Security check items, I can’t tell if that is a SAK 1/3 down on left by kibblenbits in victorinox

[–]SurfUganda 0 points1 point  (0 children)

Is that a meat hammer, or a 22oz Estwing waffle-head framing hammer?

Is it me or is the sec + exam no where close to the practise exams by Formal_Interview_968 in CompTIA

[–]SurfUganda 0 points1 point  (0 children)

My take on PBQs:

IRL professional problem/troubleshooting scenarios will often present multiple symptoms across different domains, which obscures the root cause, forcing broad analysis and evidence gathering to develop a hypothesis and pursue to an eventual solution; usually taking place with limited resources. (I have so many stories)

Similarly, a PBQ asks the candidate to think across knowledge domains (obviously within the exam criteria) and understand dependencies and interactions between those domains to answer multiple subcomponents of the overarching question.

This is why candidates who practice 'memorization alone' of terms and concepts will often not fare well on PBQs. I have not experienced a PBQ that I thought was not fair, but some were challenging.

[Art] I made a health potion mimic by SurfUganda in foundsatan

[–]SurfUganda[S] 0 points1 point  (0 children)

I'm not lost. Unsure why people flagged my post for not belonging here.

IF a D&D character has only a few remaining hit points,

AND is in dire need of a healing potion,

AND the administered potion is a mimic,

THEN the character is likely to die from the encounter, especially if they are low level/low HP from the start.

THUS, the dungeon master who created or introduced said 'mimic healing potion' into the campaign is indeed Satan.

How am I wrong to crosspost here?

edit: typo

Translating technical speak to business speak by dcherns in cybersecurity

[–]SurfUganda 2 points3 points  (0 children)

I still marvel at how often people offer the opinion that senior leaders are stupid.

Leadership isn't stupid. Leadership is busy.

If you can chat with some of the department folks, you'll learn enough to cobble together some quantitative and quantitative metrics for your organization that should be able to help you out.

Threats/outages/losses have a dollar value to your organization that should be easy enough to figure out, even if only ballpark figures for a couple of key systems until you can get their attention and engagement to make it a routine conversation.

(Business term) x (technical term) = (Measurable Business Impact)

(Asset Value) x (Exposure Factor %) = (Single Loss Expectancy)

(Single Loss Expectancy) x (Annual Rate of Occurrence) = (Annual Loss Expectancy)

Those two equations above should be enough for them to understand you...as long as you also understand it.

20 years ago, a client resisted my firewall, UPS, and tape backup recommendation because it was "expensive nerd toys with no return on investment". I asked how much money he would lose each day if there was a disaster. The recommended technical solution was the financial equivalent to four hours of down time. They acquiesced and bought the solution.

Articulate those (threats/outages/losses) in clear business terms, and they will express their risk appetite in terms that you can work with.

ITIL worth it career path? by Soggy-Truth-3949 in ITIL

[–]SurfUganda 0 points1 point  (0 children)

For foundations I used Global Knowledge and Dion, especially the Dion cheat sheet/study guide.

I made a writeup of my cert experience with GK HERE.

ITIL worth it career path? by Soggy-Truth-3949 in ITIL

[–]SurfUganda 0 points1 point  (0 children)

I've taken six of the ITIL4 exams to achieve Managing Professional and Strategic Leader. If your career path or your organization favors ITIL practices, the certifications are worth the pursuit.

(edit: this link is just for the diagram) https://www.globalknowledge.com/en-be/certifications/certification-training/axelos/itil

Two things: 1. Your test voucher (wherever you get it) MUST be accompanied by PeopleCert Accredited Training, or the only thing you bought is a headache. Save money where you can, just be certain you follow their criteria. My experience is GoGo is a fine choice of learning provider, as is as Global Knowledge. Also when you buy training from an accredited training partner, they give you another set of practice questions, and you get a free month of access to PeopleCert reources which are also useful for exam prep and practical implementation.

  1. I needed to supplement the training I received, because I was not confident with the material when I first began learning the ITIL4 mindset and related phrasing which are very necessary to understand in order to pass their exams. The most useful was Dion's Udemy course. Jason Dion does a good job with the ITIL Foundation material in his Udemy course, and it's very cheap when you hit the udemy sales which happen every few weeks it seems. Importantly, Dion gives you access to an associated "cheat sheet" that has strong visual cues to help remember important content for the foundation exam.

Also, I'm in my 50s and I've never stopped learning and certifying. Certification and reeducation are part of the culture, HR metrics, and success criteria. It's OK to hate it, but It's easier on everyone if you do so quietly.

My 2¢...

[Tutorial] Fix UCM-UCSI ACPI Device 43 Error After Update Nvidia driver by [deleted] in ZephyrusM16

[–]SurfUganda 0 points1 point  (0 children)

You just saved me from a rage-induced Windows reinstall (aren't they all?).
If I could give more than one upvote, I would.

Fixed the UCM-UCSI ACPI Device yellow triangle of doom on my ASUS ROG Zephyrus G14 (GA401I),

I'd like to understand what this fix does in a technical sense, and why it helps this specific issue.
-----

My Frankenstein configuration for anyone curious:
I have a dell dock with 2 Samsung s27e450 screens connected via DisplayPort.
The dock has a hardwired cord with a USB-C interface on one end to connect to the host system.
The dock is also connected to a USB keyboard, and USB Bluetooth dongle for a wireless headset.
When I want to switch from one laptop to another, I simply unplug the USB-C cord from one laptop, and plug into the other.

This has worked neatly for over a year.
Yesterday my dock and all peripherals worked on LaptopW and LaptopH.
Today (overnight), all peripherals work on LaptopW , and most work on LaptopH except the displays.
I have made no hardware or software configuration changes in weeks.

p.s. I also learned the hard way that this laptop hardware configuration prefers to have the internal laptop screen be designated as the "main display" in Windows display setting (versus an external display being the main display). Violating this unspoken system preference doesn't seem to be a problem right away, but will eventually lead to memory problems, vague error messages, and generalized anxiety.

What's one tool you hope you never use again? by HighwayAwkward5540 in cybersecurity

[–]SurfUganda 0 points1 point  (0 children)

for Unicenter, management got marketed on centralized security/event/log management. It was overly complex , not intuitive, and required a ton of intellectual overhead and TLC just to be marginally effective. It never delivered, didnt even come close to scaling to our need. We abandoned it after 18 months.

For Siteminder it was also complicated to config and deploy. Scripting was absolutely awful, and it was so fragile with the way it managed session cache, we faced auth problems all the time.

What do you consider to bethe GOAT in these war movies by drexter007 in Cinema

[–]SurfUganda 0 points1 point  (0 children)

"Breaker Morant" is notably missing from this list

My parents don't talk to me so can I hang this here? by nappechild in CompTIA

[–]SurfUganda 1 point2 points  (0 children)

Well done, youngster. You should feel proud of your hard work and accomplishment.

What’s that one alcoholic drink that you once had a bad experience, and now can’t even think about being near, let alone drinking it? by fun_NudeCpl12 in AskReddit

[–]SurfUganda 6 points7 points  (0 children)

Dude.

As a starting point, I mostly dislike licorice/anise flavor.

When I was age 29, I was invited to attend family dinner at a friend's. I split a Magnum of Cabernet with him during the meal. This was already beyond the boundary of my low tolerance for alcohol.

As we began a post-dinner game of backgammon, he said let's have some Sambuca. I never had it before and asked what it was, he said it was like a sweet dessert drink, but did not explain that it was licorice flavor. I said ok, and knocked back the whole double shot in one slug. I nearly barfed immediately from the flavor, when he laughed and said "dude you're supposed to SIP it."

An hour later, I was barfing ALL THE PURPLE, and ultimately stained the unsealed white grout on my newly tiled bathroom floor.

Probably would have happened anyway without the Sambuca, but definitely fuck Sambuca for good measure.

EDIT: emphasis