sometimesshit

They have some Math people and I wonder why the regime didn't use state of art AI in their attacks.

They surly has the potential but I don't see they are fully using it.

I meant to be hardware drivers like Display drivers.

The OP asked about System Programming not System software.

Driver is an interface and you can write application software on top of it.

> I had a Rust job for around half a year, where people build web servers and came from a C and C++ background

I don't think this is system programming rather network programming.

You should try embedded or try to write drivers

Better yet write a mini OS your own that interface with hardware

Edit: Wow, I'm getting down voted. I guess political correctness

It's on, "https://www.memorysafety.org/docs/memory-safety/"

Lol I don't think any of Ransomware authors uses Zero day to get into system. Most are using maldocs or phone calls.

Disagree with this. You can acquire skills using Google. You can build a curriculum and a path by Googling on a domain you don't know a fuck about. It can give you a head start. I learnt Mathematics in same way. Being able to find Dr Keith Delvin was Godsend.

It's much like Blackbox testing you know.

I disagree with your transparency point. I see that a lot of Layer 2 solutions like Lighting started which basically can make it nontransparent like Monero.

You know what that can be detected as-well. I'm trying to prove my point that it's endless cat and mouse game.

You can of course, but how about these?

(function(){ var a=function(){};a.prototype.toString=navigator.credentials.create.toString.bind(navigator.credentials.create); return new a();})().toString == Function.prototype.toString

yields false where

navigator.credentials.create.toString == Function.prototype.toString

yields true

Yes, I'm. For the record, your code can be detected easily using,

toString.name

Which results "bound toString" wheres real one results "toString"

The author didn't do that in article. You sure can replace toString (which can be detected as-well).

This can be detected easily using

navigator.credentials.create.toString() != "function () { [native code] }"

Another way is to hook the Fetch API and log outgoing urls that are not authenticated by Cloudflare

Welcome to the start of another catch and mouse game.

Homomorphic always felt like a magic to me. it blow me away when I first heard it.

Likewise ancient people thought about a F-16 before ever inventing a one.

> access to cutting edge of tech

Any examples?

I have not seen any cutting edge tech for while.

Ardit,

You need to measure purchasing power using PPP rate, but even still NY and SF known to be expensive areas with high tax rates.

SF engineer could earn 200k year but this money could be much low as 80k in another state if you compare purchasing power.

It's complex. The Americans can always buy a car but never foods. This become a meme in my home country.

There are always trade offs.

I need an article how to get away with just MangoDB

The JS ecosystem always want to start simple tools, but they forget that every simple tool has become complex so reinvent the wheel again.

You see that programs written in C (Simple language) tend to be more complex than one written in C++

When Social Engineers become hackers?

To me, a hacker is someone who exploit a RCE or something like that.

I recall in 90's we had this kids who got access to ton of companies all around the world. They would have conquered the earth along with the FBI.

> A port followed by account recovery within a short period of time should be enough of a red flag to immediately lock the account

What happens if a legitimate customer's phone gets lost and they quickly transfer the number and reset their accounts?

I think they should do a video call verification.

Coinbase has extensive access to mobile provider data. They can see when number ported and what phone the thief uses, but it's really hard to make decisions.

But the banks and crypto exchanges are blocking VOIP numbers like Google's

To the OP,

Please don't use cheap providers like Boost. I have done audit and I found Sprint to be superior; however, they got merged with T-Mobile now. Sprint was the best provider that prevented most hijacks.