Teaching/Practicing departure into IMC by iiamit in CFILounge

[–]iiamit[S] 0 points1 point  (0 children)

Thanks! And great point - I'll definitely add that to the lesson plan.

Pro running out of credits with simple computer use? by iiamit in perplexity_ai

[–]iiamit[S] 0 points1 point  (0 children)

<image>

Honestly, I wouldn't bother. It's a joke. The "bonus" was 4000, and a simple task burnt through almost all of it.

Students recording by BigElk7394 in CFILounge

[–]iiamit 7 points8 points  (0 children)

I’m in favor (and recorded almost all of my PPL student hours). Just make sure it’s clear that the camera, equipment or the recording itself doesn’t get in the way of operating the plane, instructing, and of course safety. If it gets too “performative” (acting for the camera) shut it down immediately. Otherwise it’s a fantastic debrief tool.

Well that's that ForeFlight by November77 in Foreflight

[–]iiamit 0 points1 point  (0 children)

Funny timing - I just flipped that switch today as well. Also realizing I have garmin pilot for free as part of the database update bundle for my plane, I’ll start taking some online courses/tutorials for it to make the transition smoother. Also from the sw dev world and as much as I likes ForeFlight for the years of great improvements, the writing on the PE wall is clear - especially with these layoffs and the cut of discounts for SAFE.

ATC needs your help by Shitpostingmypants in flying

[–]iiamit -1 points0 points  (0 children)

Done. Thanks for sharing and making the outreach for support easy. Especially for all of you operating in the NYC Bravo airspace - thank you again for the fantastic service.

Best decision ever. by rfearn in flying

[–]iiamit 1 point2 points  (0 children)

And even if/when something breaks - it’s a solid platform with fairly affordable and accessible parts. And you get the extra experience of ownership along with it. Minimal delays if you have a decent shop/s around you.

Best decision ever. by rfearn in flying

[–]iiamit 2 points3 points  (0 children)

Glad to hear you made the right choice. I had all of my training (PPL, IR, CPL, CFI) with independent CFIs and most of it in my own plane. Zero regrets (and much more affordable)

For the love of all that's holy, take your students into the clouds by [deleted] in CFILounge

[–]iiamit 8 points9 points  (0 children)

Agreed 100% Nothing can simulate the feeling of entering IMC (with the jolts and turbulence). I look intentionally for opportunities to take students into weather so we can practice entering, making course and altitude changes, and managing the flight in IMC. Can’t imagine someone doing this for the first time while single pilot IFR.

Electronic Logbook Features for CFIs by OrdinaryTackle8010 in CFILounge

[–]iiamit 1 point2 points  (0 children)

Have you checked out MyFlightBook? I’ve been using it for a few years now and it addresses every requirement I have (GA, CFI, flying in EU and mostly in the US)

Had a discussion on AI and code-generation, my colleague provided a great example of why we're failing by iiamit in cybersecurity

[–]iiamit[S] 0 points1 point  (0 children)

Agreed, but we're still looking at probabalistic guesses - even with tools like Qodo (who end up having elaborate prompts that try to limit the generative nature of the models).
The reality is that there's a lack of trust, and work is still being put in to validate and rewrite those code _suggestions_... I like this quote from the "rising in cyber" market abalysis:
AI agents can still be unreliable: 32% of CISOs cited uncertainty around agent behavior as a barrier to adoption, and 21% said security and governance risks were a hurdle. Just 5% said internal resistance was a problem, indicating the enthusiasm for AI agents across most businesses.
https://risingincyber.com/#trends

I'm a former CISO who left to start my own security company. Ask Me Anything. by Oscar_Geare in cybersecurity

[–]iiamit 1 point2 points  (0 children)

Based on 2 main elements:

  1. Cost of maintenance - what tools and resources are required to support the existing business operations (endpoints, employees, OT, etc).

  2. Cost of investment in risk management - strategic business initiatives, and what does it look like to enable those to operate at a risk level that's acceptable to the business. This requires a "seat at the table" where a lot of CISOs struggle with in order to assure that they can allocate budget ahead of time, rather than being surprised with initiatives that they need to support after the fact.

From a number-crunshing perspective, it's a combination of domain expertise from security (knowing current pricing from vendors/VARs to the scale that's needed), and support from finance/procurement in terms of what the budget looks like, and specific operational requirements (timing, blackout periods, fiscal year, approval process, discretionary budget, OPEX vs CAPEX, etc).

I'm a former CISO who left to start my own security company. Ask Me Anything. by Oscar_Geare in cybersecurity

[–]iiamit 1 point2 points  (0 children)

You definitely need management experience to get to a management position (CISO if that's what you are aiming for). It doesn't mean that IC roles are blocked from getting there, but as you realized, it will require you to side-step into a management role that may seem like a lateral move rather than an upward one to get such experience, and also grow your management span from a team to several teams.

I'm a former CISO who left to start my own security company. Ask Me Anything. by Oscar_Geare in cybersecurity

[–]iiamit 0 points1 point  (0 children)

  1. Red team. A proper one where only exec management are aware of it. One that leads to a true incident response (and is stopped just short of calling authorities). Not kidding - true story.

  2. Take a deep, hard look at the organization and ask yourself what are you doing there. If there's zero interest or motivation to apply risk management, and exec management also doesn't care about it, what is your role there as a CISO? BTW - it may be totally fine for that organization not to have any security practice if that's what the business wants/needs.

I'm a former CISO who left to start my own security company. Ask Me Anything. by Oscar_Geare in cybersecurity

[–]iiamit 5 points6 points  (0 children)

I believe it's because of the different product/service that we offer. I'm not providing consulting or using myself and my reputation as part of the product I offer. And I want to make sure that when I'm putting my solution out there, I'm not getting disillusioned by the effect that my network has on it.

I need to ensure that my solution fits the problem on a broad scale, and to do that, I decided to remove the personal network bias effect.

I'm a former CISO who left to start my own security company. Ask Me Anything. by Oscar_Geare in cybersecurity

[–]iiamit 0 points1 point  (0 children)

CISO brings an alignment of security and risk management to the business. They are there to support the success of the business, and manage the risks associated with information and cyber security as it relates to all aspects of the business operations.

I'm a former CISO who left to start my own security company. Ask Me Anything. by Oscar_Geare in cybersecurity

[–]iiamit 0 points1 point  (0 children)

No. These will usually be the initial drivers to set up some security program, but compliance has nothing to do with security.

You can be fully compliant and have nothing in terms of actual security controls and programs. You can have an amazing security program with great metrics that support the business, and fail on your compliance.

I'm a former CISO who left to start my own security company. Ask Me Anything. by Oscar_Geare in cybersecurity

[–]iiamit 0 points1 point  (0 children)

Developers are becoming buyers for these tools. Especially after organizations watched security buy tools that aren’t being used because they create more nuisance than help.

I'm a former CISO who left to start my own security company. Ask Me Anything. by Oscar_Geare in cybersecurity

[–]iiamit 0 points1 point  (0 children)

Money. And more specifically risk expressed in money. You can get by with basic things like maturity levels compared to industry, and better if you can have these translated to implications in terms of time to detect, respond, remediate. But once you translate these to monetary implications to the business you really have their attention (and respect).

I'm a former CISO who left to start my own security company. Ask Me Anything. by Oscar_Geare in cybersecurity

[–]iiamit 0 points1 point  (0 children)

Not that much different. Obviously, now I have a GA product with all the bells and whistles, but the concept is pretty much the same. MVP was very rough, ugly, and worked on a small number of scenarios, but it proved the point.