@nazokiyoubinbou @Viss Exactly

[viss@mastodon.social]

@JessTheUnstill i still do derive some bit of joy when folks come to me for career advice and ask "how do i get into security" and i say "go be a sysadmin for 3-5 years and learn how shit works" and they get super pissed

like theres a cheatcode to it somehow - like you can 'just go work in security' without knowing how computers and networks work.

[viss@mastodon.social]

@JessTheUnstill high-level sysadmin mode is .. kinda a security job already. because if youve been sysadmin for long enough and you leave shit like default creds or bad default configs or horrible setups it means youre a bad sysadmin, and those are all 'security topics'

[viss@mastodon.social]

@JessTheUnstill oh absolutely. we can both sit in the bleachers and watch everything burn because the staffing companies are happy to get their 20% payout for a 200k/yr 'engineer' they hamfisted into the position, despite that 'engineer' having a 100% fabricated resume and zero experience.

lie for 40 grand?
sure!

[sempf@infosec.exchange]

@Viss What if we make our OWN frontier models? HMMMMM, Dan? What then? Mine have blackjack and hookers!

[viss@mastodon.social]

@Sempf get on them used h100s :D

[kajer@infosec.exchange]

@Viss wat

[viss@mastodon.social]

@kajer im watching a conference talk on youtube about some folks that wrote an nvidia cuda exploit to break out of gpu containers and get shell on the host os, and while the research is great, the fact one of the presenters says "nuh vidyuh" is making me physically cringe.

[quatermasstools@infosec.exchange]

@Viss they are obviously at least 3x dumber

[kajer@infosec.exchange]

@Viss

as a former enviduh employee, this hurts.

[buherator@infosec.place]

@Viss you don't really talk about it because 1) NDA 2) you look at the damn code all the time?

[viss@mastodon.social]

@kajer i remember various games that would feature the nvidia logo in green shiny texture, and it would spin, and a voice would whisper 'nvidia'. I dont get how you can watch something like that over and over again and still get the name wrong.

no clue if this presenter ever played any games like that, but .. sigh

[kajer@infosec.exchange]

@Viss is this going to be DEFCON eBPF bug talk soon?

[tindrasgrove@infosec.exchange]

@Viss @JessTheUnstill there are so many things I learned as “security” that I wish I had known as an admin because it would have made me way better at the job

[viss@mastodon.social]

@JessTheUnstill the people who faciliated all that are people like the ceh council, isc2, sans, and the people who stood to make the money from certs and training. then the colleges got in on it. shit really went pearshaped once for-profit schools got involved. they were happy to take kids money, and never tell them "theres an entire lifetime of experience you need to use any of this stuff we're teaching you"

[raphaelmorgan@disabled.social]

@Viss can't tell if the link isn't there anymore, or if openAI noticed I blocked their scrapers and decided to block me back 😂

[viss@mastodon.social]

@raphaelmorgan it still loads for me!

[viss@mastodon.social]

@JessTheUnstill grroooaaaaaaan

[winterknight1337@infosec.exchange]

@Viss your ChatGPT sounds like a teenager.

[viss@mastodon.social]

@winterknight1337 i told it to be casual and thats what it does now

[jb@masto.hackers.town]

@Viss @JessTheUnstill

“I do infrastructure, but never learned how IP works” is still my favorite.