Started By
Message

re: Is the whole hacker / IT security / upgrade loop just a system to keep people employed?

Posted on 8/6/18 at 9:39 am to
Posted by Kracka
Lafayette, Louisiana
Member since Aug 2004
42502 posts
Posted on 8/6/18 at 9:39 am to
quote:

bc security threats evolve, and with it, detection and prevention have to evolve with it


Network Security is a booming field right now and is constantly growing and evolving much more than any other branch of the IT field. The ethical hacking certs are getting more and more important and intense. If you are good and have experience, you can almost start printing your own money.
Posted by The Egg
Houston, TX
Member since Dec 2004
83918 posts
Posted on 8/6/18 at 9:39 am to
quote:

You just compared IT to Doctors and Lawyers.
where did he compare the professions though?
Posted by GrammarKnotsi
Hammond
Member since Feb 2013
10172 posts
Posted on 8/6/18 at 9:44 am to
quote:

If you are good and have experience, you can almost start printing your own money.


Network+ and Security+ within a year or two and the offers roll in..One of the true stories for jobs no longer needing four year degrees to print money anymore..I've never even been to our home office in Maryland and as long as I put in 40 (90% of this is just starting a scan) and keep my training up, I really don't need to do anything else
This post was edited on 8/6/18 at 9:46 am
Posted by Kracka
Lafayette, Louisiana
Member since Aug 2004
42502 posts
Posted on 8/6/18 at 9:47 am to
quote:

Network+

Taking this wednesday.

Then taking the CCNA by labor day. Then going to to CCNA Security & Collaboration hopefully by christmas.

I should be good for a while.
Posted by xLxSxUxFxAxNx
Baton Rouge
Member since Sep 2003
58633 posts
Posted on 8/6/18 at 9:51 am to
quote:

Network+

Taking this wednesday.

Then taking the CCNA


Network+ is ok. Was my first cert back in 2002. But if you are going for the CCNA, i'd skip it. First test for the CCNA is basically the Network+ applied to cisco. If you have a CCNA, Network+ is understood. Kind of redundant.
Posted by GrammarKnotsi
Hammond
Member since Feb 2013
10172 posts
Posted on 8/6/18 at 9:53 am to
quote:

If you have a CCNA, Network+ is understood. Kind of redundant.


I tell people this all the time..A lot of certs now, get you in front of HR (CEH)...Real certs, get you in front of the IS hiring guy
Posted by 50_Tiger
Arlington TX
Member since Jan 2016
43534 posts
Posted on 8/6/18 at 9:55 am to
quote:

weagle99


This guy def has a few keyloggers in his system.
Posted by slackster
Houston
Member since Mar 2009
91871 posts
Posted on 8/6/18 at 9:56 am to
quote:

They are. It's white collar hacking. A company employs someone to try to hack the system to identify weak spots. Your alternative would be to just wait until you are hacked and then try to fix it because you're an idiot and think there's some big conspiracy?


His premise is the weaknesses are built by design to keep people employed.

Honestly, it's no different than people who think phones/cars/etc are intentionally built to fall apart after a few years in order to keep consumers coming back.
Posted by slackster
Houston
Member since Mar 2009
91871 posts
Posted on 8/6/18 at 10:00 am to
quote:

And the shite people still to this day open in their email......In a way its frustrating, but then again, if they were as smart as me, I wouldn't have a job.


Serious question - why can't this kind of user error be prevented?
Posted by The Egg
Houston, TX
Member since Dec 2004
83918 posts
Posted on 8/6/18 at 10:01 am to
i'm not even in IT, but i've audited IT for a good bit, and it's complex for sure. gave me a deeper appreciation for the craft.
Posted by ell_13
Member since Apr 2013
88419 posts
Posted on 8/6/18 at 10:01 am to
Patching is way more of a headache to OS and software developers. They are certainly not trying to support a completely different field. Dumb thread.
Posted by GrammarKnotsi
Hammond
Member since Feb 2013
10172 posts
Posted on 8/6/18 at 10:02 am to
quote:

why can't this kind of user error be prevented?


look at the post on the O-T...These people have email at work...

Need more examples than that ?
Posted by Centinel
Idaho
Member since Sep 2016
46687 posts
Posted on 8/6/18 at 10:02 am to
quote:

A lot of certs now, get you in front of HR (CEH).


Which is unfortunate because the CEH is a fricking joke.

The only red team certs worth a damn are the OSCP/OSCE and GPEN/GXPN, with the OSCP/OSCE having a slight lead over the SANS courses.


Posted by slackster
Houston
Member since Mar 2009
91871 posts
Posted on 8/6/18 at 10:03 am to
quote:

Patching is way more of a headache to OS and software developers. They are certainly not trying to support a completely different field. Dumb thread.


Yeah, I'm not suggesting the premise is sound, just pointing out people say the same thing about plenty of fields.
Posted by Centinel
Idaho
Member since Sep 2016
46687 posts
Posted on 8/6/18 at 10:04 am to
quote:

Serious question - why can't this kind of user error be prevented?


Because people are either A) stupid or B) don't give a shite or c) both.
Posted by kywildcatfanone
Wildcat Country!
Member since Oct 2012
141134 posts
Posted on 8/6/18 at 10:04 am to
downloading some things will get viruses on your computer, which will affect the entire network.
Posted by slackster
Houston
Member since Mar 2009
91871 posts
Posted on 8/6/18 at 10:05 am to
quote:

look at the post on the O-T...These people have email at work... Need more examples than that ?

I understand there are dumb people with network emails.

My question is more about why can't email threats be screened more effectively?

Phishing is a different animal, but clicking a malicious link seems preventable by the system.
Posted by ell_13
Member since Apr 2013
88419 posts
Posted on 8/6/18 at 10:07 am to
quote:

Serious question - why can't this kind of user error be prevented?
Because of how easy it is to open a file or click a link. Filters can only go so far. And not every business can handle scanning every document first. Some have gone so far as blocking all emails that include attachments. And some hacks don't even require a click... emails with images that load automatically (although that can be easily stopped, too).

And most of these precautions are limited to the corporate emails. Hacking an individual is as easy as creating a fake automotive header and telling someone they have a recall on their vehicle and they need to click a link to see where to take it.
Posted by Centinel
Idaho
Member since Sep 2016
46687 posts
Posted on 8/6/18 at 10:07 am to
quote:

Phishing is a different animal, but clicking a malicious link seems preventable by the system.



Most email firewall systems stop most of these, but since each email/link is different, it takes a bit for the algorithms to catch on.

When we get hit by campaigns, the first 5-10 emails will get through before the firewall starts blocking them.

There's just too many variations...and if you get too strict, you start blocking legitimate email.
Posted by GrammarKnotsi
Hammond
Member since Feb 2013
10172 posts
Posted on 8/6/18 at 10:10 am to
quote:

clicking a malicious link seems preventable by the system.


it is, but when the user says "yes, open it anyway" you're fricked..We've had clients block urls in emails, but you know who that affects..The CEO...and when he can't get his daily jokes, you have to loosen those restrictions..But when Abby in accounting goes for her daily bible verse and downloads a trojan that encrypts the entire departments files and backups, its her fault..The biggest threat in IT/IS will always lie between the seat and the keyboard..The Id10t malware will always exist
first pageprev pagePage 3 of 6Next pagelast page

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on X, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookXInstagram