0x00_

I recognize this github from some fun c puzzles! The developer is intelligent. What gives? I don't understand why it is difficult for someone like that to find employment. Could someone from the bay area give some insight into this kind of thing? The scene is different than that in Boston.

Aweee, don't feel bad for me. NBD. People like me are really good at not failing. I'm measuring with this thread before I make a decision to do something. Internet advice as a collective unit of measurement is still useful and valuable. It is a sin to ignore useful information. Every little bit helps ;)

I've also found it incredibly difficult to ask google this type of complex question. So I posted it here instead.

Social anxiety. Embarrassed by the stigma and reputation, don't really want to bump into or be noticed by any LE who may be present. Frustrations like that tend to work against me when considering doing this.

I'm slowly -very slowly and cautiously- approaching the local infosec community. For me to do that it has to be piecemeal.

I don't really enjoy taking the time to make things look pretty. I'm not very good at that part of the design process and it takes too long for me (imho) to produce some aesthetic that will never really be functional outside the scope of organization.

I have done it when I've needed money though. Just aggravates me.

:) These are the types of posts I was hoping for when I created this thread. Thank you so much for taking the time to write this -both of you. It's just been really shitty to think about lately as far as my future is concerned. I am at a point where I'm beginning to question whether or not the choices I am making now are worth the investment of time (or not) before it's too late to change course. your experiences give me a modicum of hope which serves to reinforce my initial belief that everything I have been doing isn't a complete waste of time.

There's a paucity of information about these circumstances (compu fraud + compu pro) available online and most of the information available is presented from accounts of felons who are not in the same boat as I am.

Really my favorite posts here. Thanks again.

Bravo. +1

Depends on language and the type of work. Shoot me an email?

This is one of my favorite responses. Thanks.

Oh? The front page? Whoo hoo! (is that hard here? it's hard on reddit) I've gone ahead done that just-in-case. I am not really here looking for active leads (though I certainly wouldn't throw away an opportunity if it presented itself as a result of this posting), but some of these responses have been really uplifting.

I am really here pinging this community for people that have been in or have dealt with the circumstances of my disposition who would like to take a moment and give some pointers. So far the response has been better than I had anticipated.

Thanks rietta. Unfortunately presidential pardons are difficult to get without help from a political connection.

Based on the data (http://www.justice.gov/pardon/statistics.htm) in addition to the cumulative experience of those who have turned their lives around for decades and still been denied, I made a decision to try that later when I have a better history to present in my petition.

As you can see, the odds are scary. My chances of getting one without a friend in government (or part of a lobbying body) are really slim.

Unfortunately true. I've encountered that problem where I am now and have had to sign so many agreements with legal dept heads from other agencies that I've lost count. My employer (work in NPO sector) has really assumed some really huge risks by having my on board. The approach for me being exposed to certain at-risk data (at my work there are ssn from clients, login credentials to affiliated networks ran by my state) is routinely addressed by sign NDA as a group of lawyers threaten to destroy me if anything should go awry.

The director of the agency where I work has been tremendously instrumental in arguing and supporting me in these instances.

Thank you for your response. After reading many of the other responses it is nice to have this perspective here for other posters to see -- because it is very real to me.

This is essentially what someone like me encounters every time they try. It's a really unfortunate part of my reality and other posters should understand that it's not simply "just a felony" -- not when equally qualified applicants do not have any "issues" like this.

You have a fabulous username.

Penn-testing today is growing into something it wasn't when I was having fun. The community consists of mixed talent and a trend is growing as more ease-of-use [e.g: nessus, metasploit] tools become available to infosec "pros". That emergent trend (SaaS?) disgusts and repels me because it eliminates one of the more captivating and rewarding elements of vulnerability hunting (the delicious, delicious, research experience). Reverse engineers, devs who are able create on-the-fly solutions, and vx community notwithstanding.

Also, as said in a previous post: my experiences with independent private disclosure is most often a futile waste of time - 'thanks' || ignored || threatened with LE.

WRT building an income generating product: I don't have many unique ideas or any marketing experience. I'm currently working with a friend exploring android os internals and platform development. We're going to throw our project into that market and see how it pans out.

I generally only create things I need to try out an idea or get something done. This project strays away from that principle so it will be interesting to see whether or not the venture is fruitful.

I live on the east coast. Most of the startups around here are all looking for "interns" they do not have to pay.

I have actually been encouraged by people to move to that area (and some areas in Texas) but at this point in my life it seems like a really big change to make. When I finish school I would like to explore that option. It is something I have been seriously considering.

Well, to be honest I figured it wouldn't hurt my chances. I've learned more from google and boredom with a heavy dose of frustration than I've ever learned in school.

All of my associates in the field do not have to deal with this issue and maintain the perspective that actual experience is more important than education. I've an incredible obstacle to surmount and it matters to me that I have documented training. It's just one-less-thing standing in the way.

I have tried this approach and it has failed me. The biggest problem with being independent is landing clients who are in need of the service.

I have also tried shotgun approach via private vulnerability disclosure. At best it typically results in nothing more than 'thanks' -- but most frequent is outright ignoring, angry response, bruised egos, threats with law enforcement, and general unpleasantry. -- so I've learned to avoid doing that.

Ahh yes. The good ol' hat problem. I never considered remaining silent about it, but most places around here do CORI background checks with the information on CV so It is hard to avoid. Also, a simple google query of my name pulls up quite a few embarrassing news articles. Imagine the fun it was to explain the situation to your spouses parents after they have googled you.

Thank you for your response. I will give non-disclosure a shot and see how that works. It feels inappropriate deceptive for me to omit those details when asked (via interview question in person, phone, or form) about them.