Sysadmin-ish, jack of some trades. Storage, servers, switches, firewalls, PowerShell.
Cymru / Wales / Pays de Galles.
Will try not to let this account degenerate into the Blackadder-fueled cynical cess pit of my "other" account ;-)
Toots are personal & do not represent the views of my employer.
Question: how do you power the head torch? Could it be batteries by any chance? Which will run out?
@rj07thomas "Oh, you don't practice security through obscurity?? Okay then, publish your company's full asset register - including networking devices - detailing running OS and last patch date...
What? You say that's 'confidential'?
Sounds like obscurity to me!"
Just seen a post on LinkedIn to the effect of "we've all been practising security through obscurity but it's time that stopped."
We *all* practice security through obscurity, all the time, and not just digitally. If we really wanted to be secure, nobody would connect devices to the internet. But that's impractical, and on a personal level we assume that we're not very interesting targets. Same with companies. If you're a small coffee shop, you're unlikely to have an NDR in place because you assume a malicious actor is going to go after a big coffee shop chain.
Offline, it's unlikely you've laid landmines around the perimeter of your property or wrapped your car in barbed wire. These are very secure solutions but totally impractical. You've made the assumption The Last Of Us hasn't happened in your town yet so it's probably OK to skip these measures for now.
Security through obscurity is bad practice but there's no other way of living without going mad and turning into Fox Mulder.
Yes! We're 45 years past the largest push by scientists to get people to understand what was going to happen if we didn't change our ways (there were individuals pushing since at least 1910), and yet I hear people say "but they said it would take generations!". Yes, they did. And we've had 2-3 generations born since then.
That's one of my go-to disaster movies for that very reason. It skirts the edge of reality.
Quaid may have been all-American, but he was also a scientist, so the better made car works for me 😁
Remember that ridiculous 2004 Roland Emmerich movie, The Day After Tomorrow? It was laughable right? Tornados in LA, ice covering the northern hemisphere etc.
Well...
https://www.channel4.com/news/the-key-atlantic-current-that-could-change-europes-climate-forever
And go to 3:10. This was a completely natural set of circumstances and "only" dropped AMOC output by 30%. But the following December was the coldest in a 100 years in the UK, and in New York sea levels rose by 13cm. Not necessarily all down to AMOC but it seems to be too coincidental for AMOC to have played no part. And this was a 30% drop, not a shutdown.
I've got no intention of becoming a prepper or spreading panic, but the data on AMOC are indicating a slowdown spread across decades.
Looks like that film isn't as outlandish as it seemed 20+ years ago.
Saw a LinkedIn ad from "that" NDR company. Yup. The one with the big F1 deal.
It said something along the lines of: our AI will learn your unique environment.
Well, in my experience that's total <insert expletive here>.
It completely fails to learn that process x is completely routine and happens day in, day out, 220 days a year. It blocks the process on the grounds of "suspicious activity".
It apparently can't do even half decent geolocation of VPN endpoints; it returns the country of registration of the ASN owner company, which isn't the same thing at all as where the VPN endpoint is.
And when I dug into the advanced search features and pcap files, I found it wasn't even managing the transition between BST and GMT. An NDR that can't tell the time. If this *is* a mis-configuration then... what the hell? You don't configure time anymore, you point at NTP servers.
Oh, yeah. And it mis-reports DNS. "Device x has done this!". Are you sure? Yep, definitely.
But device x has been offline for 2 days, and this event happened an hour ago. Dig about in the pcap and if you're lucky, you can find the actual DNS name of the device involved.
"Get answers on the official <insert massive global platform here> community pages here!"
Hi, my cards keep disappearing from Google wallet. They don't actually get deleted, a reboot fixes it.
Try adding the cards back?
No I said they're still there and reappear after a reboot.
<radio silence>
Dave 🐶
DB Schwein
Daniel Swain