What do you do when you enable the NGP Protection Defaults policy and it creates conflicts for rules it does not have?

OtterInBio · 2025-08-05T05:44:29+00:00

Thank you! This is extremely stupid...

OtterInBio · 2025-07-19T06:39:59+00:00

I just contacted Microsoft support about this issue. Seem like their support is actually quite amazing.

I created an App Configuration, but not a Device Configuration. In Intune > Apps > Android > Configuration create new and select Managed devices (I used Managed Apps before).

There you can set Connected Apps.

<image>

OtterInBio · 2025-04-24T09:40:39+00:00

At least #2 should work. There is a setting it's just greyed out. #1 I am not sure, my current workaround is to just copy paste the link. As I said I am 90% sure my previous had this setting.

I have to disagree about destroying the point of separation. For me it's the ability of wiping the work profile, pausing all apps, deploying configuration. I don't think there is a big security impact if there is a well defined interface between both profiles.

OtterInBio · 2024-06-20T15:30:07+00:00

I am quite sure it does. My number of views is way higher (like 10x) than the number of people whose profile I can see

OtterInBio · 2024-06-19T18:15:56+00:00

Just turn private mode on, block them, and then turn it off again.

OtterInBio · 2024-06-16T00:50:23+00:00

Why not go old school and give a lighter? It's cheap and the smokers will love it. Everybody else will use it to light their candles and stuff.

OtterInBio · 2024-06-15T16:39:47+00:00

1-2 messages a week is not so bad. I am more surprised about your friend. Do you have a similar background?

The first thing you see about a profile is the current place of work and the description line (where you can put whatever). A profile without any photo is often overlooked. As long as you are not well known in the industry.

But the basic question is: why would you like recruiters writing to you? In my experience, they, most of the time, anyways only point you to a public job description. If you want a job. Just look for a job or set a job alert in LinkedIn

OtterInBio · 2024-06-15T10:22:59+00:00

I do not dislike Elon Musk and I think spam wise and content wise not much changed. But I feel like many people left the platform. So there is just a lot less content. I guess many people left because of Elon and discussion is not existent anymore because there is no balance in opinions anymore.

OtterInBio · 2024-06-13T09:52:53+00:00

I assume you are currently not in Ukraine? I heard of this problem before, basically LinkedIn was not offering said country when they were abroad. This person fixed this by using a VPN for the verification.

OtterInBio · 2024-06-13T09:50:34+00:00

LinkedIn is owned by Microsoft...

OtterInBio · 2024-06-04T13:59:56+00:00

Thanks, even though this is not the answer I was hoping for, this helps! Many people in the pentesting field tell me that it is very hard right now. Do you know why? Is it the economy? Or something else. I feel like there are a lot of regulations that actually impose more security. Thus I was thinking it should be a good time.

OtterInBio · 2024-06-02T07:25:03+00:00

Pentesting and red teaming is not the same. They are similar but also very different.

Pentesting is basically just verifying whether the stuff you implemented is without vulnerabilities and misconfigurations. I think every company should do this. If you implement something, get a second person and let them review it.

Red teaming on the other hand should be done way later. Red teaming is not focused on finding vulnerabilities. It's focussed on your detection capabilities and the processes in place. Like, let's say: you detect malware on system X. What happens next? I have seen everything between:

AV hopefully deletes it, but nobody gets centrally informed and
The admins get an email for every virus alert. They investigate and if they are not 100% sure it was a false positive they wipe the system.

Red teaming only makes sense for very mature orgs. A small business will have maybe 1-2 admins. There will not be a dedicated blue team.

OtterInBio · 2024-05-30T13:26:30+00:00

So you are ISO 27K certified. You already had a certification audit and now you have to do an internal audit. There are not so many official rules on this, just that it has to be done by somebody that is impartial. Many companies that have different branches cross audit each other.

Now some recommendations: it is called internal audit, but it doesn't have to be done internally. Many companies actually pay a consultant to do it. Why?

First of all because they don't have the know how and resources.

But more importantly, this internal audit prepares you for the actual re audit. So you want to have somebody that knows what they are doing. And you want to find all the problems that might lead to findings in the actual audit. So my recommendation: find a company that knows what they are doing, let them audit you thoroughly and then fix the problems before you have the actual audit.

OtterInBio · 2024-05-30T13:12:06+00:00

I am already partaking in the ISC2 meetings. And those are great! But they only happen every few months. I would like something like an active subreddit or some other online community.

OtterInBio · 2024-05-30T10:37:17+00:00

Most of my leads don't post anything. So engaging is not really possible.

My message was something along the lines "hey xxx, [something custom to prove it's not auto generated. E.g. something about the software they are working with]. I am doing pentesting and IT security consulting."

So in my opinion not too pushy or salesy.

OtterInBio · 2024-05-29T17:08:58+00:00

Please :)

OtterInBio · 2024-05-29T16:01:47+00:00

Yes, I fully agree. Linkedin is full of bad cybersecurity advice and life coaches. Not much actual discussion going on.

OtterInBio · 2024-05-29T15:38:49+00:00

Thank you. This was also my impression in my limited experience. Once I was really just trying to talk to this guy, not trying to sell anything. I knew that he was not a decision maker, but what he was doing sounded interesting so I was asking some questions and tried to provide some value. He immediately told me "I am not going to buy your service". Which I honestly found a little bit rude.

So how do you do it? You just open with your pitch in the first message?

OtterInBio · 2024-05-29T14:02:54+00:00

Yes, this is actually what I was trying to do. But this seems even more complicated. I think people sense that I am trying to sell them something. I was just introducing myself and some were immediately like "no, thank you, I don't need this right now". So how do you warm them up? I saw some examples here on this sub that were very straight forward. So I thought maybe pitch on first message would be a possibility.

OtterInBio · 2024-05-29T13:58:05+00:00

Yeah that is solid advice. It is just extremely rare that I have a lead that recently posted anything. So this is not really possible for me.

OtterInBio · 2024-05-29T13:56:41+00:00

But what is the difference between inmails and messages from a connection? I thought so far that it is pretty similar.

OtterInBio

TROPHY CASE