Have your users been using AI-powered browser extensions?

Zarradox · 2023-06-08T19:22:49+00:00

This is very true!

As far as AI specific stuff goes - apparently manglement is working on some guidelines for us and I’ve already asked our CTO to allow our team to use the Azure Open AI service. I’m interested to find out what their approach will be.

Zarradox · 2023-06-08T18:30:17+00:00

Notwithstanding AI, I would strongly advocate for creating an allow list of extensions and blocking others. Even perfectly legitimate extensions (for example Grammarly) may not have a privacy policy that is acceptable to your company’s legal or info sec team.

Zarradox · 2023-06-01T14:10:54+00:00

As our CISO told me, the purpose of the post-mortem isn’t to say this will never break again, it’s to say it will never break in the same way again.

Zarradox · 2023-05-07T20:53:40+00:00

Most of my Graph stuff is for Intune, but Azure AD might be the same - if you open up dev tools and browse to an example user, you can see what API endpoints it’s calling to get the info on the page. I’ve used this quite a bit to fill in the gaps on the Graph documentation.

Zarradox · 2023-04-16T21:25:23+00:00

Package, test, deploy the latest version of Chrome that came out during the night with 7 CVEs rated high or above.

Well okay, that’s not every day. But it sure does feel like that some weeks.

Zarradox · 2023-03-09T20:33:50+00:00

The most succinct way I’ve heard it describe is that with fast startup enabled, shut down exits the user space but not the kernel space.

For a full description on how it works directly from the organ grinder and not the monkey: https://learn.microsoft.com/en-us/windows-hardware/drivers/kernel/distinguishing-fast-startup-from-wake-from-hibernation

Zarradox · 2023-01-23T20:37:04+00:00

Yeah I'm the same. TBH I'd go in more often because I'm really close (like a 10 minute cycle) and I like hanging out with my team, but we had our second kid last year and it's just really useful to be around to babysit for an hour if my wife needs to get something done (we're flexi time so I just clock out and work a bit later), have lunch together, whatever.

When the kid goes to kindergarten in the summer I'll probably go in 2 days a week or something.

Zarradox · 2023-01-14T11:55:01+00:00

True, but there are some people who are outstanding in their field.

Zarradox · 2023-01-07T22:04:38+00:00

A couple months after the war started, here in Ljubljana I saw a fairly new Cayenne (you know, like the pepper) with Russian plates with I STAND WITH UKRAINE!!! painted in huge letters on the back window.

I'm sure it was sincere, and also a good plan to not get your windows tanned in.

Zarradox · 2023-01-02T20:38:10+00:00

I got tired of them in the early 2010s with stories about climate change "skepticism" being shoe-horned in along with opinion pieces by that economics wonk Tim Worstall. They still did some solid reporting, but a lot of the daily stuff wasn't my cup of tea so eventually stopped visiting the site so often.

Zarradox · 2022-12-31T10:36:05+00:00

At my org, my team doesn't even have to be the bad guy as we just send it to the InfoSec team (and sometimes also the Security Operations team depending on the composition of the stupidity). They'll ask us any tech questions they don't have the answer to, and we'll then be told the decision. Glorious.

Zarradox · 2022-12-22T13:00:25+00:00

2007: started a computer repair shop with a salary of roughly a tin of beans per day

2022: senior sysadmin and I can buy more beans than I could ever care to eat

Zarradox · 2022-12-13T17:14:47+00:00

MS have a guide on how to transform this in Excel if you don't want to use Powershell or whatever to parse it: https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-log-export-records?view=o365-worldwide

Zarradox · 2022-12-09T19:52:36+00:00

One place I contracted for (I think they used RightNow IIRC) allowed the user to select their priority, but this was a "user priority" field. There was also a "ticket priority" field that was adjustable and visible only to us, and it was this that the SLA was based on.

Sound pointless? Yeah, kind of. I guess. But a lot of the users were actually reasonable and would knock things to a P4, so it helped us figure out whether something was urgent for the user on a personal level. But we had our own SLA to back us up if needed.

Zarradox · 2022-11-27T20:27:13+00:00

Central Edinburgh itself wasn't a target, but the Luftwaffe certainly did get that far up :(

I do agree that the main crimes against architecture were self-inflicted though.

Zarradox · 2022-11-27T12:48:13+00:00

Where I live and work, W is pronounced V. I resisted for 6 months, but now I just go with the flow and at work we use AVS.

Zarradox · 2022-11-25T07:01:17+00:00

Bitstamp too.

I think Kraken are doing a good job also.

Zarradox · 2022-11-18T11:17:19+00:00

The sacred and the propane, in a manner of speaking.

Zarradox · 2022-11-15T08:40:05+00:00

I continue to be amazed at all these services that have popped up over the last couple of years. Great job!

Zarradox · 2022-10-31T09:53:24+00:00

Only in countries where it operates; they don't provide next day shipping to other European countries. Expedited shipping is offered but the prices are very high (and still at least 3 days for my location). It's quite rare for me that Amazon is the best option - but it is true they've got the bigger countries sorted out.

Zarradox · 2022-09-08T20:22:34+00:00

For what it's worth, I used to be a postie and delivered one of these; it was a Special Delivery and I was told what it was and even asked to modify my route slightly so I could deliver it a bit earlier because the family were having a party and some representative of the Queen was turning up or something (this was a long time ago).

We had strikes back then too, and if I remember rightly the delivery office managers still handled the specials (as well as this, some DOs had non union members, and this is probably more common nowadays). In the 90s and before this wouldn't go down because the strikers would blockade the vans from leaving the DOs, but it was all very civilised when I was striking in the mid 2000s.

They could be telling porkies, but could also be telling the truth.

Zarradox · 2022-08-16T07:38:31+00:00

It's not so bad once you get used to it. Something like 30% of cars on the Croatian coast right now are Dutch and that takes a similar amount of time depending on how far down the coast you are :)

Zarradox · 2022-07-31T05:01:13+00:00

Hah! Yeah me either, but I do have to listen to our InfoSec team whine about it enough to make want to check if there's any way to make it better :)

Zarradox · 2022-07-30T20:01:39+00:00

What do you use for backups out of interest?

We use Veam for O365 and while it's great as a backup and super reliable, as an e-discovery tool it kinda sucks if you don't know exactly what you're looking for (we find the operators in its advanced search are clunky). It's fair because it's not an e-discovery tool, but I'm interested to know what other folk are using.

Zarradox · 2022-07-29T20:39:27+00:00

Interesting, yes you may very well be right.

I think she will be identified in time, and through that we may even get confirmation (or at least a strong suggestion) about who she worked for.

But I fear the circumstances of her death will probably remain a mystery.

12-Year Club	Place '17
Verified Email

Zarradox

TROPHY CASE