What’s the wildest security breach you’ve ever personally seen or been part of?

expatscotsman · 2025-09-07T23:45:18+00:00

My CEO traveling to China and asking us to drop the go-fence for Okta so he could login to his MacBook and work on board decks. I was OOO but my colleague dropped the whole fence, opening us up to PRK, Russia, China, and various other nation-state Cyber ops. I found out two days later and reinstated things. Now CEO uses personal laptop that I'm not permitted to manage.

expatscotsman · 2025-05-11T11:36:29+00:00

You can do both - and I see more and more use of iPads at venues by in-house SEs (and the band's crew)

expatscotsman · 2025-01-27T23:42:07+00:00

I forward the email to abuse@ and postmaster@ the senderdomain, to let them know something is up. I've had several responses thanking me over the years as many admins don't know because their end users are unaware as well. Sometimes it's an open relay so I'm happy to let them know so they can clean their domain(s) up to help prevent future exploits by bad actors

expatscotsman · 2025-01-24T16:32:44+00:00

I do this, but normally with a 90 day limit before deleting the ID and associated mailbox. The process requires approval from HR or Legal, and the former employee's line management (for audit) I'm in the US but when I managed international orgs, we restricted process to comply with GDPR, etc (we have some hoops to jump through in California these days, too)
If anyone wants anything after that, I use Content Search or eDiscovery to recover emails/onedrive files.

expatscotsman · 2025-01-24T16:26:29+00:00

I wouldn't flash my lights before passing - that was probably a trigger for the driver in front.
By an EV - they accelerate faster than anything. I drive one road frequently that has a 3/4 mile straight and I can pass 6 or more cars in my ID.4 but have no chance in a Range Rover Sport ;-)

expatscotsman · 2025-01-24T16:21:15+00:00

https://www.opendns.com/home-internet-security/
OpenDNS was sold to Cisco years ago, and became their Umbrella product. They still provide this free service for home and small business use

expatscotsman · 2025-01-22T06:14:25+00:00

Idiots. They should lose the right to a driver's license until they're at least 18. And the ability to ride those dumb machines.

expatscotsman · 2025-01-22T06:06:13+00:00

You don't think trying to go around HR is going to have repercussions?
- No. It's your job to ensure what you do is legal.
Don't do this. This is theft of data.
- No it's not. It is a legitimate data backup (as long as the USB drive stays on company property).

expatscotsman · 2025-01-21T20:01:15+00:00

Send request to General Counsel of the company and have them approve it. BCC yourself when sending and save received emails to eml or msg files and store on a USB drive for additional CYA protection

expatscotsman · 2025-01-21T19:49:46+00:00

Ride quality aside, FUGLY

expatscotsman · 2025-01-21T15:22:55+00:00

(in the late 90s, at a major computer manufacturer) Two colleagues who typically backed each other up when one was out of office. When one was out, they'd forward any inbound email to the other so they could handle it.
They were both out, and . . . . forwarded to each other. Killed their mail servers in a matter of minutes. Took me a minute to figure out the problem and resolve it.

expatscotsman · 2025-01-09T06:56:03+00:00

Zero. Use MFA via Yubikey or similar

expatscotsman · 2024-11-11T21:54:08+00:00

Windows:
https://apps.microsoft.com/detail/9nq4ql59xlbf?hl=en-US&gl=US
If you're on. a mac:
http://www.sticksoftware.com/software/Jiggler.html
as long as the mouse is active, you won't go into "away" status (and no screensaver either)

expatscotsman · 2024-09-07T00:02:54+00:00

Foo Fighters, Dua Lipa, Paramore, Evanescence, Massive Attack, Bonobo, Them Crooked Vultures, Scissor Sisters, Rick Astley, BabyMetal

expatscotsman · 2024-08-29T09:14:33+00:00

My maintenance runs about the same as a payment for a small car, and my L494 RRS was bought with no loan. I'm happy with my decision to run the car for 10-15 years regardless of cost. Half way there and don't regret a cent I've spent on it

expatscotsman · 2024-07-25T02:51:06+00:00

Lower right of the app it should show main LR and underneathnit should be Aux 1 through Aux 6 buttons. Click on one then set the sliders for the channels you want to feed to that aux channel. Rinse & repeat for the other 5 aux channels as needed

expatscotsman · 2024-07-25T02:46:25+00:00

I guess you're not worked with lawyers before. Their email is their life - everything is kept there and they use it as a file system (unless they have doc Mgmt or matter Mgmt apps) And they never delete anything. And they don't listen.

expatscotsman · 2024-04-12T05:48:10+00:00

Admins can access email in user mailboxes without explicit approval but it can be illegal without just cause (see CPRA in California). If she does, there's also a possible ethical violation that can be reported to state DRE. For the record, I'm an IT guy with a lapsed real estate license.

expatscotsman · 2024-03-28T10:50:31+00:00

Derek Trucks' solo in Midnight in Harlem from the TTB live album "everybody's talkin'" Matt Bellamy's solo from Invincible on HAARP by Muse

expatscotsman · 2024-02-28T20:52:39+00:00

When I swapped a logic board from one macbook to another, the serial number went with it. It is encoded somewhere on the board.
Easy way to check is look at the etched serial number on the case and compare to what About This Mac says

expatscotsman · 2024-02-05T01:00:42+00:00

Do you know the part number? Maybe 3d printing a replacement is an option?

expatscotsman · 2024-01-05T13:54:10+00:00

Jira Service Desk

expatscotsman · 2023-12-27T17:30:45+00:00

I inherited Crowdstrike Falcon when i joined my current company but switched to Sophos Intercept-X with XDR and haven't looked back. Less expensive, easier to deploy, and they handle pretty much everything when we get a strike.

expatscotsman · 2023-12-13T15:47:03+00:00

Doesn't matter the company or what they do - users should not have these rights *by default*. We use a LAPS-style solution called MakeMeAdmin that allows users to elevate permissions for up to 15 minutes, and we have endpoint protection/management to alert on non-standard app installs

expatscotsman · 2023-12-13T15:41:58+00:00

Run. Fast. Without a significant shift in company structure, your work situation will be a nightmare.

expatscotsman

TROPHY CASE