u/SysPhantom

/r/homelab, /r/homeserver, /r/networking, /r/raspberry_pi, /r/pfsense, /r/ddwrt, /r/proxmox, /r/pihole, /r/securityonion ...

Keeping your age in mind, this is what I recommend:

Podcasts: Listen to two or three to get a lay of the land. I recommend The Cyberwire and Hacking Humans, SANS Internet Stormcast, Darknet Diaries, or Malicious Life. There are many others, but just pick a couple.

YouTube Channels: Hak5, HackerSploit, Null Byte, and many others.

Books: Sandworm: A New Era of Cyberwar, Dark Territory: The Secret History of Cyber War, and maybe Like War. Lots of options.

Homelab: It was suggested already, but I want to emphasize the importance of hands on work. Learn Linux and Kali, set up servers, play and learn.

Don't Break the Law: If you were not granted explicit permission to 'test' a system, then you may be breaking the law. Take this seriously.

Professor Messer's youtube channel goes over the curriculum for three CompTIA certifications: A+, Network+, and Security+. His videos are long and in my opinion, very plodding. Many have found them very useful. To respond to the other two comments that the Downvote Brigade has judged harshly, and just in case you don't know, CompTIA certifications are non-vendor specific technical certifications that some people look down upon because they are not as rigorous as many vendor specific ones (Microsoft, Cisco, Red Hat ...) They are valued by some employers and not by others. The regular progression is A+, NET+, SEC+ and it's not a BAD idea to start that way, especially for a teenager, but someone in the industry looking to branch to Cyber should skip A+. And if you desire to be a compliance manager, skip NET+. That's my two pesos.

You must upgrade to ME first.

Before I retired mine, I measured the sound level. It peaked at 70 db. That was one PE2950. imagine a datacenter full of them?

I understand it only applies to Win 10 and Server 2016/2019.

You have no idea how long I've fantasized about doing this.

I used to use Ninite. It handled a lot of unlicensed software and was reasonably cheap.

Wow, that was one hell of a typo on my part. Sounds very NSFW. The other source for cheap, technical ebooks is Fanatical. I've haven't purchased from them yet.

Codecademy to learn "command line", git, and sql, there are many youtube channels with great content, and you can get cheap technical ebooks at places like humbundle.com who is running an O'Reilly bundle right now. There's another store but I forget the name.

I saw 1,060 pis and my first thought was I thought they converted to the Euro.

Experience is only one piece of the equation....certs matter

Like with all things, you can't do just one thing. As someone with lots of experience and no relevant certs, I know how hard it is to get past HR to even get an interview. Experience should trump everything in a perfect world, but in reality you can lie about your experience. personally, I've processed orders for a multinational nutrition distribution corporation. Then I asked if they wanted fries with it.

I created a group policy setting to associate javascript files with Notepad.exe. That way if they double-click on a .js file, it won't run. I can't say how effective this was, but it made me feel more comfortable.

Network+ -> Security+ -> CySA+ or PenTest+ isn't a bad path. DoD seems to take them seriously. If you have Cisco certs already you can continue on their Cyber path.

Yellow is Dev, Orange are beta testers, and green are good developers.

They are on the CentOS Team.

"BlueKeep Vulnerability Exploit in the Wild, Patch Months Ago" FTFY

I think he's the worst pirate I've ever heard of.

Us graybeards of IT remember him from way back. I relied on spinrite back when it was relevant. He was a bona fide developer, knowledgeable and opinionated. I don't know what early reputation you are referring to. I found his podcast to have good information but the very opposite of concise. I trust his facts and consider his conclusions. He tends to be sensationalist.

DoorDash doesn't do what DoorDash does for DoorDash. DoorDash does what DoorDash does because DoorDash is DoorDash.

Maybe not a formal joke, but back in the days of FORTRAN, if you did not declare your variable types, the compiler would assign a type based on the first letter of the variable. 'A' through 'H' was REAL and 'I' onward was INTEGER. So, if you used an undeclared variable 'GOD' you would get the compiler message:

GOD is REAL, unless declared INTEGER.

Hand me the extension ladder. I need to replace a power unit.

SecurityOnion is an open source IDS. OpenVAS is an open source vulnerability scanner. Implement patch management. The commercial options are very good, and resume builders, but there are zero budget options. I was there.

The injunction needs to be printed on the dust jacket as if it were a review.

I too have read it. It's basically a Security Onion handbook and a pretty good book, but it's from 2013 and way out of date.