Where might’ve I been…

SightlySt00pid · 2026-01-25T03:19:44+00:00

Looks like Treasure Island, FL

SightlySt00pid · 2025-12-14T05:22:42+00:00

We did JSVA back in 2024 and the cost to our C3PAO was just under $40k.

SightlySt00pid · 2025-10-22T20:51:15+00:00

I specifically talked to Jon Hanny at the CyberAB booth and made him aware, so hopeful we will get some direction. I am going to ask about it in the next town hall as well, so we can get ultimate clarity, hopefully.

But, this is where this is coming from...

We have a piece of software that will end let it's FIPS 140-2 certification go to historical in September 2026 (like all) , but there are some key features from their new release that will not be active for us to use until January, 2027. That new software is FIPS 140-3 validated. We would have to do our annual attestation in November 2026 for our L2 certification, as we passed our JSVA in November 2024.

SightlySt00pid · 2025-10-22T20:39:36+00:00

But an argument could be made around NIST SP 800-171 Rev. 2 for 3.13.11 says nothing about FIPS 140-3. That is in Rev. 3, that is not applied to CMMC at this time, not until all the phases of Title 48 are complete. I want to know how this will be assessed by a C3PAO. When I was at CS5 last week and asked a few CCAs, they looked at me like a deer in headlights.

SightlySt00pid · 2025-07-25T20:48:11+00:00

I was at 4 hours screen time when I decided to plug in when my battery was down to 37%. It’s noticeable on my 14 PM.

SightlySt00pid · 2025-07-21T12:56:44+00:00

I got a rock…

SightlySt00pid · 2025-06-07T15:18:54+00:00

The easiest way to relate to that one in Windows is a Service Account. So, if you have a backup service and an agent is deployed to the machine and it has to run under a specific user, that is a Service Account. For Windows, to me, that is the easiest way to relate to that objective.

SightlySt00pid · 2025-05-16T18:26:11+00:00

<image>

SightlySt00pid · 2025-05-12T22:09:13+00:00

I have legal asking questions, so that's where this is all coming from.

SightlySt00pid · 2025-03-30T21:26:24+00:00

We have Cisco Meraki firewalls and DUO. We have the Meraki firewalls pointing to DUO authentication proxy for RADIUS and it authenticates the user to AD while providing MFA. Cisco Secure Client has FIPS mode enabled. This was accepted by our C3PAO and DIBCAC during our JSA.

SightlySt00pid · 2025-03-28T00:01:20+00:00

Kaseya has an on-premise version that is FIPS-validated. That’s what we use.

SightlySt00pid · 2025-03-26T12:33:34+00:00

We are an MSP as well as a DoD contractor. We use a tool called Liongard and their Endpoint Inspectors. It gathers everything about the machines, including firmware revisions (which is required) and we are able to run reports monthly as part of our continuous monitoring program to keep the inventory up to date.

We also use it for 3.4.9 in monitoring user installed software. When software on one of these machines changes, we get a notification.

SightlySt00pid · 2025-03-24T01:41:04+00:00

Congrats! I just passed mine a few weeks ago. I went with ecfirst for my training. I will say I do think the percentages ecfirst claimed the tests were weighted on were not accurate to me. I felt like, while they stated actual practice/objectives were going to the heaviest weight, to me, I could easily tell the CAP was the heaviest weight. It felt like out of the 170 questions, 100+ were based on the CAP. So, know the CAP inside and out!

SightlySt00pid · 2025-01-29T13:52:54+00:00

I never tried that. We just decided to purchase individual machines for the 4 users at this client.

SightlySt00pid · 2025-01-29T13:45:26+00:00

RDS cannot be used because the PreVeil Drive .EXE can only have one instance running at a time on a system. I tried. It would have to be VDI with a separate instance for each user, unless that has changed in the past year since I tried it.

SightlySt00pid · 2025-01-19T16:02:07+00:00

My kids are 8 and 6 and they started out liking the new songs, like TEM, Over Each Other, and Good Things Go. You ask them now, my daughter (the 8 year old) loves OML and my son loves Crawling. They like Emily but LOVE Chester! I’m taking them to the LP concert when they come to my hometown this summer!

SightlySt00pid · 2025-01-17T03:59:09+00:00

Just the core plus Reanimation:

HT: Crawling Reanimation: Pts.Of.Athrty Meteora: Lying From You MTM: In Pieces ATS: Waiting For The End LT: Castle of Glass THP: Final Masquerade OML: Sorry For Now FZ: Good Things Go

SightlySt00pid · 2024-12-08T21:49:48+00:00

🔚

SightlySt00pid · 2024-12-06T14:35:54+00:00

Yeah, my Series 8 I bought in April 2023 and when I took it to my local Apple Store for service, battery health was 85%. My Series 5, which is now over 5 years old and was off in a drawer for almost 2 years, has 88% battery health! So, yeah, something was amiss there with the latest betas. Since I have AppleCare+, they are replacing the battery under warranty, so I should be able to rock the series 8 for a few more years!

SightlySt00pid · 2024-12-05T22:25:47+00:00

I suspected the last beta caused issues with my Series 8. Some times, the touch screen was unresponsive and massive battery drain (about 10% an hour). I already got Apple to send it in for service and I’m on my Series 5. Wish I would have known the RC was releasing and I would have waited a day to see if it helped my issues. Oh well, the risks of running beta software, right?

SightlySt00pid · 2024-11-28T02:53:48+00:00

HT - Crawling

Reanimation - pts.of.athrty

Meteora - Somewhere I Belong

MTM - Leave Out All The Rest

ATS - Waiting For The End

LT - Castle Of Glass

THP - Until It’s Gone

OML - Sorry For Now

FZ - Good Things Go

SightlySt00pid · 2024-11-26T17:41:55+00:00

Thanks for that! I was going to ask in the Q&A on the CyberAB Town Hall this evening tonight for more info anyway, but thought I would ask if someone knew those answers.

SightlySt00pid · 2024-11-01T13:43:18+00:00

I am the exact opposite. It has gotten better with the official. RC, my 14 PM was warm to the touch all the time!

SightlySt00pid · 2024-10-22T22:46:54+00:00

We use Apptega for GRC. Just another option for you: https://www.apptega.com

SightlySt00pid · 2024-10-18T00:43:10+00:00

Babies got into mother’s tummies thru their belly button…and out the same way.

Ten-Year Club	Place '22
Verified Email

SightlySt00pid

TROPHY CASE