344 karma · joined January 13, 2014
For example, the big red button in modern data centers, they are purposely behind a somewhat weighted glass or plastic casing with clear instructions on it's purpose that has to be manually opened and lifted in order to be pushed. It is a button that cannot be accidentally pushed, unless there is no casing which would be a major design, engineering, management and implementation flaw just waiting to accidentally be pushed.
There should be extremely high standards of ease of use and good UX/UI any emergency system, it should remove the capability of accidentally being engaged in a live environment that goes out to the public. If that system is engaged then there should be no doubt it is a true emergency and the individual or individuals operating the system engaged it on purpose.
For testing, there should be a clear and informational way to know the system is in testing mode versus production mode. Many experienced engineers have seen what happens when test and production are not separated properly (junior engineer wipes out or causes a disruption in production by properly following a documented process that should have been updated to insure that production, test, staging and dev cannot talk/hurt each other).
It is good that this large issue is being addressed, and I hope the entire government takes steps to improve interface design to the emergency systems as when they are needed it should be extremely simple for the operator to insure they are not making any mistakes and should be very difficult for an accident to occur.
Now if things were secure by default with no option to disable it we would be in a much better place right now security wise (not sure about how easy the use-ability would be though at first) as engineers would have to adapt to programming more securely on the hardware and software level. Though I did find it strange that when you read the Intel documentation everything is not accurate and there is a large amount of illegal opcode [0].
There is a chance that these vulnerabilities were reported internally and externally, never made it past a manager or never reported to the vendor, seen as not exploitable or theoretical by management or higher level engineer until someone else found it and figured out how to exploit it with time.
This is the same case with encryption algorithms that have been implemented on chip, in theory they are hard to brute force, but with time normally a method is created that can reduce this time by using artifacts found in the algorithm or certain symptoms that occur during the process of attempted encryption/decryption that could be a game changer that was not thought of or documented.
In terms of keeping active, I would recommend moving closer to a major metro area, this could be on the outside of the beltway so you possibly drive or take a ride in to reduce your rent/mortgage. Remember, it is hard to keep the mind busy when you live in a place with little to no activity.
Have you tried spending time working on your other hobbies, looking into things you would like get involved in (learning the ins and outs of cars, setting up a home datacenter, getting more in-depth knowledge about your favorite music genres, designing your own clothes, car mods etc.). If you do not want to move have you looked into ways to enhance your local community to bring some life into it, create jobs, get to know the locals better, conduct local hackathons, and start small conferences to get others interested into what you do, etc.?
I would recommend getting into building things that have already been built before (bootloaders, ISO creator's, GUI frameworks, bandwidth monitors, firewall, kernel modules, etc.) so you have some real world projects under your belt. As by widening what you work on outside of just textbooks makes you a better engineer and normally only learned through personal projects or working for an employer.
Now, the good thing is until you have enough time, money and feel comfortable taking the plunge into being your own boss you can work on gaining the skills by working for someone else. If you are working at a company that does not conduct additional compensation based on performance leave the company for one that does. You owe nothing to a company that is not properly compensating you for the value you provide, especially as your time increases there and you are a top performer.
There are companies out there or should I say sections within companies (even the big ones) that will normally do the following: Annual raise based on performance, annual bonus based on performance, spot bonuses, quarterly bonuses and increasing your base salary to keep competitive with the market (i.e. if your showing mass improvement beyond what you were originally hired for or your actions keep improving your coworkers productivity you could see your base salary increased by 10 to 20 percent or more to better place your skills and talents within the company and insure you are being properly compensated).
A company that cares about attracting top talent, growing and retaining top talent will properly compensate you to where you could technically become rich within (within reason of their income and the value you bring to the table) a few years of working there. As the good companies see that the value you bring to the company increases their bottom line and will make sure to keep your pockets filled with cash so you do not have to worry about it and can spend time doing what you do and have fun doing it.
I would recommend you do some searching for areas near you and compare your skills, talents and abilities to what the average household incomes are near your next possible employer - https://www.incomebyzipcode.com/
Insure that what you ask for in salary is a minimum of what the average household income is for the zip code of your employer. Also ask about compensation based on performance and how any bonuses, raises or salary adjustments are calculated. If the potential employer looks at you funny and doesn't know what your talking about move on to the next potential employer until you find one that does not just pay a base salary and does raises but also pays bonuses based on performance.
It may require new hardware or enhancements to hardware to accommodate the changes (e.g. AES instruction sets added to the x86, ARM, SPARC, MIPS, etc. processors) to help speed up the processing of encryption and decryption requests. When that time comes there will be a quick rush from vendors to patch and or upgrade systems when possible.
Though, I would also recommend at least reading and watching through the certification material for CCNA, CCNP and CCIE Routing & Switching, Security, Collaboration and Datacenter when you have a chance from something like Safaribooksonline or Udemy. The amount of knowledge you learn just by reading through the certification material and applying it is breathtaking.
To enhance your experience, I also recommend picking up a CCNA/CCNP lab kit off of Amazon so you have something cheap at home to put your hands on. If you do not have the money or do not want to have equipment in house there are online lab options that use real equipment that you can remote into from home. Though with that option you will not get the good hands on experience learning about all the different cable types, how to configure them properly on the routers, and switches and go through the good old troubleshooting process when cables do not work as expected that you will run into on a real network engineering job.
All of the best network engineers I have met have their own network lab setup at home or were lucky and had a test network setup at work to prototype and test things before implementing them in their staging and production environments at work.
Once you have a good grasp of physical networking and the configuration of network hardware you can really start to take advantage of software defined networking to automate all types of network designs and security requirements. This will give you a major advantage over other candidates if the program has varying types of equipment to learn on.
With the work being conducted to increase the capability of graphics rendering while reducing power consumption, heat production and overall size VR, AR, and MR applications will probably be very hard to tell the difference between what is real and virtual.
Are you following code style guidelines, is your code secure, is your code fast, are you make large code pushes that takes too long to review and test, are you submitting tests when required, are you updating your documentation, did you follow spec, does your code solve a problem related to a feature, bug request, etc.? If you are then there could be other things that might be outside of what you are doing that are not being properly communicated to you at all.
Have you talked to the team lead about the issues in your code to work towards improving the code you commit? Though it would be very beneficial to have the capability to submit your code to a dev CI/CD system that tells you what is wrong with your code automatically before you submit it for production review.
Though ultimately if you are not receiving feedback on how to improve the code your committing you should bring it up with management as it is the senior and above job to help guide and mentor junior developer's or new team members with any issues in their code. If this is not being done then it could be a leadership, managerial or cultural problem that needs to be resolved early on.
If you are still getting large rejections could you give us a few anonymized samples of some of the rejection notes on your commits?
Also insure you have video and pictures of the now to include the inside and outside of your home, vehicles and land along with what the neighbors homes looked before you vacate the area.
Once you are sure you have everything, fill up on gas if possible and vacate the area and check the safety status of the area many miles away from the fire. To be safe go to a different county or city far away from the flames.
If the client is late paying they are charged 10% or more interest depending on the value that is charged on a monthly basis. If they are not paid up in full within 60 days I take out a Judgement Lien on their personal and business properties to recuperate any losses I may have had to incur due to the none payment.
https://store.docker.com/editions/enterprise/docker-ee-serve...
https://store.docker.com/editions/enterprise/docker-ee-serve...
https://store.docker.com/images/esystemstech
https://store.docker.com/images/gitlab-enterprise-edition
Some appear to be free/trial edition/subscription based, etc.. There are a couple that allow the end user to setup a subscription after trying out the free version of the software (trial edition) or a limited version of the software that allows end users to upgrade.
They would have to check with their lawyers to see what they can legally do, if they disregard sanctions they can be imprisoned, fined and have their business immediately dissolved by the U.S. Government.
You can easily do this by writing a personal check to your company and writing Owner Contribution by Your Title, First name Middle Initial Last Name on the For line.
Just remember you need to accurately record your personal investments into your business for accounting purposes. Easiest way is writing checks, which the bank will record the front and back of when you deposit them. If there is an emergency and you need to get money to the account faster a transfer would be ok too as long as it is properly recorded in your business accounting ledger.
If your an LLC or S-Corp it may work fine since the taxes would fall through to you. If you are a C-Corp you would want to insure these are kept separate as a C-Corp pays their own taxes which would be separate from your personal income taxes.
To make sure though I would recommend you and the other owners visit a business accountant (hire one that is good and keep them on retainer or have someone that manages your books) so they can give you a better run down and the legal requirements you have to follow and account for.
I run my code through a continuous deployment system that pushes code that I believe is ready to a testing server where my tests are run. If that goes well, then the code is pushed to a staging server where a similar or duplicate setup of production is orchestrated for each build. Once things look good and pass all the functional, behavioral and other custom automated testing and benchmarking it is automatically pushed out to production. Then production tests are run that are non damaging and check to insure that the new changes are actually implemented, if there are any issues the push can be automatically rolled back along with a report issued on the why it was rolled back along with a listing of any performance or unforeseen security issues that may have occurred.
I will at times have two staging environments if it is a website ( one that uses internal content links and proxies if behind a CDN/proxy service and one that goes through a staging proxy/CDN so I can test for any changes between two. For anything else I like to have an internal and staging setup to insure the probability of a hardware/middleware component causing an issue is decreased.
These multiple environments are little to no issue because they are all automatically setup either from scratch or a pre-built configuration managed image to speed up the orchestration time.
1. Check if the site has a bug bounty program, as results submitted there normally go directly to the security team or someone that can get the issue resolved.
2. If you are not able to find a bug bounty program, I would recommend contacting the site support or using the contact form on the site.
3. If that is unsuccessful, email/call the contact information on the website's WHOIS query page (whois domain.tld in terminal)
4. If that fails use twitter to send a DM to the sites social media contact.
5. If that fails make a public post to the twitter contact (e.g. @newcontact "Hi there, I found a pretty serious problem with your site contact me ASAP."
[0] RHCSA & RHCE Training and Exam Preparation Guide by Asghar Ghori. This book will help insure you know your stuff as your system engineer/administrator wise.
[1] A Practical Guide to Linux Commands, Editor and Shell Programming Third Edition. This book will cover the majority of what you would need and want to know when connecting to a remote linux system over ssh.
If you want to get under the hood and become an expert, the following books should help get you started:
[2] Advanced Programming in the UNIX Environment
[3] The Linux Programming Interface: A Linux and UNIX System Programming Handbook
[4] Linux Kernel Development 3rd Edition
To get a nice general overview and get up and going quickly:
[5] How Linux works: What every superuser should know
[6] The Linux Command Line
[7] Python Crash Course
[8] Automate the boring stuff with Python. This is a great book to help you think about how to automate most of the repetitive things you will end up doing on a regular basis.
[0] https://www.amazon.com/RHCSA-RHCE-Red-Enterprise-Linux/dp/14...
[1] https://www.amazon.com/Practical-Guide-Commands-Editors-Prog...
[2] https://www.amazon.com/Advanced-Programming-UNIX-Environment...
[3] https://www.amazon.com/Linux-Programming-Interface-System-Ha...
[4] https://www.amazon.com/Linux-Kernel-Development-Robert-Love/...
[5] https://www.amazon.com/How-Linux-Works-Superuser-Should/dp/1...
[6] https://www.amazon.com/Linux-Command-Line-Complete-Introduct...
[7] https://www.amazon.com/Python-Crash-Course-Hands-Project-Bas...
[8] https://www.amazon.com/Automate-Boring-Stuff-Python-Programm...
Compilers Second Edition [0]
Engineering a Compiler, Second Edition [1]
Computer Systems: A Programmer's Perspective (3rd Edition) [2]
[0]https://www.amazon.com/Compilers-Principles-Techniques-Alfre... [1]https://www.amazon.com/Engineering-Compiler-Second-Keith-Coo... [2]https://www.amazon.com/Computer-Systems-Programmers-Perspect...
Most of the time they needed to take medication for awhile to help rebalance their brain because something was off balance. Over time things rebalance and they no longer needed to take as much medication or no longer need to take any medication because things rebalanced.
The bulk of answers people find online are temporary placebos that never actually helped to permanently solve or reduce the problem because what they were taking or doing were not carefully planned by a medical professional. So my recommendation is to go see the Doc, they will either work with you to do a non medical treatment plan and/or you may need to take medication to resolve the issue. Just note that since it is a mental disorder the only way to resolve it is by using professional medical help by a therapist, physiatrist and or a physician. Do not feel bad seeing a doctor, it is better to seek professional help to try and resolve the problem.
If a private investigator does find something then you have all legal documents to use, with a hacker you would have nothing that you could legally use if you chose to get a divorce because you obtained evidence illegally. Then your husband would have a legal standing to divorce you and get the bulk of what ever you two had together after getting married. Which would grant him with the ability to sue you afterwords in criminal and civil court using the evidence you obtained illegally against you.
It is a loose loose situation for you if you obtain what you want to know illegally. You can only find out what you are wanting to know illegally by getting a private investigator to legally obtain what you asking for. When they are done they will normally present you with their findings with high quality images, videos and other documents that you can have when the investigation is done to do with as you want.
In short, a hacker is illegal to use and a private investigator is the route you should take to keep things private so no one knows what is going on but you and the private investigator.
If you and your husband are on the bill for the phone company you can request a record of all SMS messages and calls from them. If you want to search his phone legally you would need a warrant. As if you do something illegal you might end up on the loosing end if you go to divorce court.
Also note that this could be an issue outside of Google's control(network provider in between them) if you do not see any changes in the status page 30 to 60 minutes from now. I did check their social media outlets but do not see anything on any services being down. If they are any issues being worked on, there should be more news about it shortly.
If they are government employees they are normally paid on the regular government GS Pay scale (title 5) - https://www.opm.gov/policy-data-oversight/pay-leave/salaries... so the really good ones get paid up to $161,900 if they can make it past the GS-14 pay grade.
Though, that is considered generally OK pay for a regular government job that is not extremely high stress, quick turn around and high demand. Though to the private sector's top hackers as many far exceed this as a senior cyber security engineer or CISOs making up to $380,000/year + stock options + other perks. In those cases the government also has Title 10 which limits pay to under the president's salary (section 102 of title 3) $400,000 - https://www.law.cornell.edu/uscode/text/3/102. This allows the federal government secretaries or heads of agency to be able to pay individuals of extraordinary talent and ability the same rate as they may pay a physician or other medical professional if that individuals salary requirements fall outside of the regular GS pay scale and they really want that person on board and want to pay them a competitive salary.
There is also the Senior Executive Service and other equivalents for the many agencies that puts the individual into a senior level(SL), scientific or professional (ST) positions. These positions may come with cash rewards up to $25,000 with approval from OPM/White House, eligibility to be nominated for the Presidential Rank Awards (Distinguished Rank (35% of annual basic pay) or Meritorious rank (20% of annual basic pay) - https://www.opm.gov/policy-data-oversight/senior-executive-s....
Though these positions for hackers would normally be reserved for those with at least 10 to 20+ years in the game with extreme in depth knowledge of the multiple operating systems, hardware and software, SCADA, Satellite, and other embedded/private/public/military communications systems out there. This normally means they are not just specialized in a few things, but have deep knowledge of many systems through practical experience working with them hands on over the years and hacking them to pieces during security audits, product evaluations, quality assurance, security validation and testing through reverse engineering to insure the products do what they say they do, etc.
There are also some agencies that use a pay band system 1 to 5, etc. and normally cap out at around $157,000/year then bump up to around $120,000 to $167,000 for their senior level positions and $120,000 to around $180,000 for their senior executive service compensation.
So in general the best of the best in terms of government employees could be paid up to $400,000/year under title 10 which is more of a government contractor type position that has to be renewed regularly, highly unlikely unless those in top positions see someone they want working for them and really want them badly to work on the inside of government. Normally the title 10 pay is around $160,000-$300,000, so in general the bulk of hackers would fall under the GS pay scale ranging from GS-9 to GS-14 Step 6. Anything higher would have to be negotiated and justified during the hiring process or worked into a promotion for those already working for the government.