203.3K
Followers
301
Following
37
Posts
N/A
Reels
6
Highlights
9/3
Photos/Videos in last 12
Bio
Cybersecurity Software Engineer 🧙🏼♂️ I accelerate your cybersecurity career 🧑🏻💻 DM me "COACH" if you want to lock in 🐉 💌•••
6,188
Avg likes
2,339
Avg comments
4.2%
Engagement
0.5/wk
Posting
Recent posts
(PART 1) Follow for part 2!
Research paper 👇
https://papers.lisdex.sh/hermes/paper.pdf
24 Oct 2026
Comment “OSINT” and I’ll DM you the links!!
#OSINT #OPSEC #cybersecurity #ethicalhacking #bugbounty
48.3K likes · 21.7K comments · 12 Aug 2026
Comment “GITHUB” and I’ll send you all the links! #programming #coding #tech #github #cybersecurity
2,498 likes · 771 comments · 19 May 2026
https://papers.lisdex.sh/hermes/paper.pdf
https://papers.lisdex.sh/hermes/report.pdf
i cooked…
44 likes · 2 comments · 24 Oct 2026
Comment “LINUX” and I’ll send you the full guide!
1. CUSTOMIZE YOUR SHELL
Your settings live in ~/.bashrc or ~/.zshrc. Aliases go in that file: alias gs=‘git status’, alias ll=‘eza -la’, alias ..=‘cd ..’. Run source ~/.zshrc or open a new terminal and they work. Two zsh plugins worth adding on day one: zsh-autosuggestions finishes commands you have typed before, and zsh-syntax-highlighting turns a command red before you run it if it is wrong. Ctrl+R searches every command you have ever typed, so you never retype a long one.
2. INSTALL THE TOOLCHAIN
build-essential on Debian and Ubuntu, “Development Tools” on Fedora, base-devel on Arch. That is the compiler, the missing half of most installs that fail. Then git, which is how you download most projects. Docker and Compose, so you can run software without installing its dependencies. uv, which replaces pip, venv and pyenv and is far faster. Go, because go install pulls a huge chunk of the security tooling world.
3. SNAPSHOTS
sudo apt install timeshift, or sudo dnf install timeshift. Pick rsync mode, it works on ext4, xfs and btrfs. Take a snapshot BEFORE you change something, not after. One thing people get wrong: Timeshift leaves your home folder out by default. That is deliberate, it restores the system, so your photos and documents still need a separate backup. If the machine stops booting you can restore from a live USB.
4. REPLACE THE COMMANDS
eza, bat, ripgrep, fd and zoxide are all in your package manager. zoxide needs one init line in your shell config and you type z instead of cd. If you want your muscle memory to carry over, alias the old names: alias ls=‘eza’, alias cat=‘bat’, alias find=‘fd’.
5. SYSTEMCTL AND JOURNALCTL
A service is any program running in the background: ssh, bluetooth, printing, a web server. systemctl status NAME tells you whether it is alive. start and stop control it right now. enable —now starts it and makes it start at every boot. journalctl -u NAME prints that one program’s log, and -f follows it live. These need sudo. Same four commands on every distribution, forever.
Follow for more Linux and cybersecurity.
#linux #linuxforbeginners #cybersecurity #terminal #opensource
8,163 likes · 753 comments · 06 Oct 2026
1. Nobody learns Linux from a course. The method is five steps and two free downloads.
2. The only two downloads are VirtualBox and Ubuntu. Both free, both cross platform.
3. Install VirtualBox 7.2.14 first. Snapshots let you restore the whole machine after you break it.
4. Download the Ubuntu 26.04 LTS ISO. One file, the whole operating system, supported until 2031.
5. Follow your own curiosity. Whatever you poke at is the lesson you actually keep.
6. man ping, ping —help, apt search, and journalctl -xe answer almost every beginner question.
7. Dual boot is the escape hatch. Most people stop opening Windows within a month.
Comment LINUX for a more in depth guide! #Linux #ubuntu #debian #operatingsystem
5,357 likes · 580 comments · 10 Aug 2026
Comment “LAB” for the link to the full instructions and I’ll send it to you! A full cybersecurity home lab for $0. Five free downloads, one laptop, and you have an attacker, a target, a firewall and a SOC talking to each other.
Start with VirtualBox. It is free, it runs on Windows, Mac and Linux, and every machine below lives inside it. Version 7.2.20 as of this week.
Kali Linux is the attacker. Download the pre-built VirtualBox image from kali.org, import it, and you have 600+ tools installed before you type a command. Give it 2 GB of RAM.
Metasploitable 2 is the target. Rapid7 built it to be broken: old services, weak passwords, known holes. Login is msfadmin, password msfadmin. Keep it on an internal network only. Never bridge it to your real network and never put it on the internet. 512 MB of RAM is plenty.
pfSense CE is the firewall. Version 2.8.1, free. Put it between Kali and Metasploitable with two network adapters and you can write rules, block ports, and watch what gets through. 1 GB of RAM.
Security Onion is the SOC. Free, open source, 8 GB of RAM in eval mode. Set its sniffing adapter to promiscuous mode on the same internal network, run an nmap scan from Kali, and watch the alerts land in the dashboard the way an analyst would see them.
Add it up: 2 + 1 + 0.5 + 8 is 11.5 GB. A 16 GB laptop runs the whole lab with room left for the host.
Full setup guide with every link and every setting is on the blog.
#homelab #cybersecurity #kalilinux #virtualbox #securityonion
3,802 likes · 1,936 comments · 26 Sep 2026
Comment “GUIDE” and I will send you the full written version with every command, the Docker install, and the fixes for when it runs slow.
Free uncensored AI, running on your own laptop, fully offline. Three commands and one decision.
The model is huihui_ai/qwen3.5-abliterated on Ollama. It is Qwen 3.5 with the refusals removed through a process called abliteration, which is not a jailbreak and not a prompt trick. In 2024 researchers found that refusal in a language model runs along a single direction inside the model. Subtract that direction from the weights and the model loses the ability to form a refusal at all. 656,700 people have pulled this one.
The part that decides your whole experience is slide 5. Ollama will happily load a model that is too big for your graphics card. It does not warn you. It just moves the leftover layers into normal system memory and lets your CPU do that share of the work, and the same model goes from instant to thirty seconds a reply. People hit that, assume local AI is garbage, and quit.
Check it after the model loads with ollama ps and read the PROCESSOR column. 100% GPU means it all fit. 48%/52% CPU/GPU means half of it is running on your processor and that is why you are waiting.
One more thing the model page will not tell you: it advertises 256K context, but Ollama gives you 4,096 tokens by default on anything under 24 GB of VRAM. Raise it with OLLAMA_CONTEXT_LENGTH or /set parameter num_ctx once you know the model fits.
Save slide 6. That table is the only thing you actually need to get right.
Send this to the person who keeps paying for a chatbot subscription they use twice a week.
#ai #cyber #ollama #qwen #localai
2,921 likes · 1,305 comments · 01 Oct 2026
Comment “PASS” and I’ll send you the link to the only resource you need to pass first try.
I passed 6 CompTIA exams. Here are 5 things nobody told me before the first one, and every one of them is on comptia.org.
Beta exams. When CompTIA builds a new exam, they run a beta first. DataSys+ was $50 plus tax. AutoOps+ was free if you got picked. You take the real exam, and if you pass, you get the real certification. Two catches: results come out when the official exam launches, which can be months later, and you can only take a beta once.
Student pricing. CompTIA’s own blog says students get 35 to 55 percent off store products. College students at US Title IV and Canadian universities qualify, and the part nobody expects: so do US high school juniors and seniors who are 16 or older. SheerID checks your status when you check out. It does not stack with any other discount.
Data forensics. CompTIA runs statistical analysis on exam results, done by PhD psychometricians, looking for answer patterns that match exam dump use (the brain dump sites). If your score crosses their thresholds it gets invalidated, and the outcomes go up to permanent ineligibility. They will not show you the report, and the decision is not appealable. Their words, on their site.
Renewal. Pass a higher CompTIA certification and the lower ones you already hold renew with it. CySA+ or PenTest+ renews Security+, Network+ and A+. Security+ renews Network+ and A+. SecurityX renews all of them. The chart is on the continuing education page.
Retakes. There is no waiting period between your first and second attempt. The 14 day wait only starts before your third attempt. Several prep sites still say you must wait 14 days after the first fail. You do not. You do pay full price again, though. No free retests.
No need to buy practice questions or textbooks when certgames.com exists. 26,000+ free questions, roadmaps, PBQ drills, games.
#comptia #securityplus #cybersecurity #certification #comptiaexam
1,432 likes · 572 comments · 23 Sep 2026
Comment “STACK” and I will DM you the full breakdown: every pick, every enterprise price, every source.
7 free tools. Fortune 500 defense.
I priced what a 50-person company pays for seven categories of security software, from the vendors’ own price lists. Then I found the strongest open source, local-first tool in each category. Not the famous one. The one that wins on capability.
Identity: KeePassXC. One encrypted file, no server. Vaultwarden shipped 18 security advisories in 2026. A file has no login page.
Computer: Qubes OS. Every app runs in its own Xen VM. CrowdStrike watches the kernel. Qubes assumes the kernel loses and makes that survivable.
Phone: GrapheneOS. France pressured them, Google pulled the Pixel source, and they did not miss a release. Signed Motorola at MWC 2026.
Network: OPNsense. Firewall, Suricata IPS, Unbound with blocklists, WireGuard, one box. pfSense CE’s public repo has no commit since March.
Browser: Mullvad Browser. Chrome killed real uBlock Origin in July 2025. This is Tor Browser’s hardening without Tor, and one menu turns off the JIT where half of Chrome’s live exploits lived.
Data: Kopia + LUKS2. Kopia is the only backup tool that gets storage-enforced immutability. restic cannot even run inside an object-lock bucket.
Detection: Wazuh + Canarytokens. A real SIEM on hardware you own, plus fake AWS keys that alert the second anyone touches them.
Two of these want specific hardware. Qubes wants VT-d and 16 GB. GrapheneOS wants a Pixel. That is the price of the strongest option, and the breakdown names the fallback for each.
Save this for your next rebuild.
Send to whoever still pays for antivirus.
#opensource #cybersecurity #privacy #infosec #selfhosted
1,604 likes · 345 comments · 20 Sep 2026
Comment “GAME” and I’ll send you the link.
In 2013 a team of psychologists reviewed ten study techniques and ranked them by how well they actually work. The paper is called Improving Students’ Learning With Effective Learning Techniques, published in Psychological Science in the Public Interest.
Two techniques came out high utility. Practice testing and spaced practice. Testing yourself, spread out over time.
Rereading and highlighting came out low. Highlighting specifically was found to give no benefit beyond just reading the text once.
Now here is the part nobody says out loud.
Reviewing is comfortable because you never find out you are wrong. Every line you read, you nod. You recognise it, your brain files it as familiar, and you move on feeling productive. You finish the session feeling ready.
Practice questions are uncomfortable for the exact opposite reason. They tell you you are wrong, over and over, directly. So most people quietly drift back to the method that never makes them feel stupid, which is also the method that does not work.
That is not laziness. That is avoidance, and it is completely rational.
There is one place on earth where people genuinely do not mind being wrong, and that is a game. You died hundreds of times in Mario and never once rage quit over it. Dying was just a turn. Getting it wrong was information, not a verdict on you.
That is the actual argument for gamified studying, and it has nothing to do with it being fun. Streaks, levels and XP change what being wrong feels like. A missed question stops being evidence that you are not smart enough and becomes a turn.
So I built the version that works that way. Practice questions, but structured like something you can finish.
One more thing, since it is relevant. Derek Muller’s doctoral research at the University of Sydney found that clear explainer videos produced no measurable learning. They just made students more confident in the wrong answer. Watching is not learning either.
Follow for more cybersecurity.
#cybersecurity #studytips #securityplus #comptia #cybersecuritycareer
131 likes · 94 comments · 10 Oct 2026
Comment “OPEN” and I’ll send you every link.
Everything below was verified this week.
ARTCRAFT. One developer, Brandon Thomas, has been rebuilding the Adobe suite from scratch in Rust with AI assistance. Eight apps so far: PhotoCraft for Photoshop, VectorCraft for Illustrator, FilmCraft for Premiere, LightCraft for Lightroom, PdfCraft for Acrobat, EffectCraft for After Effects, DesignCraft for InDesign, FigCraft for Figma. All Apache-2.0. All clean room, meaning no Adobe code was used. They run on macOS, Windows, Linux and in a browser.
REA. 199,631 stars and 48,828 forks, MIT licensed. It is an MCP server that hands an AI agent real decompilers like Ghidra and Hopper, so the agent can read compiled software and explain how it works down to the binary.
Now the honest part, because the reels are skipping it.
REA does not build you anything. It explains things. The agent runs on tokens you pay for, every single time. And the Adobe rebuilds are early. PhotoCraft has installers and is still labelled early alpha. Most of the others say in development. They are genuinely impressive. They are not Photoshop yet.
Which brings me to the part almost nobody posting about this seems to know.
Free, open source versions of all of this have existed for most of my life.
GIMP shipped in 1996, thirty years ago. Blender went public in 1998. FreeCAD in 2002. OpenOffice, which became LibreOffice, in 2000. Syncthing in 2013. These are not abandoned weekend projects. They are mature tools that millions of people do real work in every day.
Syncthing is the one worth knowing about. It is peer to peer, so your files replicate straight between your own devices and never touch anyone’s cloud, including the project’s. There is no server to subpoena because there is no server.
The reason you have not heard of most of them is not that they are bad. Free software has no marketing budget. The tools you know about are mostly the ones that paid to reach you.
Five on the slide. There are hundreds.
And that free competitor to Windows everybody suddenly wants? It shipped in 1991. You already know its name.
Follow for more.
#opensource #linux #software #cybersecurity #tech
13 Oct 2026
Follower tracking
We have been recording @carterperez.dev since 20 Oct 2026 — 16 observations.
203,267
+16,122
(8.61%)
since 20 Oct 2026, from 187,145
6 Nov 2026
Download @carterperez.dev's data
Everything below is derived from this account, priced on the counts shown. Delivered as CSV by emailed link.
You only pay for rows we deliver. Counts are the maximum available today; if an export comes back smaller, the difference is refunded automatically. Counts as last collected 20 hours, 30 minutes ago.
Tracking
What we have recorded about @carterperez.dev over time, and ongoing alerts.
Other reports
Not downloads of this account: they take their own inputs.
Similar accounts
Accounts we track that share hashtags, mentions or bio topics with @carterperez.dev.
@ryaneditraj
327.9K followers
Also uses #opensource
@cyberwithjohann
7,845 followers
Also uses #ethicalhacking
@cyber_sasha_
109.6K followers
Also uses #infosec
@scottaltiparmak
49.3K followers
Bio mentions “cybersecurity”
@vadasienne
17.3K followers
Also uses #cyber
@coders.world
1.5M followers
Also uses #software
@byrasocial
34 followers
Also uses #privacy
@cybersecdyl
32.1K followers
Also uses #homelab