@shellsharks@infosec.pub Sorry, was offline for a few days! Not really sure what I’m looking for, honestly? Mostly someone to kind of push me for doing more/exploring more? I’d like to focus in on AI security as well as container security and I know I can start that work on my own – I just know it’s easier/more likely for me to do things if I have someone filling in the blanks on things I don’t know that I don’t know. I’ll start with those there (been following She Hacks Purple and InfoSec Sherpa for a bit) and see if any long hanging fruit shakes lose from the tree, thanks again!

write_that_down.jpeg

This is amazing info, thank you! So I have a BS in comp sci and applied math but all my experience is from ~10 years in different roles in IT from helpdesk to now cloud engineering/devops. I’ve had been doing some CTF’s and Juice Shop for a bit but fell off because things got busy (as they always do). Lately I’ve been looking at reversing DRM for old shareware games just to get more familiar with the concepts but it’s been mostly looking rather than doing so far lol. What I really want to get better at are namely two things:

• Container security and exploiting it
• Getting better at understanding how things work at lower levels to be better at reverse engineering

Really appreciate the insight and hope that everything goes well with your plans!

That makes sense, thanks! Have you ever hired a mentor before? I imagine it’d be a lot like hiring a coach but how would you know that they’re not just being kind of a “yes man” or at the very least kind of reputable?

General question but how do y’all actually find a mentor? I feel like there’s probably a local group nearby me or something that I could look into but are there places/people that are more likely to say “yes, I will mentor you” in y’all’s experience?

Browser only (firefox) on my laptop

Yeah, I would still be using mullvad if they hadn’t removed port forwarding – it’s too damn bad but I get why they needed it. Switched to Proton but I imagine they’ll run into the same issue down the road and will need to find a more permanent solution.

I mean, that’s just how everyone looks like after 3 hours of talking to a rubber duck, right?

I did not know that was a show and now I can not un-know it lol. Feel like that is going to be a risky search at 1 in the morning.

I use Miniflux and I’ve actually had luck just putting the channel url like youtube[.]com/channel/CHANNEL_NAME_HERE and the rss feed populates from there!

Oh one suggestion for external access that I have is Tailscale – it’s a dead simple wireguard VPN. You don’t need to do any kind of port forwarding or configuration, you literally just install the binary and run it. It even has support for custom domains so if you have a website, you could set your jellyfin server as a tailscale only subdomain. 10/10 recommend

I honestly love having all my stuff self-hosted – lemmy is one of maybe three websites that I actually visit rather than having an rss feed send me the info. If anyone is curious, I’m more than happy to go into my setup a bit further but here’s the tl;dr on it:

• I run all docker containers in Portainer so I can view all my container health in one spot. The only thing that is not containerized is a raspberry pi running PiHole to block ads across the whole network
• I have Jellyfin as my media server pointed to a shared network drive. Jellyfin gets all of its movie, tv, music, and book information from Sonarr, Radarr, Lidarr, and Readarr. They in turn are able to download things from Prowlarr which connects to usenet and ahem other sites for media
• I run backups to a backblaze bucket from Duplicati and sync all files across multiple devices to backup from Syncthing – this handles my phone, my laptop, my server
• I have an RSS aggregator with Miniflux so that all the sites that I actually care about come to me rather than me having to check their pages for an update. If I find an article that I want to read for later, I send it to Wallabag – an opensource version of pocket
• I also host multiple databases on the server and connect them all, as well as remote databases with Trino for running sql queries on projects I’m working on
• My latest project I’m working on is feeding articles from Wallabag to a TTS engine and creating a selfhosted podcast just for me

All of this runs on an Intel NUC that isn’t anything super heavy and you don’t really have to do anything big or complicated like this either – just find a thread that looks interesting and pull on it, rinse, and repeat!

I’m kind of surprised there isn’t a browser extension to redirect reddit.com to lemmy.ml or something yet lol

Seriously! I ended up blocking reddit and its subdomains with my pihole so that I’d stop clicking on things from google searches.