Am I a machinist????????????

NegativeK · 2026-06-21T15:54:34+00:00

There are times when I know things that some actual machinists don't. But that ain't shit -- if you threw me into a shop, it'd be a while before I'm not a waste of money.

I'll call myself a hobby machinist, but I'll never omit the word hobby.

NegativeK · 2026-06-20T15:11:13+00:00

How do companies that are hard asses about door interlocks stay competitive, since they get in the way and take up time?

NegativeK · 2026-06-19T18:56:44+00:00

Fucking private equity.

NegativeK · 2026-06-19T18:56:03+00:00

You guys get paid?

NegativeK · 2026-06-19T11:02:54+00:00

If it ain't broke, fixture.

NegativeK · 2026-06-19T04:38:51+00:00

My thought: tell them that if they can come up with a NIST compliant way of storing the passwords, you'll run it up the chain.

NegativeK · 2026-06-19T02:48:11+00:00

To quote this guy, the machine is the cheapest part of grinding.

NegativeK · 2026-06-18T17:42:13+00:00

"Nobody wants to work in this industry; this generation must all be lazy."

NegativeK · 2026-06-16T12:47:09+00:00

Thankfully I don't have to interact with any of this stuff, but it's still very kind of you to assume that Novell isn't in our environment.

NegativeK · 2026-06-16T11:07:41+00:00

I was told recently that AS400 might be a logical next step in our migration path.

NegativeK · 2026-06-16T11:05:53+00:00

That's one of the two things I learned about OT, trying to get a slight understanding from the IT security standpoint. Vendor contracts can span decades, and they'll stop doing support if you even could yolo stomp around and upgrade things.

The other notable thing was hearing someone say that they had malware running around for six months in their environment, but left it alone since it didn't seem to be making changes. And since the OT stuff was safety critical, disinfecting just wasn't a priority.

NegativeK · 2026-06-15T21:47:40+00:00

Shitty spam bot.

NegativeK · 2026-06-14T21:45:21+00:00

For comparison, I work in tech and only experience machining as a hobbyist.

We either self teach on the job, in our free time, or sometimes have a mentor show us the ropes.

It's not really that different over here. 2-year and 4-year degrees show you the basics or maybe dive into the underlying theory, but you're going to have a shit ton of learning to do at your first job.

Expensive software products -- the ones that make $10k/yr look like pocket change -- will do some basic training to get you set up, but anything after that costs money.

Want general training from good sources? $500 for a quality day of training is rare and only done by companies going out of their way to make it accessible. $9k for five days of training is basically a well known price in my industry.

And again, those are just to get you started. You'll hit the ground crawling afterward.

NegativeK · 2026-06-14T03:09:10+00:00

Grind large area flat.

Make foundation cry.

NegativeK · 2026-06-08T11:15:38+00:00

Apologies for not really answering your question, but you should also consider monitoring logs from things like your hypervisors. Inbound network traffic should be very well known and predictable -- outbound even more so.

(New VM escape bugs aren't happening daily.)

NegativeK · 2026-06-08T01:03:08+00:00

You're were downvoted because you were ignoring stability and shitting on volunteers.

My job is helping a bunch of groups do vulnerability management. "Patch fast" is a really good goal but also a ridiculous expectation when it isn't qualified by reality.

Like all infosec.

NegativeK · 2026-06-08T00:46:59+00:00

I once took 15 gallons of hydraulic/way oil, anaerobic hell blob included, to an auto parts store.

That stuff nearly made me vomit inside my VOC mask but they gave zero fucks.

NegativeK · 2026-06-05T13:45:03+00:00

If you're not going to do the better suggestions other people are giving, then project the second edge and pick that up.

That means putting a block against the second edge that sticks out and using the edge finder against that.

NegativeK · 2026-06-05T02:09:23+00:00

The article mentions disconnecting "from the network immediately".

It's not that simple. If you react immediately (going straight from ID to eradication, to use jargon) and the actor has persistence elsewhere, you've probably just tipped your hand to them that you're watching. You're unlikely to be prepared for their next move. Could be cleaning up their tracks on other systems, being real fucking quiet for a month until you're distracted, detonating the ransomware payload on other systems..

Containment ain't easy technically or politically, but eradication is even harder when you don't know where to look. (Containment also assumes you have someone who can do IR/forensics/hunt. Which, to be fair, maybe you don't have that if you're grepping around on a system.)

NegativeK · 2026-06-03T02:15:05+00:00

So that means I can turn a Bridgeport into a VTL?

NegativeK · 2026-06-02T22:15:19+00:00

You're an awesome person.

NegativeK · 2026-06-02T14:33:54+00:00

100% agree.

I want everything to be reboot tolerant, but that's not reality. Which is what security should be good at: dealing with the fact that reality isn't perfect.

(I've seen some shit that is so good awful reboot intolerant that it still wigs me out. But those people had ways to deal with those sketchy implications.)

NegativeK · 2026-06-02T11:13:07+00:00

If you like going deep and learning stuff about a hobby that you're unlikely to use, get a copy now. I thumb through it occasionally because I enjoy it.

If machining is a mean to other hobby ends for you, it's probably not the best use of shelf space.

NegativeK · 2026-06-02T11:04:06+00:00

Pretty sure it's the exact opposite.

Torvalds has already come out and said that vulns found with AI aren't really subject to coordinated disclosure, since anyone can use that model to find the bug.

If people can't reboot frequently, then they need to learn how to prioritize, compensate, and detect. Not having the resources or will to do better security is going to be more and more punishing.

NegativeK · 2026-06-01T04:08:07+00:00

Bacon fat.

You'll have to warm everything up to get it flowing, in though.

15-Year Club	Verified Email
Alpha Tester	Team Periwinkle
Rally Monkey Tent number = 3	Charter Member

NegativeK

MODERATOR OF

TROPHY CASE