Boarding a plane to Las Vegas and 90% of the people are going to AWS Reinvent. Talking to strangers is way easier when you know the commonalities. Lots of random conversations.
I got what has to be one of the best fraudelent emails in a while on a personal account today. I'm impressed because it transcends definitions. It's technically not a phish, it's a legit Paypal notification. Abuse of PayPal's request money feature I guess?
ALT Screenshot of fraudelent email from paypal. It is a legitimate paypal notification of a pending invoice, but the fraudster crafted the request to make it look like Paypal is sending a fraud warning and I should contact them to cancel the transaction and claim a refund.
Dmitry Z retweeted
I've been working on a talk tentatively titled "Myths and Lies in InfoSec"
Some of the research I'll be referencing in the talk was inspired by one particular stat: "60% of small businesses go out of business within 6 months of a data breach"
How do we know a stat is fake? 🧵⏲️
First day as a Security Architect at Federal Home Loan Bank of Boston done. Great team, great place. Commute less stressful than expected.
Day 2&3? I get to go to AWS re:Inforce. How cool is that?
Dmitry Z retweeted
I honestly cannot remember the last time I did a job search. I was extremely lucky in that most of the time I just interviewed and got the role. I was not at all prepared for the utter slog of a search I was about to do. Best piece of advice - it's a marathon not a sprint. (2/n)
Dmitry Z retweeted
I've put off writing this thread, but figured I should share my experience job hunting from late last year which bled into early this year. If you are curious about my background you can look at my LinkedIn, but I honestly went in totally naive. #infosec #womenintech
Today I close one chapter and prepare to open another. It's my last day after 11 years at my current company. On Monday I start a new adventure that promises to be everything I have been working towards. It's crazy, scary, and exciting.
Doing knowledge transfer has started to feel like playing a greatest hits album. One time, I added an appendix akin to intro to cryptanalysis and then threw in "age of the universe" stuff for good measure.
In the days since I gave notice at my job, my time usage has been unexpected.
I feel like it's been:
10% explaining my new job
10% doing daily stuff
30% offloading/transitioning knowledge
50% being the person everyone vents their frustrations to.
Has anyone poked around M365 Outlook profile cards? There's a section called 'Works With' and it's entirely based on who you interact with and not the org chart. Seems like a gold mine for a compromised account to pivot around. Doesn't look easy to disable if you value privacy.
In IT chat...
Helpdesk: can someone disable antivirus on [computer]? I need to reproduce with a user.
There's obviously a typo there, but I'm too busy giggling to understand where.
I appear to have forgotten how to think in SQL and now I am only intuitively thinking in SPL. I literally pumped table data into Splunk because it was easier for me to analyze than in a database. Not sure if this is a success or failure.
Yesterday I had to reassure a new employee that they were not getting in trouble for having a web filter block message in their browser.
A- what kind dystopia was their last job?
B- we should probably insert more calming language in those messages by default.
I love reading pen test reports with reverse Checkov's guns. (Not)
You recommend we do X?
Objection, your honor. Facts not in evidence. Where in the report did you do something to test that? Show me how you know instead of just throwing some extra best practices in.