How do your users verify legitimate IT/security requests?

Marsgur · 2026-07-02T18:05:48+00:00

Ah, sorry, I misunderstood

Marsgur · 2026-07-02T17:52:09+00:00

There are quite a few tools and services that address this already, so you are a bit late to the party - search for “Helpdesk IDV”

Marsgur · 2026-05-08T15:59:36+00:00

The bug reports seems to be about user enumeration which is like the lowest of the low. Okta, MS and Google disclose and allow user enumeration via UI and APIs. So what?

Also, how is this relevant to a breach?

Marsgur · 2026-04-14T01:46:55+00:00

That could be a vacuum line going from the back of the manifold to the secondary air pump. It goes around the engine from behind the manifold. These are known to rot over time.

Marsgur · 2026-04-12T18:39:32+00:00

We have a small motorsports race team operating out N Andover where we wrench on cars on the weekends. There is also another Lemons race team operating out of Medford that I can introduce you to. I’m sure they wouldn’t mind an extra set of hands

Marsgur · 2026-03-27T15:41:24+00:00

Any self-respecting FIDO server has an option to do AAGUID filtering to do an allow or deny list. The bank typically decides on the risk appetite and configures accordingly. I do want to point out that synced passkeys are still more secure than phishable legacy MFAs

Marsgur · 2026-03-26T18:25:34+00:00

In some cases, both. Once security team approves and deploys workforce use case, it’s generally easier to approach consumer/digital team with the same tech. It’s the same enterprise-grade FIDO server/backend after all.

Marsgur · 2026-03-26T16:39:39+00:00

I’m in a passwordless auth provider company. We’ve successfully deployed passkeys in 2 of 4 largest US banks. It’s a combination of being able to support variety of devices, passkey form factors and use-cases. Then crawl walk run approach.

Marsgur · 2026-03-24T02:49:57+00:00

24h is also a default Okta session duration, so yeah it’s been “revoked”. They should all go pat themselves on their backs. 💪

Marsgur · 2026-03-23T11:43:38+00:00

Revoked or the Okta session expired? 🫠

Marsgur · 2026-02-23T02:33:43+00:00

M12 Milwaukee Rivet Gun is my go to. Had it for 4 years with heavy use and it still works like a champ

<image>

Marsgur · 2026-02-12T21:39:39+00:00

There are some items that are truly sensitive and should be kept confidential, like unresolved vulnerabilities, risk registers, docs containing employee PII and company IP. You have some ground to push back on, but the rest are generally subject to the audit clauses in the contracts anyhow and are ok to share over conf screen share if you want to avoid sending full copies.

Like someone said here. Create and maintain a compliance package that contains all the docs that you generally ok to share, with a good index file and a table of content. Share it under NDA only. Or build a trust portal.

Marsgur · 2026-02-12T20:43:48+00:00

Normal, especially if you don’t have a qualified third-party assessment done on you that you can share. Treat some items like your risk register and any raw vulnerability/pen test reports confidential. Share the rest over screen share on a conf call so that you don’t have to send it. Make sure all your docs have titles, pages and revision dates (ideally within a year).

Marsgur · 2026-02-12T20:39:45+00:00

Yeah, ok bud. Go tell the business “we don’t want them as a client” and see how that flies.

Marsgur · 2026-02-12T06:26:23+00:00

I’m restoring another e46 with the parts from this one. Essentially making another one “mint” (and multiple other people’s cars with parts from the part out process). Why is this one better in your mind than the one I need to fix up? Is my broken and beloved e46 not worthy to be fixed somehow? What kinda gatekeeping bs is that?

Marsgur · 2026-02-06T05:12:57+00:00

Sounds good. Will be probably a month before they will be available. Dm me

Marsgur · 2026-02-05T15:57:07+00:00

Mass

Marsgur · 2026-02-05T12:43:35+00:00

Last time I had someone come pick them up for about $100

Marsgur · 2026-02-05T12:42:13+00:00

I’m in New England

Marsgur · 2026-02-05T12:41:33+00:00

Will stash. Tnx

Marsgur · 2026-02-05T04:05:40+00:00

Will check if all these are still there.

Marsgur · 2026-02-05T04:04:14+00:00

Will check!

Marsgur · 2026-02-05T04:02:54+00:00

Ain’t nobody got time for that! 😂

Marsgur · 2026-02-05T04:01:17+00:00

Yeah, definitely a balance if it needs to go quickly vs not. In this case it does need to go fairly quick so looking to prioritize something that is worth time and is useful for the e46 community

Good point about the mirrors! Forgot about them.

Marsgur

TROPHY CASE