensive testing is maybe 1-2% of the work that needs to be done, all those systems need people to configure them. Having good security 90% of work is waking up updating software and keeping configurations of systems documented and in proper state. If some company doesn't have their security posture basics fixed there is no point of doing "red team assessment" or a "pentest" with them, that would be waste of time.