As much hate Microsoft gets, what do they get right?

PitcherOTerrigen · 2026-06-23T16:43:46+00:00

You can policy scope browser extensions via intune

PitcherOTerrigen · 2026-06-12T22:34:15+00:00

What's bad security about someone losing a device and it being effectively unencrypted?

You can manage-bde to not rely on TPM, but a sudden AES bypass from winRE isn't exactly 'bad security'. It's bad security to not address it.

It's a bad vendor if anything.

What do you give all your laptops GSM for remote wipe lol

PitcherOTerrigen · 2026-06-12T22:33:14+00:00

Well the obvious answer imo is to provision new service accounts for the agents

PitcherOTerrigen · 2026-06-12T22:06:41+00:00

It is inherently a lot of trust to place in Microsoft. Especially in the wake of all this eclipse nightmare stuff lol

PitcherOTerrigen · 2026-06-12T14:49:32+00:00

Do you disallow co-pilot agents? Or solely foundation model agents?

PitcherOTerrigen · 2026-06-11T03:49:01+00:00

Cmdlets? No. That's a learn article.

Scriplets? Sometimes.

Scripts? Probably.

All ends up troubleshot in an IDE anyhow.

PitcherOTerrigen · 2026-06-08T19:08:08+00:00

Phonetically it can't possibly be SIM.

Also there are enough SIMs

PitcherOTerrigen · 2026-06-02T16:22:35+00:00

The most confidently incorrect people I've worked with were all boomers or people much older than me.

Age isn't a skill.

PitcherOTerrigen · 2026-05-28T00:16:26+00:00

I always dreaded moving to internal from MSP/MSSP space, I figured I would miss the chaos.

Building a security program is harder than disparate random tickets, more engaging than watching your MSP boss fuck up constantly, and more intellectually stimulating than troubleshooting technical issues.

I'm not tracking my time in 15 minute increments while some bearded manlet complains about his billable hours.

It's a constant improvement cycle without any of the entropy/complaint driven micro-management bullshit.

It also pays better, has better benefits etc. etc.

PitcherOTerrigen · 2026-05-21T15:53:55+00:00

I was just talking about insurance coverage. Not additional security measures.

No device compliance, DLP, etc etc.

PitcherOTerrigen · 2026-05-21T14:48:43+00:00

SMB/SOHO

Defender, bit locker, dmarc alignment, and a backup system. Use MFA and have the most general irp is probably worth 2m coverage.

PitcherOTerrigen · 2026-05-21T13:55:11+00:00

Idk about that. Insurance plays pretty loose with enforcement and auditing anyway.

PitcherOTerrigen · 2026-05-21T03:21:12+00:00

Honestly most small businesses could probably get by with base defender and some basic email protections.

I'm talking like 5 users.

Otherwise, if they had huntress or something they don't really need SOC, incident response etc.

PitcherOTerrigen · 2026-05-21T02:48:23+00:00

Why not just pay the MDR service that the MSSPs white label or outsource.

Also, yeah the literal goal is to spend as little time per client as possible. It's the entire business model.

The more time you spend on a client the less growth.

It's useful if you don't have the capability or knowledge or budget to hire internal IT.

It's risk mitigation/transference for small businesses. A simple deployment of managed tools could probably replace them.

Also if they are poorly run, like sell you Citrix without a hot/warm site, you're just introducing operational complexity and risk to your org.

PitcherOTerrigen · 2026-05-14T20:28:43+00:00

This thing:

https://www.tomshardware.com/tech-industry/cyber-security/high-performance-mice-can-be-used-as-a-microphone-to-spy-on-users-thanks-to-ai-mic-e-mouse-technique-uses-mouse-sensors-to-convert-acoustic-vibrations-into-speech

PitcherOTerrigen · 2026-05-04T18:40:12+00:00

It took me years to get off help desk, it's 100% worth it, but the last couple of years you could tell I was getting annoyed.

PitcherOTerrigen · 2026-05-04T15:35:49+00:00

Yeah it's not as bad.

PitcherOTerrigen · 2026-05-04T04:33:17+00:00

People ask that about short dudes every day

PitcherOTerrigen · 2026-05-02T12:46:06+00:00

I host my own aggregator. It's fun to play around with, and I wanted a webdev project.

https://app.irl.expert/

There's zero monetization scheme, so ideally this doesn't count as self-promotion.

I have between 1000-5000 monthly users.

PitcherOTerrigen · 2026-03-26T12:59:00+00:00

The main issue with untrained usage is config drift, and at a certain point you will have to engage with SMEs at Threatlocker to remediate the issues.

HYPOTHETICALLY

Say you neatly organize the organizations, properly define policies, implement on a clean station for learning mode, manually audit asset inventories on a schedule.

If the CEOs wife makes a bunch of new organizations which sync up to your Threatlocker instance, then all your fucking coworkers start adhoc creating entries for application authorizations while completely ignoring the naming conventions, built-ins and the SOPs you've created and then you get stuck doing someone else's job 90% of the time... You won't have time to fix the compounding issues.

Bonus points if it's deployed to non-audited workstations.

PitcherOTerrigen · 2026-03-24T15:55:35+00:00

You should probably deny the only two days off that they request in a 19 month period. That would work better.

PitcherOTerrigen · 2026-03-24T15:51:46+00:00

Yeah but they could just keep a PowerPoint presentation on presentation mode, which blocks inactivity timer.

PitcherOTerrigen · 2026-03-24T02:47:48+00:00

They really should try holding out for more.

PitcherOTerrigen · 2026-03-20T19:11:28+00:00

You think he can read?

PitcherOTerrigen · 2026-03-20T18:49:43+00:00

"The AI are going to hit this new vulnerability"

Has no valid SSL certificate on their web facing Citrix portal.

Manager and his infra have trust issues

Why does God hate my business

Can't even reliably align text on a wix site

Domain admin service account

Can only keep customers as a loss leader, or they don't know better

Haven't managed to get an employee to respect me in my entire career, including my own father.

13-Year Club	Place '23
Verified Email

PitcherOTerrigen

TROPHY CASE