boatswain

@boatswain@infosec.pub

This profile is from a federated server and may be incomplete. Browse more on the original instance.

boatswain,

The first rule of tautology club is the first rule of tautology club.

boatswain,

Eldrow is pretty entertaining, though it’s not really limited to once a day. You pick a word and the computer makes guesses until it figures it out.

boatswain,

No, that’s an escape character. You have to double up on it for it to show up.

boatswain,

“all 16 digits” implies that there aren’t any more digits of pi, which isn’t true. Just FYI.

boatswain,

I mean, the domestic businesses are the ones who own Congress and are using it to get rid of a competitor.

How long would it take to beat the core game, just the pve side?

I’m curious how long it would take a NEW player to beat the core game? If they had access to the wiki and when needed YouTube but didn’t have someone standing next to them telling them what to do. In other words they try the jumping puzzle or what ever they were trying to do a few times and if they failed, then go look it...

boatswain,

“All PvE achievements” is a huge undertaking, even if you’re just talking about the core game; there are things in there like Fractal God, which will take probably a year or so of dedicated grinding, and God Walking Amongst Mere Mortals, which will require finishing a huge number of achievements in a totally different game. I’ve been playing since a year after launch, and I’m nowhere close to having all the core achievements.

boatswain,

SMS-based can be intercepted, while app-based are calculated on your phone. If you’re using SMS -based, all someone needs to do is take over your phone, and they’re getting your 2FA codes. Here’s how easy that is: m.youtube.com/watch?v=lc7scxvKQOo

boatswain,

If you’re pulling on a rope really hard, don’t wrap it around your hand to get a better grip. If it starts to pull away from you, you won’t be able to let go, and if someone runs up to help and starts hauling on the end, your hand is going to be in a world of pain.

boatswain,

Mint is super comfy. Garuda is cool. Pop_OS! is as annoying to use as it is to type.

boatswain,

Hey all! I’m trying to figure out where I go next in this career. I’m working at a mid sized company that is owned by a company that is owned by another company. Started out as a software dev about right years ago and spent a lot of time as a security champion; finally moved to the InfoSec team about two years ago. It’s a small InfoSec team: three people total. So I do a lot of stuff: contact reviews, vendor security assessments, firewall log monitoring, code reviews, run security trainings, coordinate external pen tests, gather SOC 2 evidence, incident response… Lots of stuff.

I like most of the work well enough (though the GRC stuff is not my favorite), but recently my boss and my teammate quit, so our team of three is down to me. There’s some support available from the security team of the parent organization, and a very competent contractor, but it’s largely just me.

What I’m wondering mostly is: if I go elsewhere, what kind of role am I looking for? I feel like this Jack-of-all-security-trades thing I’ve got going on can’t be super normal, can it? And also, is my current situation something I should embrace, and take the opportunity to run the InfoSec team? Having someone with two years of security experience at the wheel seems suboptimal to me, but maybe it’s worth doing for the experience?

My ideal would be working with a team of five or six, with people I can learn a lot from; my concern is that right now, most of the learning I can do is from my own mistakes.

boatswain,

I think I’m good as far as job security goes, so that’s a plus. I should ramp up the job hunt I suppose. Already trying to study for the CISSP after work though and I am a big fan of having down time to unwind.

boatswain,

Is the market actually bad at the moment, though? We’ve been trying to fill one of the vacant positions on my team, and the offers we’ve extended have been declined for other options. That makes it seem to me like candidates have plenty of options at the moment.

boatswain,

That’s me. I’ve only lived in one apartment with a dishwasher, and that was only for a year. We just used it as storage for pots and pans. My folks have a dishwasher now, but any time I go visit them I just wash stuff by hand, at least partly because I don’t know how to dishwasher.

boatswain,

A combination of a good lock (I think those Kryptonite New York locks are well reviewed) and having a bike that doesn’t look desirable. If your bike is obviously high end, it’s a target. If it looks like an old beater, thieves probably won’t bother. As often, anyway.

Do you often hear the ringing of switching power supplies and devices when you are in a quiet space?

I’m curious, how many people are aware of these sounds. I have designed, etched, and built my own switching power supplies along with winding my own transformers. I am aware of the source of the noise. So, does anyone else hear these high frequency sounds regularly?

Are there any genuine benefits to AI?

I can see some minor benefits - I use it for the odd bit of mundane writing and some of the image creation stuff is interesting, and I knew that a lot of people use it for coding etc - but mostly it seems to be about making more cash for corporations and stuffing the internet with bots and fake content. Am I missing something...

boatswain,

You’re confusing brainstorming with content generation. LLMs are great for brainstorming: they can quickly churn out dozens of ideas for my D&D campaign, which I then look through, discard the garbage, keep the good bits of, and riff off of before incorporating into my campaign. If I just used everything it suggested blindly, yeah, nightmare fuel. For brainstorming though, it’s fantastic.

boatswain,

I think we’re saying the same thing there: LLMs are great at spewing out a ton of content, which makes them a great tool for brainstorming. The content they create is not necessarily trustworthy or even good, but it can be great fuel for the creative process.

boatswain,

I’m a proponent of this myself. I think the big barrier to just using UTC everywhere is with the clock as a symbol: right now if you’re watching a movie or a TV show and see someone’s alarm going off at 6:00, you know “oh, they’re a pretty early riser.” If everyone used UTC, that time could be local noon, or the person could be late for work, out any number of other things.

That also applies to when people move to a new place; if I’m used to having lunch at 20:00 UTC and then move across the country, suddenly lunch is at 17:00 UTC. Symbols are really important to people, so I think these are both problematic. Meetings would be easier, but offline life would be harder.

Passkeys might really kill passwords (www.theverge.com)

Passkeys: how do they work? No, like, seriously. It’s clear that the industry is increasingly betting on passkeys as a replacement for passwords, a way to use the internet that is both more secure and more user-friendly. But for all that upside, it’s not always clear how we, the normal human users, are supposed to use...

boatswain,

That doesn’t sound like a particularly feasible plan. I would hope that grad student would tend to be attracted to places with a program renowned for their chosen girls of study. I can’t imagine they’re making the assumption that all indigenous grad students want to study the same thing, so then what are they doing? Simply providing financial incentives for indigenous grad students? That sounds great, but I’m curious about the source of funding. If that’s not it… What?

Use work laptop as personal device by dual booting on a separate internal drive?

I currently have a Dell laptop that runs Windows for work. I use an external SSD via the Thunderbolt port to boot Linux allowing me to use the laptop as a personal device on a completely separate drive. All I have to do is F12 at boot, then select boot from USB drive....

boatswain,

On top of all that, most hitting contacts I’ve seen contain language saying that if you use company resources to make a thing, that thing, the company owns that thing. Seems likely that in addition to firing they could compel you to turn over the drive and wipe it.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • kavyap
  • DreamBathrooms
  • cisconetworking
  • magazineikmin
  • InstantRegret
  • everett
  • thenastyranch
  • Youngstown
  • rosin
  • slotface
  • khanakhh
  • Durango
  • mdbf
  • JUstTest
  • ethstaker
  • anitta
  • modclub
  • osvaldo12
  • normalnudes
  • ngwrru68w68
  • GTA5RPClips
  • tacticalgear
  • provamag3
  • tester
  • Leos
  • cubers
  • lostlight
  • All magazines