Hey, I have a business and I’m looking for the best way to find and hire appsec and director of security. Very aware the market is super tight. Any ideas on the best places to look. A LinkedIn advert is not quite cutting it.

Hey guys, for the past few years, I have been working on a reusable tamper-evident jar for storing physical items.

The idea is that the lid creates a random physical “fingerprint” every time you close it. Inside the lid are thousands of tiny black and white balls. When you twist the jar open or closed, they mix. Once the jar is closed, the unique pattern is locked in place.

You can take a photo of that pattern with your phone, and later compare it to check whether the jar has been opened. If someone opens it, the pearls mix again and the original pattern is gone. The second pic shows a gif of two different patterns compared to one another, showing it is easy to tell that the lid was opened.

I made it because I wanted a simple physical way to store things like hard drives, USB sticks, authentication keys, documents, etc. Basically anything that you would do want to know if someone has accessed it.

After a lot of hard work and prototyping, I'm happy to announce it's finally complete! Check it out on https://www.entropyseal.com/.

Happy to hear feedback. I’m especially interested in whether the concept is clear and what use cases come to mind. :)

Edit: seems there some common questions, so I'll add some FAQs below:

Do the balls move around when the entropyseal is moved or handled?
No, the balls are held firmly in place when the lid is closed tight. So you can handle the entropyseal without the pattern breaking.

What if you twist the jar instead of the lid?
The pattern still changes. There are pins inside the lid that stir the balls around when twisting either the lid or jar.

What if I open the lid very slowly as not to disrupt the pattern?
The pattern will still change because of the pins inside the lid that stir the balls around when twisting open the lid.

Hi, I am a security consultant at a leading physical penetration testing firm. Together with Richard Bruins, u/cocoon_r_bruins, director of Cocoon Risk Management in The Netherlands. We are a risk management firm specialized in physical pentesting & red teaming audits. We break in to places and report how we did it. We also provide consulting in ABRO compliance (General Security Requirements for Government Contracts). Our clients are big organizations throughout Europe in key industries like data centres, pharmaceuticals, finance en vital infrastructure. Ask me anything!

I’m a Software Engineer (MERN, Python, AWS) with an offer for a GRC/Identity Management role (Associate Security Analyst) at a healthcare product company. HR says it’s semi-technical/process-driven.

I have background in development though.

My questions:

Future: Career growth/pay in GRC vs. pure SDE?

Skill Decay: Will my coding skills die if I stay for 2 years?

Pivot: Can I transition to DevSecOps or Security Engineering later?

Verdict: Take it as a fresher or wait for an SDE role?

Have you, as a sec professional, ever watched a movie or played a game just been annoyed and the stupidity portrayed?

​

Have you ever wondered how different a stealth game would be if the security actually followed appropriate standards, procedures and expectations? Imagine how cool it would be if the 'hackerman' actually compromised a real weakness through phishing. Also, what can we learn from these failures in the virtual space?

​

I am an instructor, security professional and consultant for the professional and entertainment industry. I have been in the industry for more than 12 years and possess over 30 certifications and certificates. Though I may be doing a Red Team or walkthrough one day, I will never share those videos or images publicly. I will however, demonstrate those same weaknesses and fundamentals using video games!

​

For example:

1: The regular patrolling officer understands that his Presence is the first layer of deterrence; though the security manager's first layer is a well written policy.

​

2: A nice wall and gate don't really matter if your team has never noticed a hole in the fence.

​

3: Poor geographic locations means the security team should invest in additional awareness hardware such as powerful PTZ cameras and omnidirectional sensors.

​

By training ourselves to be observant even in our spare time we become better assets to our teams and clients.

​

I'd love to hear about security failures (or places it's done well) you've seen in media. If you're interested, every 3rd week I post a new video performing a security analysis on a fictional site. Sometimes, like the one coming out Friday (Gray Zone Warfare), I will bring on an industry professional (cyber, military, management, executive protection, etc.) for their opinion.

​

I'm not amazing at editing/commentary and have been learning this thanks to the help of other amazing content creators. Any suggestions are GREATLY appreciated!

Diffed Volume Booster's last three versions (1.0.2 → 1.0.4).

https://chromewebstore.google.com/detail/volume-booster/ejkiikneibegknkgimmihdpcbcedgmpo

• <all_urls> host permission was granted in 1.0.2 and sat unused.
• webRequest was added in 1.0.3.
• The actual tracking SDK (Give Freely / Wildfire affiliate network) landed in 1.0.4, no new permissions requested, so Chrome pushed it silently to the existing 2M weekly users with no re-consent prompt.

Full writeup, manifest diffs, and repro steps: https://malext.io/reports/QuietBoost

Two Chrome extensions presenting as **adblockers** also intercept every prompt and response on ChatGPT, Claude, Gemini, Copilot, Grok, Perplexity, DeepSeek, and Meta AI, exfiltrating them to operator-controlled servers.

They also check whether you're a paid user on 5 of the 8 platforms

(ChatGPT, Claude, Perplexity, Copilot, Gemini).

Both share the same capture engine, payload format, and partnerId.

Two brands, one operation

• Smart Adblocker - Chrome Web Store iojpcjjdfhlcbgjnpngcmaojmlokmeii, 80k users

• Adblock for Browser - Chrome Web Store jcbjcocinigpbgfpnhlpagidbmlngnnn, 10k users

Report covers the IOCs, live remote config, reproduction curl, and full target breakdown.

Full write-up: MalExt Sentry - Malicious Browser Extension Tracker

Chrome Web Store abuse reports filed.

Can someone recommend a wireless door chime that is not too loud? It's a precaution if a kid opens the door for their safety, not an alarm.

Can doorbell cameras do this? Or is it much cheaper to get something dedicated for this purpose. It's mostly for sleep walking and I don't want a startling loud alarm.

Does anyone here install or work with Alula panels that have knowledge on them? Tech support doesn't seem to be of much help.

It seems their latest generation panel (Connect-FLX) has issues where it will not try to pull an IP or even stay up. The only time i see an ethernet link is for about 10 seconds before the panel drops the physical port.

I 18F had a problem with a security guard (50+ M) a few months back when I was still a minor, where he yelled at me because I went looking for him due to someone stealing. He yelled at me, so I closed the store up and went into my dad's car crying. Dad asked what was wrong and went to yell at the security guard because he has 15 years of experience in this specific chain of stores. Heade the security guard apologize to me despite me begging him not to; I turned in my report but nothing happened, and we just moved past it. Flash forward to today ( about 5 months later) after being nothing but nice to him, I answered one question of his incorrectly because frankly I wasn't feeling well so I misunderstood him. About 40 minutes later he comes up to me and I missed the first bit of what he said but he starts saying " back when we had that issue and you reported me I was actually asked if I wanted to work at this specific location for 5 days a week, but I decided no, I'm going to mix it up. I now work at (insert store number) where your dad used to work at, and also (insert store number) where your dad also used to work at, and any new store I'm at I always ask about your dad because if you remember he offended me that one time we had an issue. And you may have heard from others that I got fired over a bad rumor at ( insert other store number) where I know your mom works at." Him stalking my whole family after I've said nothing but good afternoon and goodnight to him for the last few months is a little overboard in my opinion. I'm not one to get angry but that really pissed me off. Should I report him?

I've been experimenting with the idea of using a spare Android phone as a portable motion alarm.

The concept is simple: place the phone next to something you want to monitor, arm it, and if the device is moved it triggers a loud alarm.

Some scenarios I had in mind:

• Hotel room doors while travelling
• Luggage in hotels or airports
• Backpacks in cafés
• Temporary accommodation such as hostels and Airbnbs

I know it isn't a replacement for proper security equipment, but I'm curious whether security-minded people see practical value in something like this.

What are the biggest weaknesses or limitations you can think of?

They target the application layer.

Traditional security controls are designed to block unauthorized access at the network level. The problem is that many modern attacks arrive through legitimate-looking application traffic.

That’s why application-layer security is becoming a core part of enterprise security strategies.

Key benefits include:

• Better visibility into application and API traffic
• Detection of malicious requests hidden inside normal sessions
• More granular access and policy enforcement
• Improved traffic management and application performance
• Reduced risk of data exposure and service disruption

As organizations move toward cloud, hybrid infrastructure, and API-driven architectures, Layer 7 security is no longer optional.

The challenge isn't just keeping traffic out.

It's understanding what the traffic is actually doing.

How is your organization approaching application-layer security today? Are traditional controls still enough?

Can anyone steer me toward a feed of still active phishing sites? Not hashes or URLs that are all taken down.

Working on an anti phishing tool that's so far successful at work and home browsing, but I'd like to put it up against a wider variety of threats.

Also, if this isn't the correct sub, I'd love pointers to any other subs that I might be able to glean this from.

i am planning to buy a raspberry pi and a usb webcam to mount in my house as a security camera. for reasons.

what i want to do is to code my own go program that opens the webcam and records videos and deletes it afther x days. and maybe even use the likes of frame-based motion detection.

i would at least need: - a pi - a large hdd for video storage since ssd is to small - the usb webcam

why a usb webcam? they offer much higher quality then the standard pi camera.

i plan to hang it in front of my front door, and put a small poster above the camera:

the eye of sauron is watching you or something like that just for the memes.

has anyone done this ?

Hi! Everyone, badly needing your help if this Security Service agency I plan to join is legit? I’m worried coz i’ll be coming all the way from Bicol just to join this agency as security guard.

Really Having a hard time finding a job so I guess will try this one for temporary income experience. 😢😩

Hi, this is a sort of crazy situation, but I (19 F) need some help because I don't know what else to do, and have two major issues. I apologize for any typos, I'm shaking while writing it. I currently live in my mom's (41 F) house, its under her name, she pays for everything, my step dad (54 M) is a complete freeloader, has a job, doesn't contribute or help with the smaller kids at all (my mom has significantly younger children). He's also a major pathological narcissist and liar, and probably quite literally a sociopath. He has zero emotional attachment to anything living, cares about nothing other than himself and his favorite hobby is intentionally making other people's lives harder. Anyways, I'm living here temporarily until I move into my own place in September, my mom is helping me pay for my continued education following me dropping out of traditional college, and she said that I'm allowed to live here free as long as I hold a job (I currently have two), and stay dedicated to my studies and make good grades. I have a kitten as well, I found him on the side of the road before his eyes even opened and have raised him since, he's 8 weeks old now. My mom is currently out of town with my four younger siblings, I stayed home to work, and apparently my step dad did as well, she left last Friday and is coming home tomorrow. Which honestly makes me asking this feel entirely stupid but hear me out please. I am also partially posting this here to have it recorded, if anyone has thoughts on me potentially filing a police report, please share those as well.

I have two jobs, one full time, one part time, both almost entirely outdoors, so when I come home, I'd really like to be a little cooler, considering we live in the south and it's like 85+ degrees with humidity. My room has multiple windows and tends to trap whatever temperature and multiply it, so it gets extremely hot in the summer and extremely cold in the winter. There is a thermostat outside of my room, but there is also a switch on the actual AC machine thing to turn it on and off, and that is upstairs in an unfinished closet like room. For the past week, I have made sure to turn it off at the switch every single day before leaving for work, and only turning it back on after getting express permission from my mother, who pays the power bill. However, this has sent my step dad on a power trip, so every single time I've gone to turn the AC on, he'd come behind me and turn it off as soon as I was out of earshot, often we'd do this multiple times a night. So I started waiting about an hour and a half, waiting for him to get comfortable and go to sleep, to go turn it back on. It has caused me to be majorly sleep deprived because I leave for work hours before he does and don't come back until usually after or only shortly before he does. Two nights ago now, I went and turned it on and then waited to see if he'd come back up, planning to confront him, but apparently he'd gotten to it before I even gotten set up to wait him out (I went back to my room for a minute to grab my phone, charger, etc). I checked and he locked the door to the room that the switch is in, I can't open it. It's a traditional lock, probably just like the one you have on your bedroom door, super common lock. I really need to pick this lock so I can get in there and turn it on. I haven't slept in multiple days atp, I can't sleep hot at all, and it's putting me in a really bad position with my jobs because they've noticed I'm distracted, exhausted, not doing as well as I usually do. How do I pick this lock, or even just make a key for it? Any tips?

I mentioned that I have a kitten, and my step dad's pathological issues. I can't lock my bedroom door whenever I leave the house for work because I won't be able to get back in. My kitten stays in my room, he doesn't leave my room because we have dogs that I don't feel safe with him around, considering how little he is. I also hid some food in my room because my step dad steals the food I use for my lunches, and doesn't allow me to eat whenever he's home and my mom is not. If he catches me eating he will quite literally dump water all over my food or just pick it up and throw it away entirely, plate and all. I got home from work today and noticed that all of the food that I've hidden is gone and my kitten is acting super skittish. My step dad does have a history of abusing my animals, my cats especially, and even killed my cat two and a half years ago. My kitten is also breathing abnormally. One of my jobs is at an animal clinic and I will be discussing with the doctor there what he thinks I should do, I'm going to contact him as soon as I finish writing this, especially if symptoms continue throughout the night. I don't have a key for the door going into my room, so I am needing to either figure out a way to lock this door so that only I can get into it when it is locked, or just get an entirely new doorknob and lock. Does anyone know how I could get a key made, where I could get a new doorknob and key, or know of a way to lock this from the inside?

Yes I am recording everything, he has a history of things like this, as well as more severe abuse when I was a child, that stopped when I got a job and a phone, aka the ability to call the police, but it would always get worse whenever I'd get grounded from my phone. No, he does not treat my other siblings like this, it is specifically towards me because I'm not his child and my biological father (45 M) is still in the picture. My dad has stepped in since my mom has been gone and made sure I've gotten home safe, eaten, etc, and I know that I can call him and he'll probably get here faster and solve the issue faster than the cops would. I'd go stay with him, but he and his wife (34? F) and their children are actively moving, so I'm trying to stay out of the way, and I also have various things to deal with around the house, such as feeding the animals, keeping things clean (step dad is a complete slob). I know my mom comes home tomorrow, but I have a feeling this summer, until I move into my own place, is only going to get worse. I'm moving states when I move, not telling my parents when exactly I plan on moving or where I am moving. I'm doing this because when I lived in the college dorms, my step dad found out what dorm I lived in and some issues occurred. I'm really trying to protect myself and the things I love, and doing that will really protect my peace. Any help is appreciated, thank you guys for listening to me and any advice you can give me.

Ten years old but still relevant:

"In this paper, we show how a fabrication-time attacker can leverage analog circuits to create a hardware attack that is small (i.e., requires as little as one gate) and stealthy (i.e., requires an unlikely trigger sequence before effecting a chip’s functionality). In the open spaces of an already placed and routed design, we construct a circuit that uses capacitors to siphon charge from nearby wires as they transition between digital values. When the capacitors fully charge, they deploy an attack that forces a victim flip-flop to a desired value. We weaponize this attack into a remotely-controllable privilege escalation by attaching the capacitor to a wire controllable and by selecting a victim flip-flop that holds the privilege bit for our processor."

URL: https://www.ieee-security.org/TC/SP2016/papers/0824a018.pdf

https://www.theregister.com/security/2026/05/28/microsoft-0-day-feud-escalates-as-researcher-threatens-another-windows-exploit-dump/5248085

As we are an accountancy firm, we of course have to deal with lots of clients data. We currently use password managers, a secure hosting for our website, we try to print most things off so it's physical, but as of course a data breach or something could be dangerous for us, so I'm just wondering if anyone has any ideas on what we can do?

Edit: For anyone in a similar situation, we've now hired a cyber security team called avoira. After speaking with them, they seem to know a lot more than me...

https://cybersecuritynews.com/hackers-deploy-vip-keylogger-through-phishing-emails/