- My Forums
- Tiger Rant
- LSU Recruiting
- SEC Rant
- Saints Talk
- Pelicans Talk
- More Sports Board
- Fantasy Sports
- Golf Board
- Soccer Board
- O-T Lounge
- Tech Board
- Home/Garden Board
- Outdoor Board
- Health/Fitness Board
- Movie/TV Board
- Book Board
- Music Board
- Political Talk
- Money Talk
- Fark Board
- Gaming Board
- Travel Board
- Food/Drink Board
- Ticket Exchange
- TD Help Board
Customize My Forums- View All Forums
- Show Left Links
- Topic Sort Options
- Trending Topics
- Recent Topics
- Active Topics
Started By
Message
re: Is the whole hacker / IT security / upgrade loop just a system to keep people employed?
Posted on 8/6/18 at 9:39 am to The Egg
Posted on 8/6/18 at 9:39 am to The Egg
quote:
bc security threats evolve, and with it, detection and prevention have to evolve with it
Network Security is a booming field right now and is constantly growing and evolving much more than any other branch of the IT field. The ethical hacking certs are getting more and more important and intense. If you are good and have experience, you can almost start printing your own money.
Posted on 8/6/18 at 9:39 am to CarRamrod
quote:where did he compare the professions though?
You just compared IT to Doctors and Lawyers.
Posted on 8/6/18 at 9:44 am to Kracka
quote:
If you are good and have experience, you can almost start printing your own money.
Network+ and Security+ within a year or two and the offers roll in..One of the true stories for jobs no longer needing four year degrees to print money anymore..I've never even been to our home office in Maryland and as long as I put in 40 (90% of this is just starting a scan) and keep my training up, I really don't need to do anything else
This post was edited on 8/6/18 at 9:46 am
Posted on 8/6/18 at 9:47 am to GrammarKnotsi
quote:
Network+
Taking this wednesday.
Then taking the CCNA by labor day. Then going to to CCNA Security & Collaboration hopefully by christmas.
I should be good for a while.
Posted on 8/6/18 at 9:51 am to Kracka
quote:
Network+
Taking this wednesday.
Then taking the CCNA
Network+ is ok. Was my first cert back in 2002. But if you are going for the CCNA, i'd skip it. First test for the CCNA is basically the Network+ applied to cisco. If you have a CCNA, Network+ is understood. Kind of redundant.
Posted on 8/6/18 at 9:53 am to xLxSxUxFxAxNx
quote:
If you have a CCNA, Network+ is understood. Kind of redundant.
I tell people this all the time..A lot of certs now, get you in front of HR (CEH)...Real certs, get you in front of the IS hiring guy
Posted on 8/6/18 at 9:55 am to weagle99
quote:
weagle99
This guy def has a few keyloggers in his system.
Posted on 8/6/18 at 9:56 am to Mingo Was His NameO
quote:
They are. It's white collar hacking. A company employs someone to try to hack the system to identify weak spots. Your alternative would be to just wait until you are hacked and then try to fix it because you're an idiot and think there's some big conspiracy?
His premise is the weaknesses are built by design to keep people employed.
Honestly, it's no different than people who think phones/cars/etc are intentionally built to fall apart after a few years in order to keep consumers coming back.
Posted on 8/6/18 at 10:00 am to Kracka
quote:
And the shite people still to this day open in their email......In a way its frustrating, but then again, if they were as smart as me, I wouldn't have a job.
Serious question - why can't this kind of user error be prevented?
Posted on 8/6/18 at 10:01 am to Kracka
i'm not even in IT, but i've audited IT for a good bit, and it's complex for sure. gave me a deeper appreciation for the craft.
Posted on 8/6/18 at 10:01 am to slackster
Patching is way more of a headache to OS and software developers. They are certainly not trying to support a completely different field. Dumb thread.
Posted on 8/6/18 at 10:02 am to slackster
quote:
why can't this kind of user error be prevented?
look at the post on the O-T...These people have email at work...
Need more examples than that ?
Posted on 8/6/18 at 10:02 am to GrammarKnotsi
quote:
A lot of certs now, get you in front of HR (CEH).
Which is unfortunate because the CEH is a fricking joke.
The only red team certs worth a damn are the OSCP/OSCE and GPEN/GXPN, with the OSCP/OSCE having a slight lead over the SANS courses.
Posted on 8/6/18 at 10:03 am to ell_13
quote:
Patching is way more of a headache to OS and software developers. They are certainly not trying to support a completely different field. Dumb thread.
Yeah, I'm not suggesting the premise is sound, just pointing out people say the same thing about plenty of fields.
Posted on 8/6/18 at 10:04 am to slackster
quote:
Serious question - why can't this kind of user error be prevented?
Because people are either A) stupid or B) don't give a shite or c) both.
Posted on 8/6/18 at 10:04 am to weagle99
downloading some things will get viruses on your computer, which will affect the entire network.
Posted on 8/6/18 at 10:05 am to GrammarKnotsi
quote:
look at the post on the O-T...These people have email at work... Need more examples than that ?
I understand there are dumb people with network emails.
My question is more about why can't email threats be screened more effectively?
Phishing is a different animal, but clicking a malicious link seems preventable by the system.
Posted on 8/6/18 at 10:07 am to slackster
quote:Because of how easy it is to open a file or click a link. Filters can only go so far. And not every business can handle scanning every document first. Some have gone so far as blocking all emails that include attachments. And some hacks don't even require a click... emails with images that load automatically (although that can be easily stopped, too).
Serious question - why can't this kind of user error be prevented?
And most of these precautions are limited to the corporate emails. Hacking an individual is as easy as creating a fake automotive header and telling someone they have a recall on their vehicle and they need to click a link to see where to take it.
Posted on 8/6/18 at 10:07 am to slackster
quote:
Phishing is a different animal, but clicking a malicious link seems preventable by the system.
Most email firewall systems stop most of these, but since each email/link is different, it takes a bit for the algorithms to catch on.
When we get hit by campaigns, the first 5-10 emails will get through before the firewall starts blocking them.
There's just too many variations...and if you get too strict, you start blocking legitimate email.
Posted on 8/6/18 at 10:10 am to slackster
quote:
clicking a malicious link seems preventable by the system.
it is, but when the user says "yes, open it anyway" you're fricked..We've had clients block urls in emails, but you know who that affects..The CEO...and when he can't get his daily jokes, you have to loosen those restrictions..But when Abby in accounting goes for her daily bible verse and downloads a trojan that encrypts the entire departments files and backups, its her fault..The biggest threat in IT/IS will always lie between the seat and the keyboard..The Id10t malware will always exist
Popular
Back to top


1






