• 0 Posts
  • 37 Comments
Joined 1 year ago
cake
Cake day: June 18th, 2023

help-circle


  • boatswain@infosec.pubtoLinux@lemmy.mlWhat is PID 0?
    link
    fedilink
    arrow-up
    22
    ·
    3 months ago

    The tl;dr from the article (which is actually worth a read):

    The very short version: Unix PIDs do start at 0! PID 0 just isn’t shown to userspace through traditional APIs. PID 0 starts the kernel, then retires to a quiet life of helping a bit with process scheduling and power management. Also the entire web is mostly wrong about PID 0, because of one sentence on Wikipedia from 16 years ago.



  • Interesting; it reminds me a little of an addon from maybe a dozen years ago that would do the same kind of thing but with fiction. So you’d be reading a post on Slashdot or whatever, and the addon would find a sequence of words that matched the start of one of the stories it had, and it would add a few words of that story. If you noticed, you could click on them to get more of the story, and if you kept clicking it would eventually replace the text of the whole page with the story. It was a really neat way of just stumbling across fiction. Wish I could remember the name of the addon. For some reason I think it was Australian, maybe put together by a university or an arts council or something?



  • If XSS is your concern, check out Firefox’s Container Tabs. They allow you to set up tab groups that restrict access to cookies to only tabs in that group, so you can just, eg, set up a group for your bank and restrict it to just your bank’s site. Your session cookie etc are then not available to any other tab groups.

    I pair that with the Temporary Containers extension, so any random tab I open is in its own container. Everything is always separate.








  • Hey all! I’m trying to figure out where I go next in this career. I’m working at a mid sized company that is owned by a company that is owned by another company. Started out as a software dev about right years ago and spent a lot of time as a security champion; finally moved to the InfoSec team about two years ago. It’s a small InfoSec team: three people total. So I do a lot of stuff: contact reviews, vendor security assessments, firewall log monitoring, code reviews, run security trainings, coordinate external pen tests, gather SOC 2 evidence, incident response… Lots of stuff.

    I like most of the work well enough (though the GRC stuff is not my favorite), but recently my boss and my teammate quit, so our team of three is down to me. There’s some support available from the security team of the parent organization, and a very competent contractor, but it’s largely just me.

    What I’m wondering mostly is: if I go elsewhere, what kind of role am I looking for? I feel like this Jack-of-all-security-trades thing I’ve got going on can’t be super normal, can it? And also, is my current situation something I should embrace, and take the opportunity to run the InfoSec team? Having someone with two years of security experience at the wheel seems suboptimal to me, but maybe it’s worth doing for the experience?

    My ideal would be working with a team of five or six, with people I can learn a lot from; my concern is that right now, most of the learning I can do is from my own mistakes.