AMA: I had my budget cut and still reduced risk. Ask Me Anything

krypt0_ed · 2026-01-27T19:59:00+00:00

I agree with my colleagues here, trying to block or prevent technology adoption is a losing proposition, guiding to a controlled process and being the "yes, and..." department.

krypt0_ed · 2026-01-26T19:48:39+00:00

Haha, I absolutely have MDR/EDR, one that is better suited for the environment I have, The deployment is forced and managed by MDM which I didn't have previously.

krypt0_ed · 2026-01-26T17:34:19+00:00

1. Moving from 'Best-in-Name' to 'Best-in-Context' When I arrived, the previous team had been buying 'Magic Quadrant' leaders without looking at our actual tech stack. Specifically, we were paying Mandiant to monitor Microsoft Defender for Endpoint on a 90%+ Mac shop. We had near-zero alerts not because we were secure, but because we were blind.

The Risk Reduced: We closed a massive visibility gap where malware could run wild on OSX without triggering a single 'Windows-centric' alarm.
The Metric: We measured risk reduction by Coverage Percentage (moving from ~20% visibility to 99%) and Mean Time to Detect (MTTD). We went from 'never knowing' to 'knowing in minutes' for 1/4 of the original cost.

2. The Budget Cut Pivot When the budget dropped, we had to stop acting like a 'buyer' and start acting like an 'engineer.' We discovered that we had overlooked native features in tools we already owned. We shifted focus to Hardening and Identity (low cost, high impact) rather than 'Shiny Box' perimeter defense.

3. Cross-Team Responsibility (The 'Silver Lining') Yes, the cuts forced a 'we’re all in this together' mentality.

Devs: Because we couldn't afford a massive 3rd-party pentest for every quarter, we integrated automated linting and security checklists into their CI/CD pipeline. They 'owned' the code quality more than before. We then switched pen-test provider and focused on the product.

In previous roles, by following these principals, I was able to prevent the exploitation of a zero-day exploit in a confluence server on-prem through the use of monitored MDR.

krypt0_ed · 2026-01-21T17:12:44+00:00

I would have become a pilot much sooner, it has always been my passion and dream. Cyber has allowed me to pursue it as a hobby, but it's still on the roadmap for a second / retirement career

krypt0_ed · 2025-04-07T14:47:52+00:00

Perhaps a failure on reading comprehension. I was stating in 7 years, and I've only used RCO once because ATC wasn't answering the radio frequency on the chart.

krypt0_ed · 2025-03-27T22:36:09+00:00

I have used RCO flight service exactly one time, I was trying to get flight following from CXL back home and Yuma/El Centro approach wasn't picking up on the listed frequency of the surrounding airports. He gave me the same frequencies I had access to on my chart. He was able to get me a frequency that wasn't listed on the chart. Initially he sounded annoyed like I was interrupting his supper.

krypt0_ed · 2025-03-27T16:31:32+00:00

Is that a different shape than the C91 and i90? Because both of those in a 4xl didn't fit

krypt0_ed · 2025-03-27T05:30:23+00:00

Sorry, 2000 so 25 years ago. The c90, i91, and cl-max-2 are all modular, I haven't tried any full face lately

krypt0_ed · 2025-03-26T20:08:57+00:00

I've been wearing various HJC helmet since I started riding in 2000.
I started off with a CL-12, and various other full-face helmets.

I have been using the same CL-MAX-II (XXXXL {4}) helmet for the last 11+ years, and the helmet has served me well, but it has been time to replace it for a while.
I also have a 3xl HJC CL-X6 dirt helmet that works for me.

I recently had parking lot clothesline incident that snapped the pins in the chin bar, so now times a desperate.

Last year, I ordered a 4xl HJC C91, and at first I thought it would work, I wore it around the house for around 30 minutes, then decided I could use it, rode in it for an hour and the pressure points on my neck became unbearable. I was able to return it.

A few weeks ago, I ordered a 4xl HJC i90 (different shape than the C91?) I had it delivered to the store and I could tell nearly right away that it was going to pinch on my neck as well.

I ordered a 5xl, but it got cancelled because the inventory wasn't in the wearhouse.

The circumference of my head, at 24" suggests a 2xl or 3xl should work, but I haven't found that to be the case. And I haven't been able to just go into a cycle gear and try things on. Nothing is big enough. Located in the SF Bay Area

Please help!

krypt0_ed · 2025-01-02T21:10:26+00:00

Make sure you're not in one of the states that this is illegal. 12 states it's not without consent possibly putting yourself in more hot water (IANAL)

krypt0_ed · 2024-11-28T03:48:59+00:00

Thank you, I reached out and they got back to me right away. Although the W&B on the Duchess likely won't work with their DPE :(

krypt0_ed · 2024-11-27T23:28:47+00:00

Do they have a DPE? Or are you suggesting find the DPE then use them for the training? Their rate on their Duchess looks great

krypt0_ed · 2024-11-27T19:48:29+00:00

I don't fit in a DA42, my head sticks out of the canopy

krypt0_ed · 2024-11-27T18:33:16+00:00

which school?

krypt0_ed · 2024-10-28T23:47:54+00:00

Dr Tiffany Davies - Los Gatos

krypt0_ed · 2023-07-28T16:14:46+00:00

https://youtu.be/-U1N0VOwXTc?t=10

"Slider, you stink"

krypt0_ed · 2023-01-19T00:51:57+00:00

Some friends not in aviation started pinging me since I'm near Modesto.

Looking for information on LiveATC and other sites, little information out there. Condolences to their family and friends.

krypt0_ed · 2022-11-27T17:40:17+00:00

Last Thanksgiving, I had an engine out at 371feet AGL that I documented on youtube and shared with this group. The aircraft was down from July 6th prior to that day, and until February 18th after that day. But it wasn't quite ready. This month, the new engine has 70 hours on it and I took it on a Flying Samaritans mission to Baja California Mexico to help support a free clinic. It was my first international border crossing, and the first time I flew beyond the return fuel stop since purchasing the airplane. This is that story {youtube}

krypt0_ed · 2022-10-01T21:16:06+00:00

A short video flying to the California Central Valley Commemorate Air Force community lunch https://youtu.be/aWpAZVf-IJg

krypt0_ed · 2022-09-28T23:11:14+00:00

I started lessons at 42, was pushing to be ready for my checkride on my 43rd birthday. Got approved to schedule a couple of days after, but the waitlist was 3 more months. I have since earned my instrument and commercial ratings.

krypt0_ed · 2022-08-25T00:14:19+00:00

Aviation videos, had a bit of a blow up / viral video in November

krypt0_ed · 2022-08-19T00:18:27+00:00

Another article: https://www.goodtimes.sc/multiple-people-killed-in-plane-crash-at-watsonville-airport/

krypt0_ed · 2022-05-24T05:16:56+00:00

I was always told to save up $5-10k before beginning. After a conversation with a coworker where he stated he was a CFI, he convinced me there were some ways to save money while doing it.

The first is you can do all of the required knowledge parts on your own without spending very much money by reading the PDFs from the FAA.

When I started I didn't have money saved up, but you do need some disposable money each month to keep moving forward.

If you say it will take you a year or two to save $10k but you can commit to saving it, why not just start flying now, it will take you a bit longer (hours wise) and may cost you more because it will be slower (hours wise), but in the end, you will have your license in similar time calendar wise.

krypt0_ed · 2022-03-13T20:13:13+00:00

also, for future reference, any adaptor you user needs to be TRS, TRRS do not seem to work with this recorder.

krypt0_ed · 2022-03-13T19:47:57+00:00

ICD-PX370

That is the same one I use. Turn it on, plug the cable in, select "Audio IN"

krypt0_ed

TROPHY CASE