I’m sorry, there must have been some confusion, you’re the one we’re trying to secure our data against.

I bet there was a door with a lock on it once, but it got removed when everything overheated.

It’s safe to assume that the US government owns all your software and the Chinese government owns all your hardware. The thing that protects you is that your local police department is too stupid to work a computer and you’re probably not important enough to come to the attention of the heavy hitters in the government.

As for whether or not the mcfascists will kick in your door: maybe. The answer would still be “maybe” regardless of your internet usage…it’s random and arbitrary by design, to keep everyone terrified and encourage them to constantly compete to please the regime.

I disagree with everything besides #1. I think this may actually be too dated to be helpful.

Anyone gone back to school for an advanced degree after working in the field for a long time? What was your experience like?

The thought entered my mind to go back to school and get a Masters or something. I have 14 years in the field already but my bachelor’s was unrelated. Anyone else done something similar and have any input?

In a world where any doctor can make the whole bridge crew into Klingons in an afternoon, outpatient, there’s no reason I can’t become my fursona.

https://tenor.com/view/gif-gif-19496570

deleted by creator

A friend’s MSP got wiped off the map by this, we think. Not just exploited in the wild but, apparently, easy enough that random vandal kiddies are playing with it

They used to just hit http://localhost/:<various ports>/cc.png which connected to your Creative Cloud app directly, but then Chrome started blocking Local Network Access, so they had to do this hosts file hack instead.

Ok but adobe what if you didn’t portscan me either, please.

deleted by creator

If those data feeds were mostly generated from gmail inboxes, then they’d naturally never see messages already caught by google, skewing the data. This reads like marketing.

Depending on your field, your business may already have a cybersecurity department. There’s an endless parade of thankless grunt work to be done like patching (often after hours), following up with users whose machines didn’t patch for whatever reason, and so on. (With your manager’s permission) you may be able to reach out to them and volunteer to help with some of those tasks, as a way to dip a toe into that world and start learning.

Spent some time looking for ideas on how to do a security training (compliance requirement) that didn’t suck. Cribbing from some reddit posts, I think I’m going to give everyone a notecard with something like “Is Bob Bobson a client here”, have them pair up, and do a little phone conversation roleplay where one person is a visher trying to trick the other into revealing the piece of information, while the other person gets practice saying “No.” Seemed like a good way to let the staff dip a toe into thinking like an attacker.

Yeah to be clear, I do not recommend my method and I don’t think it’s a good allocation of mental resources. I’m just stubborn :P

FWIW, I use Diceware for password generation; it’s good at making memorable yet still random passphrases.

The prospect of putting all my passwords in one big juicy target has always made me nervous. I go to great lengths to just memorize everything, but damn if it doesn’t take a toll.

Please tell me you have backups of that flash drive

I think it’s fine if they act like highschoolers in a show for highschoolers. It just means that’s not a show that’s for me.