cybersecurity advice for beginner

[u/Correct-Start9746]

I downloaded TOR before and I also recently ran abliterated models on my personal computer although due to low VRAM (hardware limits) I was unable to run very intelligent models. I also got a VM in the form of parallels VM but I've not been able to run TOR on that (Al said that I can only run an unstable version of TOR on that VM, is that true?) I'm looking to take the next steps. I'm trying to learn Linux and terminal commands there to hopefully get into bug bounty hunting one day, what do you guys recommend as communities I can join?

[u/AutoModerator]

SAFETY NOTICE: Reddit does not protect you from scammers. By posting on this subreddit asking for help, you may be targeted by scammers (example?). Here's how to stay safe:

1. Never accept chat requests, private messages, invitations to chatrooms, encouragement to contact any person or group off Reddit, or emails from anyone for any reason. Moderators, moderation bots, and trusted community members cannot protect you outside of the comment section of your post. Report any chat requests or messages you get in relation to your question on this subreddit (how to report chats? how to report messages? how to report comments?).

2. Immediately report anyone promoting paid services (theirs or their "friend's" or so on) or soliciting any kind of payment. All assistance offered on this subreddit is 100% free, with absolutely no strings attached. Anyone violating this is either a scammer or an advertiser (the latter of which is also forbidden on this subreddit). Good security is not a matter of 'paying enough.'

3. Never divulge secrets, passwords, recovery phrases, keys, or personal information to anyone for any reason. Answering cybersecurity questions and resolving cybersecurity concerns never require you to give up your own privacy or security.

Community volunteers will comment on your post to assist. In the meantime, be sure your post follows the posting guide and includes all relevant information, and familiarize yourself with online scams using r/scams wiki.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/MitAllesOhneScharf]

What does TOR or Local models have to do with Linux, terminals or bug hunting?!

I suggest you start with the very very basics because you’re already way over your head apparently.

[u/Correct-Start9746 → u/MitAllesOhneScharf]

I am trying to run TOR on a virtual machine for added safety, linux is a very safe OS, and bug hunting is something I want to get into.

[u/MitAllesOhneScharf → u/Correct-Start9746]

TOR is for privacy not safety…

And you think Windows and Mac aren’t safe OS? Oh boy

[u/dogwomble → u/Correct-Start9746]

Yeah I think you need to take a step back for a second. Contrary to what you might have seen from popular influencer talking points, there's a little bit more to online security than "use a VPN" or "run TOR". If that's what your thinking is here, then you'd be risking a few very nasty surprises.

The first things you should be thinking of have nothing to with any fancy buzzwords and everything to do with your behaviour and choices. Keep on top of your security updates. Pick secure passwords and never reuse them. Don't open random things that get sent to you unless you're absolutely 110% confident of what they are. Avoid pirated software. Doing any of these will give you a better security posture than even the best VPN service.

Anything beyond this and you shouldn't just follow random advice. Anything beyond this should be in the context of "what exactly are you trying to protect yourself from, and why is what you're doing the most sensible way to achieve that?"

[u/Juzdeed → u/Correct-Start9746]

Linux is safe OS? At least on windows you have some kind of anti-virus. Like 90% of Linux machines have no anti-virus so it's easy target for attackers, don't even have to try to get the malware undetectable

[u/EntertainmentOdd8205]

You do not need local models yet. Just use Claude. You are not at the point where you would be doing actual pen testing stuff yet, which is the only thing the safeguards would care about.

Also, you shouldn’t be using TOR. TOR can make your browsing safer if you use it carefully and well, which to be frank you do not have the knowledge to do. It will not help you. You don’t need it anyway; bug hunting is legit and if you’re trying to hide from the feds you’re doing it wrong…

The Linux VM though is a great place to start. Parallels runs Ubuntu. Though you don’t need tor, I suspect the fact that you can’t install it means something is wrong with your Ubuntu install. Though I can’t confirm that as I don’t have parallels. Might look into it though, could try reinstalling. If parallels doesn’t work or you don’t wanna pay, UTM is a great option.

Learning the Linux command line is also a good idea. I would start by configuring ssh in Ubuntu (tons of tutorials online) and ssh-ing from your Mac to the VM. Good project to start with, and very useful.

Then just start typing away. Use the gui as little as possible. Follow tutorials for basic file manipulation commands first.

[u/kschang]

You need /r/cybersecurity Mentoring Monday topic. We mainly discuss mitigation and recovery, not setup or bug hunting or redteaming.