/r/netsec's Q1 2018 Information Security Hiring Thread Security News & Discussion

/r/netsec's Q1 2018 Information Security Hiring Thread
Stealing passwords via Meltdown vulnerability in real-time.
Meltdown and Spectre (CPU bugs)
Xerox Alto zero-day: cracking disk password protection on a 45 year old system
SSL certificate revocation and how it is broken in practice: CRL, OCSP, OCSP stapling, must-staple, browser support
PAST (Platform-Agnostic Security Tokens), a more secure alternative to JWT (JSON Web Tokens)
Same hardcoded backdoor in both WDMyCloud and D-Link ShareCenter devices
CVE-2017-17867: Remote Code Execution vulnerability in Inteno's Iopsys

/r/netsec's Q1 2018 Information Security Hiring Thread

Posted: 03 Jan 2018 03:06 PM PST

Overview

If you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company.

We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education.

Please reserve top level comments for those posting open positions.

Rules & Guidelines

Include the company name in the post. If you want to be topsykret, go recruit elsewhere.
Include the geographic location of the position along with the availability of relocation assistance.
If you are a third party recruiter, you must disclose this in your posting.
Please be thorough and upfront with the position details.
Use of non-hr'd (realistic) requirements is encouraged.
While it's fine to link to the position on your companies website, provide the important details in the comment.
Mention if applicants should apply officially through HR, or directly through you.
Please clearly list citizenship, visa, and security clearance requirements.

You can see an example of acceptable posts by perusing past hiring threads.

Feedback

Feedback and suggestions are welcome, but please don't hijack this thread (use moderator mail instead.)

submitted by /u/ranok
[link] [comments]

Stealing passwords via Meltdown vulnerability in real-time.

Posted: 04 Jan 2018 03:44 AM PST

submitted by /u/digital_desert
[link] [comments]

Meltdown and Spectre (CPU bugs)

Posted: 03 Jan 2018 02:25 PM PST

submitted by /u/ranok
[link] [comments]

Xerox Alto zero-day: cracking disk password protection on a 45 year old system

Posted: 04 Jan 2018 12:14 PM PST