The hottest Networking Substack posts right now

And their main takeaways
Category
Top Technology Topics

Looking to get hired this semester? Follow the

Austin's Analects • 0 implied HN points • 01 Aug 20
💼 Business Networking
  1. Perfect your resume by tailoring it to the job, formatting it properly, and writing concise bullets with powerful action verbs.
  2. Attend career fairs to network with employers, perfect your elevator pitch, and prioritize companies you're interested in connecting with.
  3. Leverage your existing network and expand it through platforms like LinkedIn to maximize your job search opportunities.

How to get an internship as a sophmore

Austin's Analects • 0 implied HN points • 28 Jul 20
🚌 Education Networking
  1. Networking is key: Utilize your existing connections and expand your network to increase your chances of landing a sophomore internship.
  2. Talk to your adviser: Start by seeking advice from your academic adviser for guidance on career fairs, information sessions, and potential opportunities.
  3. Persistence pays off: Don't get discouraged by the lack of internship postings for sophomores. Keep reaching out, attending events, and building relationships to make things happen.

How to get an interview with any company you want

Austin's Analects • 0 implied HN points • 28 Jul 20
💼 Business Networking
  1. Emphasize the importance of networking in securing interviews. Having a strong network increases your chances more than just having a good resume or grades.
  2. Communication plays a crucial role throughout the process. Keep in touch with your contacts consistently, updating them on your progress and thanking them for their support.
  3. Identify your dream company and build a strategy around connecting with employees and recruiters to increase your chances of landing an interview.

How to get an interview with a BBM firm if you are from a non-target school.

Austin's Analects • 0 implied HN points • 08 Nov 18
💼 Business Networking
  1. Networking and relationships are crucial for landing interviews at top firms like BCG, Bain, and McKinsey, especially if you're from a non-target school.
  2. Having strong connections can help you secure first-round interviews, even if you lack the typical credentials these firms look for.
  3. Send thank you emails after networking connections, keep in touch, and strive to stand out since non-target school candidates are not part of the typical applicant pool.
Get a weekly roundup of the best Substack posts, by hacker news affinity:

Today’s Top 5 HN posts

Top 5 HN Posts of the day • 0 implied HN points • 16 May 24
🕹 Technology Networking
  1. Venture capitalists may not always act as your friends in the business world.
  2. New exponent functions are being developed to make SiLU and SoftMax 2x faster without compromising accuracy.
  3. Local governments in Utah are bringing 10 Gbps fiber internet to residents at affordable rates.

Linux Kernel Flaw, VPN Zero Day, Router, 911 S5, Google leak, Snowflake compromised, Ticketmaster breach.

Secure GenAI • 0 implied HN points • 02 Jun 24
🕹 Technology Networking
  1. CISA alerted federal agencies to patch a Linux Kernel flaw by June 20, 2024, to prevent local attackers from gaining privileges and executing code.
  2. A zero-day vulnerability in Check Point VPNs allows remote attackers to steal sensitive credentials starting around April 30, and the flaw is described as 'extremely easy' to exploit.
  3. Snowflake account hacks led to breaches at Santander and Ticketmaster, with hackers using a compromised Snowflake employee's account to access data, urging customers to enable multi-factor authentication for account security.

The robots of IROS 2023

Robots & Startups • 0 implied HN points • 10 Oct 23
🕹 Technology Networking
  1. The International Conference on Intelligent Robots and Systems (IROS) showcases cutting-edge research in robotics and the latest trends in commercialization, offering insights into upcoming advancements and opportunities to network with top roboticists.
  2. Highlights at IROS 2023 included the presence of various robotics providers like Foxglove, Hello Robot, Anyware Robotics, and Tangram Vision, along with discussions on ROS 2 and the upcoming ROSCon 23.
  3. The conference featured a diverse range of robots, from rolling to legged ones, including unique designs like the Diablo from Direct Drive Tech and distinctive structures from companies like Sol Robotics, providing a glimpse into the future of robotics technology.

Reminder: Tìm việc ở Thung lũng Silicon

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 29 Aug 20
💼 Business Networking
  1. An event is happening today focusing on job opportunities in Silicon Valley, with diverse guests including engineers, managers, researchers, from big companies to startups.
  2. The event will cover topics like career preparation, interviews, salary negotiations, and the experience of living in Silicon Valley.
  3. Organizers and guests include professionals from top tech companies like Tesla, Google, Salesforce, Pinterest, and NASA, offering valuable insights and opportunities.

Trivial birthday attacks against HMAC

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 06 Apr 16
🕹 Technology Networking
  1. HMAC is vulnerable to birthday attacks, which can lead to forged signatures with lower cost.
  2. The second attack, duplicate signature attack, is security-relevant as it can produce two messages with the same tag, exploiting a server's validation system.
  3. Birthday attacks on HMAC can often be parallelized, and using HMAC-SHA256 is recommended for increased security.

Asiacrypt 2016 lần đầu tiên được tổ chức ở Hà Nội

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 16 Mar 16
🚌 Education Networking
  1. Asiacrypt 2016 was held in Hanoi for the first time with classes being offered before the main event, focusing on cryptography foundations and trends, with renowned experts teaching.
  2. The organizers are seeking sponsors for the event, offering opportunities for companies to support Asiacrypt 2016 and gain visibility among industry leaders in the field of cryptography.
  3. The participation of top cryptography experts at Asiacrypt 2016 presents a great chance for networking, gaining exposure, and forming connections with leading global specialists.

Đánh nhau bằng toán

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 28 Dec 15
🕹 Technology Networking
  1. Juniper, RSA, and other companies were found to use the Dual EC algorithm which had a backdoor installed by the NSA, compromising security.
  2. Using closed-source security products without thorough scrutiny can lead to vulnerabilities in the system, highlighting the importance of investing in in-house expertise for secure solutions.
  3. Generating truly random numbers for encryption is a complex task, and backdoors in algorithms can pose serious security risks, emphasizing the need for caution in technology choices.

TetCon 2016 news

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 15 Dec 15
🕹 Technology Networking
  1. The TetCon 2016 conference program is almost ready, with talks on building security tools and advancing security research in the community.
  2. Organizers are looking for sponsors to host a lunch party for attendees to promote networking and interaction between speakers and participants.
  3. Discounted tickets for TetCon 2016 are selling out quickly, so it's advisable to grab one soon to save money before prices go up.

Bad Life Advice: Never Give Up - Replay Attacks Against HTTPS

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 08 Dec 15
🕹 Technology Networking
  1. Self-help advice of 'Never Give Up' can sometimes lead to vulnerabilities like replay attacks against HTTPS.
  2. Browsers like Chrome automatically retry failed requests, creating an opportunity for attacks by duplicating and replaying HTTPS traffic.
  3. TLS may protect against replay attacks, but there can still be mismatches between what it promises and what is actually deployed, requiring additional server defenses.

Why not validate Curve25519 public keys could be harmful

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 12 Sep 15
🕹 Technology Networking
  1. Curve25519 public keys should be validated to prevent potential vulnerabilities in protocols that require contributory behavior.
  2. Protocols like TLS <= 1.2 may be vulnerable to attacks if Curve25519 public keys are not validated.
  3. An important solution is to check the shared value and raise exceptions if it is zero when working with Curve25519 public keys.

Cập nhật TetCon Saigon 2015: Hai bài đầu tiên

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 15 Dec 14
🕹 Technology Networking
  1. TetCon Saigon 2015 aims to provide attendees with practical experiences and the latest research insights
  2. One talk at TetCon Saigon 2015 will discuss the Rosetta Flash attack technique that found vulnerabilities in major websites
  3. Another talk will highlight the importance of correctly implementing TLS, showing that spending more money does not always equate to better security measures

TetCon Saigon 2015

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 02 Dec 14
🏝 Travel Networking
  1. TetCon Saigon 2015 will focus on creating connections between attendees, speakers, and organizers by having shorter talks, longer tea breaks, and more time for Q&A and roundtable discussions.
  2. The conference will still be primarily in Vietnamese, but English presentations will be simultaneously translated to and from Vietnamese.
  3. There will be training sessions on software reverse engineering and Windows by Bruce Dang and Nguyễn Phố Sơn, with more details to be released on the conference website soon.

Thông tin liên lạc

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 12 Feb 14
🕹 Technology Networking
  1. The author primarily uses email and Google Talk for communication and avoids other software and services for contact.
  2. It's mentioned that there are fake Facebook accounts created using the author's identity, emphasizing the importance of verifying identities online.
  3. The author has accounts on Google Plus and LinkedIn for work purposes but does not actively engage in social media, preferring email and Google Talk for communication.

How to recover RSA private key in a coredump of ssh-agent - Sapheads HackJam 2009 Challenge 6

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 24 Sep 09
🕹 Technology Networking
  1. Sapheads HackJam 2009 Challenge 6 involved recovering an RSA private key from a coredump of ssh-agent, showcasing real-world scenarios in CTFs
  2. The coredump contained data structures like RSA and BIGNUM that could be extracted to retrieve the private key for SSH access
  3. Understanding ASN.1 and using tools like pyasn1 were recommended for generating RSA private keys from parameters like n, d, e, p, and q

BKIS đã làm điều đó như thế nào?

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 20 Jul 09
🕹 Technology Networking
  1. BKIS helped track down the culprits of a DDoS attack on US and South Korean websites, showcasing their technical prowess.
  2. The investigation involved identifying intermediary servers, infiltrating some of them, and ultimately discovering the original server controlling the attack.
  3. Despite BKIS's efforts and findings, the actual perpetrators behind the DDoS attack remain unidentified, highlighting the complexities of cybercrime investigations.

không phải cứ có lỗi là vá

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 26 Jul 08
🕹 Technology Networking
  1. Having a bug doesn't always mean it needs to be fixed immediately; prioritizing user needs over patching every issue is crucial.
  2. In cybersecurity, understanding the core business objectives is key; security measures should align with business goals rather than just technical solutions.
  3. Addressing security vulnerabilities should be done strategically; rushing to patch every flaw without assessing the impact or necessity can lead to more harm than good.

detecting snake oil

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 31 Mar 08
🕹 Technology Networking
  1. Security-clueless companies often focus too much on fancy network devices like firewalls and IDS without considering the human element, a key weak point in security.
  2. Be cautious of companies that claim their products or solutions are 'secure' without specifying what threats they protect against or how they handle unexpected disasters.
  3. Companies that overlook scalability, high-availability, and the importance of cryptography in their security solutions may not fully understand the comprehensive nature of security.

Port scanning in ActionScript 3.0 without DNS rebinding

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 08 Aug 07
🕹 Technology Networking
  1. In ActionScript 3.0, port scanning can be done without DNS rebinding by utilizing the SecurityErrorEvent.
  2. The SecurityErrorEvent in AS3 is thrown immediately when Flash Player tries to connect to a closed TCP port, allowing for potential identification of open ports within 2 seconds.
  3. Each probed port in ActionScript 3.0 uses a new Flash player instance to handle connections, sending only one policy-file request per player per host per port.

DNS Rebinding Attacks

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 08 Aug 07
🕹 Technology Networking
  1. DNS Rebinding Attacks can subvert the same-origin policy and turn browsers into open network proxies.
  2. These attacks have the potential to bypass firewalls and gain access to internal documents and services.
  3. It takes less than $100 to temporarily hijack 100,000 IP addresses for purposes like sending spam and defrauding pay-per-click advertisers.

Tấn công DDoS bằng PDF Spam

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 26 Jul 07
🕹 Technology Networking
  1. A client's server faced a DDoS attack through PDF spam, causing FPT Telecom's firewall to freeze due to high traffic.
  2. Investigating the server's services and analyzing log files helped determine the source of the attack - in this case, excessive traffic on SMTP and DNS ports.
  3. Disabling specific troublesome domains temporarily and monitoring traffic helped mitigate the DDoS attack effectively.

Dùng iptables NAT thay thế cho reverse proxy

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 17 Jul 07
🕹 Technology Networking
  1. Consider using iptables NAT as a replacement for reverse proxy to simplify setup and avoid potential issues with complex software like Squid.
  2. Iptables commands like DNAT and SNAT can efficiently redirect traffic between servers based on IP addresses and ports.
  3. Understanding the flow of packets in iptables NAT can help troubleshoot and reroute traffic effectively in case of similar network issues.

Một phương pháp chống DDoS bằng xFlash

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 17 Jul 07
🕹 Technology Networking
  1. The way browsers handle HTML forms with enctype="multipart/form-data" and enctype="application/x-www-form-urlencoded" is different. This difference is key to detecting POST requests from Flash, which cannot send requests in the "multipart/form-data" format.
  2. By automatically setting all HTML forms to enctype="multipart/form-data" through a reverse proxy with an Apache output filter module, one can detect and protect against DDoS attacks from Flash.
  3. While this method can limit the impact of existing xFlash attacks, it may not be a permanent solution. Avoiding Flash altogether or focusing on overall DDoS defense strategies like infrastructure investment and system optimization is crucial.

ADSL DoS

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 17 Jul 07
🕹 Technology Networking
  1. You can launch a DoS attack on someone using ADSL if you know their MAC address and exploit weakness in the PPPoE protocol.
  2. The vulnerability lies in how PPPoE uses the SESSION_ID and MAC address for connection control, making it possible to disrupt someone's PPPoE connection.
  3. Social engineering can be an effective way to obtain the victim's MAC address for carrying out such attacks, highlighting the importance of safeguarding sensitive information.

Hội hay là thảo?

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 17 Jul 07
🕹 Technology Networking
  1. Attending security conferences can provide valuable insights and networking opportunities.
  2. Understanding security concepts like the perimeter of a system and directory harvest attacks is crucial in the field.
  3. Organizing small, focused, and serious security conferences can help local communities connect with the global cybersecurity landscape.

Vàng hay bạc nhái

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 17 Jul 07
🕹 Technology Networking
  1. Many IT solution providers are often just resellers of existing solutions from renowned companies, lacking in innovation and technical depth.
  2. A strong first impression is crucial in professional presentations, including being punctual and confident in communication.
  3. When assessing a cybersecurity company, it's important to look beyond certifications and explore their actual research and development, as well as tangible contributions to the field.

Seminar giới thiệu nhóm nghiên cứu Kernel ĐH Bách Khoa

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 22 Mar 07
🕹 Technology Networking
  1. Seminar introducing OS Group and Linux kernel research aims to attract students to participate and learn.
  2. The seminar covers topics like Linux kernel architecture, filesystems, processes, security, and building a Linux distro in just 10 minutes.
  3. The event promotes open participation and aims to bring open-source knowledge closer to students.

Tổng kết nho nhỏ

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 16 Jan 07
🕹 Technology Networking
  1. The blog has been running for over 2 months with around 200-300 daily visitors and 800-1000 pageviews.
  2. Future plans for the blog include consistent quality writing, introducing open-source software projects, and collaborating with other writers.
  3. There are plans for small meetups for bloggers and readers, potentially on a weekly basis.

Nếu tôi là Huyremy

Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 12 Nov 06
🕹 Technology Networking
  1. Prioritize encryption to protect your privacy and ensure security. Make use of tools like Tor to anonymize internet traffic and defend against network surveillance.
  2. Securely deleting data is critical. Traditional methods like formatting a hard drive or overwriting data may not be effective. Consider encryption to ensure data destruction without physically tampering with drives.
  3. Implement a layered approach to security, including encryption of various files and using different passwords for different websites. Be cautious and understand that true safety comes from avoiding illegal activities.

Setting Up Google Cloud Composer in a Shared VPC Network

realkinetic • 0 implied HN points • 15 Jan 24
🕹 Technology Networking
  1. Plenty of resources are available for setting up a Cloud Composer environment in a single GCP project, but integrating it into a professional enterprise environment with a Shared VPC network can pose challenges with communication and permissions.
  2. Setting up two GCP projects, a service project, and a host project is essential. Understanding how to create and configure a Shared VPC network and subnet for the Cloud Composer environment is crucial for data and infrastructure engineers.
  3. Permissions preparation is key, including roles like Compute Shared VPC Admin and Project IAM Admin, and setting up the necessary permissions for Google APIs service accounts, GKE service accounts, and Composer Agent Service Accounts at both project and subnet levels.

Three best practice approaches to authentication

realkinetic • 0 implied HN points • 13 Dec 22
🕹 Technology Networking
  1. Service-level authentication puts the responsibility of authentication on individual services, allowing better control over which endpoints are authenticated and which aren't.
  2. API-gateway authentication centralizes authentication at a gateway, simplifying downstream services' implementation but requires careful configuration to prevent vulnerabilities.
  3. Service-mesh authentication uses sidecar proxies to provide authentication, set up transparently for services, enhancing security but adding complexity and performance overhead.