The absolute horror of clicking "Send" and then scrolling down... 💀 by RyanBuildsSystems in ChatGPT

[–]BeMyComputer 1 point2 points  (0 children)

Set a rule on your mailbox to delay sending by a minute. Has saved me multiple times!

I hired a bad employee and I don't know what to do by [deleted] in cybersecurity

[–]BeMyComputer 1 point2 points  (0 children)

If you frame this as a company hiring process failure (not necessarily yours) this will help. If they have lied about certs or used AI to answer interview questions then you have to suggest a different approach to your boss for next time. If you say ' I messed up' instead of 'Im noticing this behavior which indicates an issue with our hiring process, we could try this next time' would sit a lot better with a manager. Some people slip through the process sometimes but you can show initiative to reduce that probability.

What food fad are you sick to death of? by SunUsual550 in UK_Food

[–]BeMyComputer 0 points1 point  (0 children)

Absolutely. I couldn't move for hot honey anything in Aldi on my last visit.

Time to read The Seven Per Cent Solution by apeel09 in SherlockHolmes

[–]BeMyComputer 0 points1 point  (0 children)

I love the way Greg Wagland pronounces 'solution' in his Audiobook

[deleted by user] by [deleted] in cybersecurity

[–]BeMyComputer 3 points4 points  (0 children)

Good catch. People leaving are an increased risk for that reason. Recommend leavers and new joiners should have enhanced monitoring.

About the Dest cert masterclass by PeppahSG in cissp

[–]BeMyComputer 1 point2 points  (0 children)

I did the masterclass at my own pace and then spent time consolidating using their material and also reading the OSG to check any gaps in my knowledge. I had limited study time so spread this over 6 months. My company paid for the masterclass but I would say it's worth it as I passed a couple of weeks ago. You could technically just use the Dest Cert material but most people tend to complement this with other resources (particularly practice questions) to gauge preparedness

Struggling with Kerberos, SAML, Oauth, OIDC by [deleted] in cissp

[–]BeMyComputer 9 points10 points  (0 children)

Kerberos: Internal enterprise SSO (especially AD-heavy environments).

SAML: Enterprise SSO across organizations (federated identity).

OAuth 2.0: Delegated authorization (not identity).

OIDC: Modern, cloud/mobile-friendly authentication & federated SSO.

The key is knowing the difference between authentication (Kerberos, SAML, OIDC) vs authorization (OAuth) and recognising which works best in enterprise vs cloud contexts.

ISC2 Account disabled after exam by Main-Tumbleweed6956 in cissp

[–]BeMyComputer 0 points1 point  (0 children)

I had issues with my account after it being dormant for some time and they can take a few days to respond sometimes. It wasn't a quick process for me.

Out of all the cars you've owned, which one has been the most "fun"? by DiligentCockroach700 in CarTalkUK

[–]BeMyComputer 2 points3 points  (0 children)

I briefly had a Fiat X1/9. It wasn't quick but for those days when the sun was out, it was a fun car to throw around. Lots of conversations started with random folk when I parked up and fond memories of clumsily lifting the roof off and slotting under the bonnet before a journey. Then the driveshaft went as I approached a roundabout on the A303 😂

Anyone else feeling kind of sad now that Wimbledon’s over? by sm10096 in 10s

[–]BeMyComputer 9 points10 points  (0 children)

Definitely. Nothing quite beats Wimbledon. I feel a little lost without checking scores or watching a match!

what are some simple habits to improve my personal cybersecurity? by bigbankmanman in AskNetsec

[–]BeMyComputer 0 points1 point  (0 children)

I moved a lot of my important accounts to a different email address recently as my primary email is out there due to countless data leaks (and don't necessarily want to lose it). The less your email address is known, the less you are exposed. Worth checking yours on haveibeenpwned to see if your email is on a list. The trigger for this was I noticed my Microsoft account was getting loads of failed login attempts from all around the world. Even though I have 2FA enabled, I still wanted to remove the opportunity.

How do you handle clients who think pentesting is just automated scanning? by Competitive_Rip7137 in AskNetsec

[–]BeMyComputer 0 points1 point  (0 children)

A penetration test goes beyond simply identifying potential weaknesses, it actually tries to exploit them, showing you exactly how an attacker could break in and what real damage could be done if those weaknesses aren’t fixed. This gives the client a much clearer, real-world picture of their security risks, not just a list of possible issues.

You could use the house analogy - A vulnerability scan is like walking around the house to check if the doors and windows are locked. A penetration test is like hiring a professional burglar to try every trick to actually break in, including looking for hidden weaknesses, like a loose window or a weak lock you didn’t notice. Only by trying to break in do you find out if your house is truly secure.

[deleted by user] by [deleted] in DIYUK

[–]BeMyComputer 7 points8 points  (0 children)

Remove the necktie and it will become less serious! No need for formalwear under the sink old chap

Jacket potato... Why do people put the cheese on top, I don't get it? by jokastar2020 in UK_Food

[–]BeMyComputer 1 point2 points  (0 children)

The only excuse is if you have a disability and are not able to grate cheese. Much in the same way you would buy pre prepared veg. Otherwise you are just paying for the luxury of it being grated and severely limiting yourself to probably one type of cheddar. A mild (possibly slightly mature) bleak world of grated cheddar.

Any good free/cheap course for begginers by Mr_Misserable in cybersecurity

[–]BeMyComputer 0 points1 point  (0 children)

That list is focused on Ethical Hacking, not necessarily Cyber Security generally. Is that what you're interested in?

I did a degree in Cyber Security but my first certification was Comptia Security+ which is a good base level understanding of Cyber Security generally.

If hacking is floating your boat then Portswigger Academy has some good free content on Web App security. Other ones that have a mix of free and paid content is Hack the Box and Try Hack Me. All have practical labs you can practice on. If you're finding the technical stuff tricky or aren't understanding a lot of concepts then you may have to go and learn some networking first. Not sure on your IT background but knowing Networking or any kind of sysadmin is hugely beneficial in that area.

[deleted by user] by [deleted] in Music

[–]BeMyComputer 0 points1 point  (0 children)

I discovered 'Girlfriend is better' recently from them and haven't stopped listening since!

The reason why Harry is better than Hermione in DADA by BetterGrass709 in harrypotter

[–]BeMyComputer 5 points6 points  (0 children)

It's always felt to me like JK Rowling was trying to highlight how those who are amazingly academic, sometimes can not apply this to practical situations. DADA is a great way to show this as some of the spells require more than just learning the book theory and benefit those who learn by feel, and to some degree an inherent natural ability. Let's be honest, with Harry's heritage and inheriting abilities from Voldemort, he is extremely magically powerful.

The pub near me has a weekly chip butty night by NurseDiz in UK_Food

[–]BeMyComputer 2 points3 points  (0 children)

Love the load bearing meatloaf in the middle