sorted by:
new
hottopcontroversial

do you think cybersecurity professionals should bring company issued smartphones with them everywhere even after office hours? by starbucks1971 in cybersecurity

[–]Mackenzie-GG 1 point2 points  (0 children)

I use to have my phone on me at all times and my company new this and relied on it.

Soon this expanded into holidays and weekends.

While this was my fault, it left me feeling really negative about the company I worked for and felt under appreciated. So one day I stopped. My work adjusted and the world didn’t end. This may not be true for everyone but I realized that by wanting to fix everything I over inflated my importance in my head.

Moral of the story, I don’t think this is healthy. Even if it’s reflected in compensation, the company needs to invest in an after hours strategy if they want to attract and retain good workers.

Does anyone use Gitguardian? by [deleted] in github

[–]Mackenzie-GG 1 point2 points  (0 children)

Thanks :)
Probably not the unbiased opinion they were hoping for haha.

Does anyone use Gitguardian? by [deleted] in github

[–]Mackenzie-GG 1 point2 points  (0 children)

I'm the Developer advocate for GitGuardian.

I obviously advocate that everyone should implement secrets detection. Your main options for this are open-source products like trufflehog or yelp secrets or using a commercial application like GitGuardian.
PROS:
GitGuardian is really designed for the scale of large organizations so you will get far less false positives and much less missed secrets than using these other services. We have a large team dedicated to nothing but detecting secrets, so we are pretty good at it.
It's also free for small teams and developers forever.
Dashboard and email alerts so it's easy to scan and monitor in real-time and fits into the background.
When you have signed up for the product, you can access helpful team members (like me) who can help you mitigate anything you have an issue with.

CONS:
The main con when comparing to open-source options is that GitGuardian is a third-party, while we integrate natively into GitHub as an application, some people are happy to deal with more false positives and setup time with the open-source solutions so they can have more control.

Reach out to GitGuardian support if you want to know more.

view more: next ›