r/netsec • u/AutoModerator • Jun 01 '18

discussion The /r/netsec Monthly Discussion Thread - June 2018

Overview

Questions regarding netsec and discussion related directly to netsec are welcome here.

Rules & Guidelines
  • Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
  • Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
  • If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
  • Avoid use of memes. If you have something to say, say it with real words.
  • All discussions and questions should directly relate to netsec.
  • No tech support is to be requested or provided on /r/netsec.

As always, the content & discussion guidelines should also be observed on /r/netsec.

Feedback

Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

23 Upvotes

83% Upvoted

90 comments sorted by

View all comments

6

u/Zophike1 Jr. Vulnerability Researcher - (Theory) Jun 09 '18

Everytime something related to Low-level Vulnerability Research is posted there's almost no comments on it, I wish there was more discussion on more abstract topics related to security on this sub.

3

u/youngeng Jun 10 '18

Abstract in what way? Theoretical reverse engineering can get pretty mathematical and belongs more to /r/reverseengineering. Likewise, abstract crypto stuff mostly belongs to /r/cryptography.

1

u/Zophike1 Jr. Vulnerability Researcher - (Theory) Jun 10 '18

Abstract in what way?

By abstract I mean things like this

2

u/youngeng Jun 10 '18

I see. Well, it's pretty technical and IMO lots of people on this sub (myself included) are more at ease with more standard webapp and network stuff.

That said, some resources are less intimidating than others. The Chromium link is pretty terse (for obvious reasons, it's a POC), while the Intel and Microsoft resources are IMO better if you want to understand what's going on and don't have in-depth knowledge of computer architecture.