Best products from r/security

We found 26 comments on r/security discussing the most recommended products. We ran sentiment analysis on each of these comments to determine how redditors feel about different products. We found 54 products and ranked them based on the amount of positive reactions they received. Here are the top 20.

Top comments mentioning products on r/security:

u/TacticalTurkeyBacon · 2 pointsr/security

Good news is that you've got the educational creds to have a solid foundation for a future career. Now it's time to build the background or at least skillset to prove that you're dedicated to the field. An internship is helpful but you're going to need a lot more than helpdesk. I'd focus on finding a small consulting firm or getting in with IT at a company but treading carefully to not take on a title that states 'help desk.'

Showing that you have raw talent is the most important. Demonstrating skills such as learning python or spinning up your own secure server in Softlayer, AWS, or another provider is a massive resume booster and it shows you mean business. I'm not saying that you should sink a bunch of cash, but figure out a small server that you can use, secure, and play around with it over a period of a few months. There's a wealth of information you can pull from just 'doing' without having direct work experience.

Help desk can be a trap, so avoid that and go the networking route or sys-admin path by learning Unix. Help desk seldom leads to better roles in that it's catered to keep you trapped in tier 1 - 2 IT hell. Take it from me as someone who learned quickly that it's a dead end if you want to progress your career.

Hope this comment helps. In an attempt to help you find some good resources I'll post a few below.

Start to Python
https://learnpythonthehardway.org/book/

Secure AWS:
https://benchmarks.cisecurity.org/tools2/amazon/CIS_Amazon_Web_Services_Foundations_Benchmark_v1.0.0.pdf

Helped me get my CCNA:
Read up on GNS3 LAB, it's not supported by Cisco so I wont officially endorse, however you can Google and learn about this on your own.

https://www.freeccnaworkbook.com/

http://www.9tut.com/ - study before your test.

KB for general security. There's a lot out there but this is an easy start.
https://www.cybrary.it/

For learning application security, you'll need to know burp. I'd take a look at this link, and then see if you like what you're reading, do the right thing and go buy this from Amazon if you continue down this path.

https://leaksource.files.wordpress.com/2014/08/the-web-application-hackers-handbook.pdf

If you learn BURP or Python, you should own this book:
https://www.amazon.com/Tangled-Web-Securing-Modern-Applications/dp/1593273886

u/phearbot · 2 pointsr/security

I know this is a couple days old now but I've worked for a couple companies as a security analyst, and I feel like a lot of the answers so far are geared toward pen testing, which isn't what the interns at either organization do/did.

There's no question that knowing all the stuff others have suggested will come as a help, but most of our interns needed information more along the lines of the Security+ cert. The Security+ won't make anyone an expert but it contains a whole lot of information that will be used on the day to day. Things like tcp vs udp, common ports, terminology like IDS and IPS. Discussion about host based vs network based protection. I'm not really saying "go get this cert" so much as, "understand the general domains of this cert".

If you want to look into it, this is a pretty decent book, $10 on kindle (more in print) or you can probably find it at a library for free.
http://www.amazon.com/CompTIA-Security-Certified-Ahead-SY0-401/dp/1939136024/ref=sr_1_1?ie=UTF8&qid=1425426900&sr=8-1&keywords=security%2B+book

A tool that I've used every single day at both places is wireshark. You don't need to be a Jedi to use it, but knowing some simple stuff with it really will help.

Like others said, a background in Linux will help. Wget/curl are convenient for analysis.

u/TheGift1973 · 2 pointsr/security

Mastering Bitcoin by Andreas M. Antonopoulos.

It isn't meant for the average Bitcoin enthusiast, but is more aimed at the technically minded/coders/cryptographically minded user. Many security researchers may well (IMO) have to deal with blockchain related security in the future, so having a decent knowledge of how Bitcoin (the tech) and bitcoin (the currency) works can only be advantageous as this field develops. Even if you don't think that your current role in security won't have to deal with this field, I would still advise you read the book as it is a fascinating read. There is also another version called The Internet of Money that is aimed at those who may not be so technically minded, but still have a genuine interest.

u/[deleted] · 2 pointsr/security

It sounds like you need a vpn solution, but i dont think you will be able to accomplish what you seek with software. A cisco asa 5505 would be able to provide remote access (up to 10 users I think) and you can apply access control lists to only allow certain ports (the ones needed for the game)

You can also disable the ability to connect to other vpn clients, so that they can only talk to whatever ip address and port combo you allow them to.

That being said, if you don't trust the computers explicitly then you should never ever ever let them connect to you using any app, protocol, port or orifice. Games are notorious for buffer overflows and all sorts of other tomfoolery that would allow them to own your box.

So, tl;dr yes it can be done but you need a $300 appliance and if you do then get ready for network buttrape.

 

ASA 5505 on Amazon

http://www.amazon.com/Cisco-ASA5505-BUN-K9-ASA-5505/dp/B000O0Z8GC

how to set up remote access vpns on cisco asa

http://www.cisco.com/c/en/us/td/docs/security/asa/asa72/configuration/guide/conf_gd/vpnrmote.html


hostname(config)# interface ethernet0
hostname(config-if)# ip address 10.10.4.200 255.255.0.0
hostname(config-if)# nameif outside
hostname(config)# no shutdown
hostname(config)# isakmp policy 1 authentication pre-share
hostname(config)# isakmp policy 1 encryption 3des
hostname(config)# isakmp policy 1 hash sha
hostname(config)# isakmp policy 1 group 2
hostname(config)# isakmp policy 1 lifetime 43200
hostname(config)# isakmp enable outside
hostname(config)# ip local pool testpool 192.168.0.10-192.168.0.15
hostname(config)# username testuser password 12345678
hostname(config)# crypto ipsec transform-set FirstSet esp-3des esp-md5-hmac
hostname(config)# tunnel-group testgroup type ipsec-ra
hostname(config)# tunnel-group testgroup general-attributes
hostname(config-general)# address-pool testpool
hostname(config)# tunnel-group testgroup ipsec-attributes
hostname(config-ipsec)# pre-shared-key 44kkaol59636jnfx
hostname(config)# crypto dynamic-map dyn1 1 set transform-set FirstSet
hostname(config)# crypto dynamic-map dyn1 1 set reverse-route
hostname(config)# crypto map mymap 1 ipsec-isakmp dynamic dyn1
hostname(config)# crypto map mymap interface outside
hostname(config)# write memory

Here is a doc how to set up a filter for remote access vpns

http://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/99103-pix-asa-vpn-filter.html

permit remote acess hosts to http browse to 192.168.1.0 network (inside)

hostname(config)# access-list vpnfilt-ra permit tcp 192.168.0.0 255.255.255.0 192.168.1.0 255.255.255.0 eq 80<br />


hostname(config)# group-policy DfltGrpPolicy internal
hostname(config-group-policy)# vpn-filter vpnfilt-ra

Thats it
cheers

u/Knerk · 1 pointr/security

DropCam is good but over priced IMO.

Imogen Studio cameras w/ iSecurity+ service work in similar fashion &amp; you can use them without a subscription to check in on video even listen in &amp; talk through the camera, but you can pay monthly to record video. And both can record in HD though Dropcam does seem to have better resolution, not so much more as to make me pay what they ask for it. Also Dropcam wont let you record on your own device, while Imogen cameras can be recorded while on live view to your smartphone

iSecurity + is $9.99 for a month of storage per camera or $99 for a year
http://www.isecurityplus.com/pricing

Dropcam is $29.99 a month of storage per camera or $299 a year
https://www.dropcam.com/cloud-recording

ImogenStudio +Cam Pro on amazon is 59.39 per camera
http://www.amazon.com/ImogenStudio-Wireless-Video-Monitoring-Camera/dp/B00DV84FYA/ref=sr_1_1?ie=UTF8&amp;amp;qid=1416169193&amp;amp;sr=8-1&amp;amp;keywords=imogen+studio


Dropcam Pro $197.85 per camera.
http://www.amazon.com/Dropcam-Wi-Fi-Wireless-Monitoring-Camera/dp/B00F9FCW7K/ref=sr_1_1?ie=UTF8&amp;amp;qid=1416169665&amp;amp;sr=8-1&amp;amp;keywords=dropcam+pro

The way I look at it is DropCam &amp; app is like Apple, good design but you are going to pay for it. With ImogenStudio +Cam Pro like android; not as slick looking but just a functional but better price.

u/JollyGreenDragon · 1 pointr/security

I'm familiar with the Art of War, and definitely appreciate the translation rec.

Can you recommend any other texts that are similarly good as far as situational awareness and strategy/tactics?

Oh, and I found this to be a great read once upon a time - would probably be good to revisit it, myself: The Seven Military Classics of Ancient China

u/massivechicken · 2 pointsr/security

The Phoenix Project (https://www.amazon.com/Phoenix-Project-DevOps-Helping-Business/dp/0988262592)

Whilst it's not primarily about security, it does play a major role in the story.

It's important as a security professional to see where the industry is headed, and how security can adapt.

I found it a great read from a security perspective.

u/admjford · 2 pointsr/security

https://objective-see.com

This is a good start in general. But for a 101 on Mac security &amp; forensics, I very much suggest taking the SANS 518 course (Mac and iOS Forensic Analysis and Incident Response). It’s updated routinely and over all a great course.

The teacher of the course, Sarah Edwards has a site on the subject too. https://www.mac4n6.com

A good book, and one that’s also used in the class: “OS X Incident Response: Scripting and Analysis
1st Edition” https://www.amazon.com/OS-Incident-Response-Scripting-Analysis-ebook/dp/B01FHOHHVS

u/hugotroll · 25 pointsr/security

Ross Andersons Security Engineering. Could be a bit outdated in some places, but overall a tremendous read.

Luckily, its available free in here. There's also a kindle and hardcover versions available here.

u/danny6690 · 5 pointsr/security

I use the Wyze cam V2 from Amazon and I installed a custom firmware on it (very easy setup)

Those cameras are very cheap (26$ USD) and very reliable

Custom firmware
https://github.com/EliasKotlyar/Xiaomi-Dafang-Hacks

Edit: Amazon usa link
https://www.amazon.com/Wyze-Indoor-Wireless-Camera-Vision/dp/B076H3SRXG

Pm if you need help with the custom firmware installation

u/cybereality · 1 pointr/security

So this thread got me interested and I ordered the Mission Darkness bag, which claims EMP protection (as well as wifi, cell, bluetooth, etc.). https://www.amazon.com/gp/product/B01A7MACL2/ It was $23 and is big enough for one smartphone and a key fob and several cards. I tested with the MD Faraday Bag tester app and it seems to be working (I know, testing the bag with an app the bag maker makes, but it's probably the best out there). Bluetooth was getting some odd results, but after a few tries I got 100% blockage for cell, wifi, and bluetooth. See results of test here: https://imgur.com/a/eAp70jM

u/Silevence · 1 pointr/security

you can get things like what I hae linked below if you want to secure your device without manually removing hardware (I used to detach my webcam and mic on every laptop haha)
https://www.amazon.com/gp/product/B07D1BW9P2/ref=ppx_yo_dt_b_asin_title_o00_s00?ie=UTF8&amp;psc=1

u/planetjay · 2 pointsr/security

https://www.amazon.com/Tribe-Hackers-Cybersecurity-Advice-World/dp/1793464189 That was quick!

&amp;#x200B;

Edit: lol already 1 used for sale. (not mine)

u/SecurityDork · 1 pointr/security

I have a bunch of Nest cameras but they are too expensive plus you have to pay a fee for back up recording. For the price I recommend this https://www.amazon.com/Wyze-Indoor-Wireless-Detection-Assistant/dp/B076H3SRXG/ref=sr_1_3?keywords=wyze&amp;qid=1566607235&amp;s=gateway&amp;sr=8-3