What are You Working on Wednesday
from shellsharks@infosec.pub to cybersecurity@infosec.pub on 20 Nov 2024 13:08
https://infosec.pub/post/20301269

Weekly thread to discuss whatever you’re working on, big or small, at work or in your free time.

#cybersecurity

threaded - newest

Omgboom@lemmy.zip on 20 Nov 2024 13:15 next collapse

I’m in service account password rotation hell

catloaf@lemm.ee on 20 Nov 2024 17:34 collapse

If this is AD, have you looked at gMSAs at all?

scytale@lemm.ee on 20 Nov 2024 13:34 next collapse

Reviewing for a GIAC certification exam next week. It’s a beta exam so my score will help dictate the passing score when it officially comes out next year.

stinky@redlemmy.com on 20 Nov 2024 13:50 next collapse

I live with an abuser and just getting out of bed is a monumental struggle

m0unt4ine3r@programming.dev on 21 Nov 2024 23:58 collapse

Your post doesn’t indicate your level of opsec, the country you live in, or your abuser’s technical understanding of computing machinery and security. Something important to be aware of (if you’re not already) is depending on where you’re posting from and what your abuser has access to, a post like yours–or following any of the links below–without taking appropriate precautions could put you in (further) danger.

The first thing that should be established (if you don’t already have one) is a threat model–consider things like: what are your abuser’s capabilities? (what do they know?, what can they access?, etc); what do you want to keep from them? (ie your online activities, especially as they relate to getting out of your situation if that is your goal); what controls/defenses can you use to keep yourself safe, prevent info discovery, mitigate harm, etc? How you can safely proceed depends on your threat model, which depends on your own unique circumstances.

Here are a few links, but please proceed carefully (if you don’t want to follow them for safety reasons, feel free to ask questions here):

If the above is not the type of response you were seeking (or you were already aware of it all), feel free to disregard it. (I understand at least some of the potential implications of this post being in a cybersecurity community on a cybersecurity Lemmy instance, but I didn’t want to assume just in case.) Regardless, I hear you. Your situation sounds awful. (If you just wanted to effectively shout into the void for some type of release, feel free to ignore this entire response. Finally, just in case anyone is wondering: the reason I replied here instead of privately is in the case resources/info are desired, others can provide better links/info and/or correct anything that’s wrong/dubious–I’m just a computer nerd with questionable social skills who wasn’t sure if/how to respond 😅…)

boatswain@infosec.pub on 21 Nov 2024 02:27 next collapse

Trying to make the time to review all this SOC 2 evidence for our annual audit, while also getting pinged for tons of other issues all the time.

PaddleMaster@beehaw.org on 21 Nov 2024 15:43 collapse

Schedule slips of capability installs, and fighting fake status updates. Oh joy! Nothing like having a vendor report that something is working and delivered and it’s completely missing. But somehow, it meets requirements, so contractually, they’re good.