#Sail 77 to 135.7 yesterday. This one has a long long way to go in the coming years.

@caniravkaria

Singing the Blues:
Taking Down an Insider Threat

"I had all of the advantages. I was already inside the network. No one suspected me. But they found my hack, kicked me off the network...

...and physically hunted me down."

Many pentests start from the outside, wanting to see how the perimeter might be breached.

This pentest started from the inside. My client wanted to assume they had already been breached, and, if breached, how far could an attacker go.

Could they stop me once I was inside?

So they snuck me in. Disguised me as a new employee. Gave me a work computer, an ID badge, an account in their system... hell, I even had a cubicle w/my assumed name on it.

The only person who knew who I really was was their CISO. Everyone else thought I was Jeremy in Marketing.

During most of the first morning, I completed onboarding, made introductions, and completed menial tasks.

But I had to act quick. I only had a week onsite. I had to hack their network while not raising suspicion.

So I set about it.

You have to understand... most "Internal Pentests" are straight forward. The hard part is breaching the network, but once you're inside, it's a target rich environment. End of Life computers, default passwords, everyone a Local Administrator...

Lately there have been various rumours in the media about myself and Jumbo in relation to Williams. To clarify things, Jumbo is not and will not invest any money in my career. 1/2

Of course we’re collectively looking at career opportunities, however this is certainly not our philosophy and strategy. I hope to announce my future plans soon, be patient 😉 2/2

Hey, for people interested in this stuff, here's a thread about a change we made to running our facebook account:

So, about 5 years ago, we got on facebook. Why? Well, facebook has a big audience and they like to consume on facebook. So, we started posting comics there, even though we got paid nothing and facebook made money off the free content.

Why? Because back then, once in a while, you would say "also hey, I sell books" or "hey, I'm going to be signing at this event" and your facebook followers would actually see it.

Effectively, the implicit old arrangement was "facebook lets me reach readers efficiently, and I supply facebook with free content they run ads on."

Over time, like a bad business partner, facebook basically made it impossible to reach your audience without *paying them*. Thus, you supply them free content on which they run ads, and you get nothing in exchange.

Time for a Thread🧵On yesterday’s “F&O Pe Charcha - Diary Of An Option Seller” with @Mitesh_Engr by @Paytm Money

Why Gain/loss ratio is important that the batting average
• More than the Win Loss ratio check the total Gain /loss ratio
• If your avg loss is 1% and avg gain is +5% then even if you are losing in 7 positions and winning in 3 out of 10 still you will be net profitable

Treat Trading as a business:
• Stick to a single strategy. Eg: A restaurateur usually wouldn’t be changing his recipe on a daily basis
• Mitesh Sir only works on BO or BD strategy, as he is a versatile trader

• Any trader should atleast experience 3 scenarios i.e. bull, bear & consolidation
• Target 4% per month i.e. 48% p.a.
• Option buying requires skill, everyday there wont be huge momentum, so buying options won’t yield good results, but high chances of falling into a bad habit

Stock Selection:
• In F&O segment there are ~150 stocks
• Not everyday all stocks will move
• Only 5-7 stocks move upside or downside
• Focus only these momentum stocks
• Check which one is moving
• Range BO/BD never disappoints. BO/BD from a rectangle (consolidation)