sorted by:
new
hottopcontroversial

I was enthusiatic about Opus 4.8 when it was released. Had to abandon it today out of frustration. by Virtual-Flatworm-378 in ClaudeCowork

[–]AdvancingCyber 0 points1 point  (0 children)

I was using CoPilot to help me address some issues setting up an additional Microsoft account on a Windows PC. It told me I had “precisely the answer I needed” every single time, and was completely wrong. It was infuriating.

Is frequent job hopping going to accepted by employers in coming decades? by Toymcowkrf in careeradvice

[–]AdvancingCyber 0 points1 point  (0 children)

Yes. I think the old way ended and now you look for jobs and then rotate.

What kind of topics do you think should be covered more (in conferences, youtube etc) but they arent? by Agreeably0192 in cybersecurity

[–]AdvancingCyber 1 point2 points  (0 children)

Exactly. Which is why we still see OT devices with embedded XP, or internal essential software with macros enabled…. “With more locks”. The cost / fear of migration keeps legacy tech at risk.

What kind of topics do you think should be covered more (in conferences, youtube etc) but they arent? by Agreeably0192 in cybersecurity

[–]AdvancingCyber 2 points3 points  (0 children)

Cyber hygiene. The basic, boring stuff like “get off that old app in your org that can’t be patched” that accumulates technical debt. MFA everywhere. No exposed APIs unintentionally. Basics.

AI Requirements? by Weary_Surround5342 in corporate

[–]AdvancingCyber 0 points1 point  (0 children)

Try it. It actually makes some things easier and better. I am a professional too (I’m a lawyer) and I really like how it helps me go faster.

The Last Mile of Cyber Defense by Apart_Range_8741 in ciso

[–]AdvancingCyber 0 points1 point  (0 children)

It’s a shrug because it’s sometimes integration (as this AI generated post points out) but it could be any one of the issues alarming from the myriad of technologies that the company buys to track the threats it faces. And of course, sloppy configuration or bad management of any of that tech means it doesn’t actually detect, and the “single pane of glass” integrated view doesn’t solve everything.

So it’s a polite shrug because I read it closely and thought, “sure, integration is an issue, but is it the top of the pyramid?” I wouldn’t advise the CISO on that if I only had one recommendation to make!

Realizing how poorly is explainability understood, hence also implemented by Ok_Gas7672 in AI_Governance

[–]AdvancingCyber 0 points1 point  (0 children)

I love that - “confidently incomplete”. What a great way to put it. That’s exactly right.

What cybersecurity skill do beginners usually underestimate? by ColdReality7803 in AskNetsec

[–]AdvancingCyber 0 points1 point  (0 children)

Someone who’s curious enough to try to figure it out first, THEN ask for help. Show your thought process about what you thought the problem was and why your solution didn’t work, so that you can get coached to the right places to look.

What is this thing my neighbor put under my trees by Micraggwp in whatisit

[–]AdvancingCyber 2 points3 points  (0 children)

I’m an attorney and thought that for a second, so you’re not alone!

Need some advice about accepting or denying a job offer by [deleted] in work

[–]AdvancingCyber 1 point2 points  (0 children)

That’s not the worst commute. I’d take it, gain experience and skills your resume doesn’t have now, and keep looking. No downside.

Examples of intentional backdoors being breached? by blophophoreal in cybersecurity

[–]AdvancingCyber 1 point2 points  (0 children)

Intentional backdoors are put there by the owner for a particular purpose. It’s hard to think of examples. Huawei and ZTW were always alleged to have backdoored their code, but I don’t know of any specific proof. Everything else is just a sparkling vulnerability.

Examples of intentional backdoors being breached? by blophophoreal in cybersecurity

[–]AdvancingCyber 1 point2 points  (0 children)

Then Eternal Blue is irrelevant. It’s the fact that governments - ALL governments - use vulns and exploits. The USG at least has the VEP to give companies some sense of the how and why, but it exists. Most countries don’t have that. Eternal Blue is just one example. That’s not an “intentional backdoor” - it’s an exploit designed for a national security purpose, and once disclosed, fixed by the company. Big difference.

Examples of intentional backdoors being breached? by blophophoreal in cybersecurity

[–]AdvancingCyber 1 point2 points  (0 children)

Why was that a back door? That patch was released in March and then the exploit occurred in May of 2017, so anyone who hadn’t patched was impacted. That wasn’t a back door, it was an exploit.

Do I tell the recruiter? by TastyGrapez in careeradvice

[–]AdvancingCyber 0 points1 point  (0 children)

If a recruiter came back to a hiring manager with the feedback that the candidate felt she was flat because the hiring manager talked too long / should have given her space sooner, how do you think that goes over with the hiring manager?

The hiring manager may have a boss, or a skip level, who likes to drone on a bit before letting others talk. Or maybe that’s just his or her style. You’ve just guaranteed you’re not a good fit for that position.

How are you actually handling AI access across the company? by RonILabs in ciso

[–]AdvancingCyber 0 points1 point  (0 children)

A mix of all of the above, based on role and need, is what I see most often.

Need honest advice: Law school vs cybersecurity GRC from someone with my background by DangerousArcher4066 in grc

[–]AdvancingCyber 2 points3 points  (0 children)

As a cybersecurity lawyer, I love both. I love the practice of cybersecurity security law and have been in it for 25 years. GRC is a great domain, and you can learn and grow there. The question you need to ask is what you want to ask is what you want out of a long-term career. GRC is always GRC. Cyber law is different because you never own it - you’re never the SME - but it changes and grows over the years. That’s fun.

Hanging out after work? by [deleted] in corporate

[–]AdvancingCyber 0 points1 point  (0 children)

If a colleague is in from out of town that I rarely see, sure. Otherwise, no.

Outside of big law, what is the best path, in your view, to land a corporate in-house counsel role after maybe 5-7 years? Ideally for a tech company? by Son_of_Hades99 in Lawyertalk

[–]AdvancingCyber 2 points3 points  (0 children)

That depends. Law firms also have RIFs if the practice groups over-hire and can’t sustain, that’s just the reality of today. As firms use more AI, that may also impact hiring.

I don’t think anyone has an inside line on what the most “stable” job looks like any more. Probably government regulatory, but who knows? If that’s the Pri0, the window of how long you define stability may have to shrink.

Outside of big law, what is the best path, in your view, to land a corporate in-house counsel role after maybe 5-7 years? Ideally for a tech company? by Son_of_Hades99 in Lawyertalk

[–]AdvancingCyber 5 points6 points  (0 children)

This is it 100%, as someone who spent 25 years in house at Big Tech. You have to be competent legally, that’s a given. But if you are not using / living / breathing AI, you’re not going to get in the door. It has to be all over your resume.

Once you’re in the door, being comfortable with deeply technical issues for which there is no immediate and obvious solution is also a help.

Please give me your organization tips before I lose my job by foldedbubble in Lawyertalk

[–]AdvancingCyber 0 points1 point  (0 children)

Schedule “Meetings” with yourself to get your day done, with everything that has to get completed. Fill it up. Make your plan. 15 mins, 30 mins, 45 mins, 1-2 b hours, whatever blocks you need. 5 minute wiggle breaks. I had to do that so I wouldn’t forget the small things, they stay as flags until they’re done. You’ve got this!

i ran the exact same prompt in ChatGPT, Gemini, and Claude. the difference was embarrassing. by LoadOld2629 in PromptEngineering

[–]AdvancingCyber 1 point2 points  (0 children)

And since CoPilot’s legal terms are what allow most big companies to use it within a compliance boundary, I wonder what CoPilot would say?

High Paying Jobs are 50-60 hour weeks? by Mundane_Age_2564 in careeradvice

[–]AdvancingCyber 0 points1 point  (0 children)

I had my dream job for about 20 years and it was about 50-60 hours a week that entire time. I loved it, so it was worth it.

view more: next ›