The best Privacy & Online Safety books: Reddit reviews

From 3.5 billion Reddit comments

Actually, start with some programming, then move on to "The Art of Exploitation" it's the best book on "hacking" I've ever used...

Come on man at least credit the author Justin Seitz and give him a chance to sell his works: Black Hat Python: Python Programming for Hackers and Pentesters https://www.amazon.com/dp/1593275900/ref=cm_sw_r_cp_api_WNwIAbYTWGWZH

Edit: seitz not Switzerland

Swiggy is wise. Listen to Swiggy.

Also check out the book, “How to Disappear.” Don’t keep it at home. Keep it at a friend’s house.

https://www.amazon.com/How-Disappear-Digital-Footprint-Without/dp/1599219778/ref=mp_s_a_1_2?ie=UTF8&qid=1540691872&sr=8-2&pi=AC_SX236_SY340_QL65&keywords=how+to+disappear&dpPl=1&dpID=51f4Ko3VWyL&ref=plSrch

has anyone else thought of maybe buying a one-way to ticket somewhere and maybe start anew and maybe only tell 1 or 2 people about it?

i think i've been so obsessed with the idea of disappearing that i even ordered this book from my bookstore

1. Code Academy has some free resources for getting started: https://www.codecademy.com/learn/learn-the-command-line Overthewire is also usually recommended. Also, just start using Linux and google solutions as things come up that you don't know how to do. Regarding pentesting methods - There's a lot of resources out there, check the sidebar, but this book lays out the standard methods used: https://www.amazon.com/Penetration-Testing-Hands-Introduction-Hacking/dp/1593275641 (you can probably find it cheaper with a no starch press discount code)
2. WSL and python (or just python, but might as well get used to linux at the same time). Also, bash and powershell scripting.
3. Yes, the book above isn't free, so like I said, sidebar and such. Ask for it for your birthday, do odd jobs, etc. You don't have to make things expensive, but you're eventually going to have to spend a little bit here and there.
4. Anything. Kali is kind of the standard, which is basically Ubuntu Gnome (actually Debian based) with all the tools installed. Windows is good for some tools though, and just to learn the environment since Windows environments are typically the target.

Also, second what /u/BigDaddyXXL said.

Practical Malware Analysis by Andrew Honig and Mike Sikorski:

https://www.amazon.com/Practical-Malware-Analysis-Hands-Dissecting/dp/1593272901/ref=mp_s_a_1_1?dchild=1&keywords=practical+malware+analysis&qid=1603912687&sprefix=practical+malwa&sr=8-1

I’m a proud owner of a signed copy by Andrew 😁

Hacking the art of exploitation (Amazon) (No Starch) is good for learning the foundation stuff. Its getting a bit old but the foundations are still the same there are just more defenses for some of the techniques now

this book taught me a bit about it. It was interesting to say the least. It gives examples of exploits, like how pointers can totally ruin someone's day.

Warning, it'll make you peek at some assembly. You don't really need to understand it fully to get the jist tho.

Computerphile also has some good videos on this topic, and how people "attack". It may give you an idea.

I don't know a lot, but this is how I learned about it to some degree until I swapped to a different education path.

Get your hands on a copy of the The Web Application Hacker's Handbook, Chapter 21. Step by step breakdown so you don't forget anything.

If you’re afraid for your life and well being, then you need to call the police and file a report.

If you want to get out of what you’re experiencing you maybe need to follow extreme privacy guidelines and disconnect completely and look at alternative locations to live.

If you’re interested there is a good book by Michael Bazzell from inteltechniques.com called Extreme Privacy, what it takes to disappear in America which will give you a bunch of helpful tips and guidance to get you to safety.

All he needs to run to another country is a plane ticket and this book from Amazon. It's easy really.

For books, this one is older, super basic and you can get the tools required if you email the author:

https://www.amazon.com/Penetration-Testing-Hands-Introduction-Hacking/dp/1593275641

But if you don't understand how the internet works on a fundamental level....not sure if pen testing should be where you start.

I have this one Learn Ethical Hacking From Scratch.

I think its not bad but course content is a little bit poor and hacking methods old.

If you want to start hacking

Hacking Art Of Explotiation

The Hacker Playbook

this books very good. Also u dont have money you can also find it on Google..

​

So the short answer is yes. I bought a book that explained how to do it, or just in general removing your digital footprint for a less visible life. I’d strongly recommend it. The first instruction in the book is to buy it with cash, so no one can trace your interest in disappearing. Bad news, it is a lot of work. Like a lot a lot of work. Probably more work than sorting out whatever you got going on, or just cutting contact with people and making a fresh start, but not totally undoable. Changing your name, cutting contact, and just moving away might be enough for what you need with less labor, but would be a far cry from disappearing altogether.

In terms of efficiently using your copious free time, there are better resources that are specifically tailored to cybersecurity as a software engineering practice. For example, if your day job is working on backends for web applications, this is a great book that I keep on my bookshelf: https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470

security+ won't hurt, but it's not focused on how to write secure backend code, it's focused on how to secure a company's IT systems. If you were on an infrastructure or dev ops team as opposed to backend, it might be more relevant.

Avoiding these companies is reasonable, however there’s so much you have to do to avoid them and countless other providers looking to map you to some revenue stream.

Here, Extreme Privacy: What It Takes to... https://www.amazon.com/dp/B094LDWKGZ?ref=ppx_pop_mob_ap_share

Nearly two inches thick, that book will have your head spinning when you see how much setup it takes to establish some semblance of privacy in today’s digital world.

If you want to disappear from social media etc. and sort out spam and fake friend requests you need to do a little bit more than just deleting your accounts.

I‘m reading “Extreme Privacy”. There are some great tips on how to go invisible, maybe like Banksy ;)

https://www.amazon.com/Extreme-Privacy-What-Takes-Disappear/dp/B0898YGR58

Give it a try and be prepared to have a chilled life after MOASS.

https://www.amazon.co.uk/Practical-Malware-Analysis-Hands-Dissecting/dp/1593272901/

The above is the best book written on the subject.

I know it's fairly old but it's still the definitive work in malwar analysis and is used as the standard book in cyber forensics university modules. There is no better place to start.

I'm learning web hacking you don't need to know how to make a website to do web hacking (though it recommend). You do need some fundamental like the basics of networking, html and how a website works. I learned (still learning)through reading books, and ctf. I recommend reading the web application hackers handbook. https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470/ref=mp_s_a_1_1?dchild=1&keywords=the+web+application+hacker%27s+handbook&qid=1617744793&sprefix=the+web+application&sr=8-1

And read about Owasp top 10 vulnerability in web application

Also hackerone a bug bounty platform has ctfs about web hacking that can teach you the basic. There other sites like hackthissite,hackthebox,and tryhackme that provide web ctf to practice web hacking

I'd reccommend to read this:

https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470

Pdf available online.

It's not meant for QAs directly but I think that it's very important skill to understand how things work and to be able to find the root cause of bugs.

Link for anyone searching it up https://www.amazon.ca/gp/product/B0898YGR58/ref=dbs_a_def_rwt_hsch_vapi_taft_p1_i2

The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws https://www.amazon.com/dp/1118026470/ref=cm_sw_r_cp_api_i_zPGMFbG4F69BB

Try this book for OSWE. I wouldn’t call it a prerequisite but the more skills you have going in the easier it is. If you developed a good workflow, methodology, and try harder attitude you’ll be fine.

The closest modern guide for this I’ve seen is Michael Bazzell’s work:

Extreme Privacy: What It Takes to Disappear in America https://www.amazon.com/dp/1093757620/ref=cm_sw_r_cp_api_i_DiAsFbPRF15YM

He also has a few other books/blogs on privacy; Can’t recommend them enough to enthusiasts.

It's print only. And on Amazon: https://www.amazon.com/Extreme-Privacy-Takes-Disappear-America/dp/1093757620

If you don't want to ship it directly to your home under your name, you might be able to buy Amazon giftcards in store with cash, redeem them with a new burner Amazon account using a separate email address (https://abine.com/blur), buy it, and have it shipped to an Amazon Locker. Once it arrives at the locker, find the code for the locker, enter it at the terminal, and it should open automatically.

Hacking: The Art of Exploitation

"This book will teach you how to:

– Program computers using C, assembly language, and shell scripts – Corrupt system memory to run arbitrary code using buffer overflows and format strings

– Inspect processor registers and system memory with a debugger to gain a real understanding of what is happening

– Outsmart common security measures like nonexecutable stacks and intrusion detection systems"

etc., etc.

Dunnow if it's exactly what are you looking for, but sounds similar.

Maybe Reversing: Secrets of Reverse Engineering too

A+ is only good if you want to stay at the customer service or help desk level.

Sec+ on the other hand is basically required for Cyber. Not sure where you've been applying, but if you want to get into Cybersecurity in DoD, Sec+ is required. DoD will also nearly always require a security clearance, which is hard to get your foot in the door.

I feel like commercial (non-DoD) cyber will probably want something like Sec+ as a baseline to indicate you at least know something about Cybersecurity. Certified Ethical Hacker is another cert that is kinda meh but seems prized by recruiters and hiring managers. Your coworkers will know it doesn't mean you know jack shit, but it can help you get hired.

I dunno man, tryna get hired in Cyber without Sec+ seems like a huge waste of time, DoD or no.

This is the study guide you need if you want to give Sec+ a crack. Good luck with your career, I hope you find what you're looking for! :D

Just read this book How to Disappear: Erase your digital footprint, leave false trails, vanish without a trace. I'm sure you can find it on z-lib or something

Hacking the art of exploitation (Amazon) (No Starch) is good for learning the foundation stuff. Its getting a bit old but the foundations are still the same there are just more defenses for some of the techniques now.

Google stuff until you can understand the whole book.

Hacking the art of exploitation (Amazon) (No Starch) is good for learning the foundation stuff. Its getting a bit old but the foundations are still the same there are just more defenses for some of the techniques now

Google stuff until you can understand the whole book.

You need to talk to Michael Bazzel, he has a book and a business helping people protect their privacy.

Here's a link to his book:

Extreme Privacy: What it takes to disappear in America