idr0p

@idr0p wrote:

This also brings the question, if you deploy a honeypot are you “leaving your doors unlocked” so to speak. Meaning you would be unable to charge the intruder for trespassing on your network as you invited them in.

So if I don’t patch my perimeter systems and they are remotely exploitable, I’m “inviting” trespassers?

@idr0p wrote:

This also brings the question, if you deploy a honeypot are you “leaving your doors unlocked” so to speak. Meaning you would be unable to charge the intruder for trespassing on your network as you invited them in.

Here is a good example of the police using “bait cars”, which I think is pretty similar to honeypots… …[Read more]

@idr0p wrote:

Wow this actually covers from stuff i am going through right now.

I am scheduled for the CISA in Dec. I wanted to complete a cert in the mean time by end of Oct. then study for the CISA. As I just completed the GPEN, I am up in the air as to if i should do the GWAPT or the OSCP.

P.S. I am also going back to school for my masters in…

[Read more]

@idr0p wrote:

Defcon was fun for me this year. It was my first time going. Next year i think i will follow EVERYONES advise. Less lectures and get more involved. I will most likely be looking to make a Open CTF  /  Forensics Challenge team for it.

Fair warning for oCTF, have some ipv6 knowledge.  We were caught off guard and were scrambling wi…[Read more]

@idr0p wrote:

For all the mentors out there:

Do you read the slides or do you produce your own material. Also how do you do the exercises?

You use the same materials as the official courses. The sessions are abbreviated, so instead of six full days, you do something like two hours per week for six weeks. There’s a lot of self-study involved on…[Read more]