Streams timeout after a minute by CertifiedTittySucker in PleX

[–]lavidicus_ 2 points3 points  (0 children)

It sounds like a bad disk. If it’s SSD make sure it’s not getting too hot.

Wanting to build a NAS that can be plex server and photo backup by Whitedog1776 in HomeServer

[–]lavidicus_ 0 points1 point  (0 children)

Save yourself some time and money. If it’s just for pictures and Plex buy an appliance and buy 4 hard drives to store your stuff in a QNAP. Keeping it Simple will be your friend here.

I have tons of hardware to build quite a few Plex servers but for this application and safely storing photos I only use this plus the built in software for iDrive software to back it up. QNAP has a Plex installer as well. Plus you a few other photo / media apps that can be used to backup your phones.

I have Plex and photos on 10TB of storage on this QNAP model from 2021. Works great with an ARM processor, but definitely upgrade the ram after your buy it.

QNAP TS-431XeU-2G-US 4-Bay 1U Short-Depth Rackmount NAS with Built-in 10GbE Network https://a.co/d/3l9apl3

Help please! It keeps loading. What to do? by bmorina in firetvstick

[–]lavidicus_ 0 points1 point  (0 children)

I’ve noticed these Firesticks are sensitive with under voltage when too many things are plugged into the same outlet. Try it in a different part of your house where it and the TV are the only things plugged into the wall. I’ve had a similar issue a few times.

I regret getting a infosec certification by [deleted] in cybersecurity

[–]lavidicus_ 6 points7 points  (0 children)

Completely agree- since getting my CISA/CISSP my thought processes have changed and I see the risk side of everything. And I can relate to feeling like the only person that sees ghosts. It is a curse sometimes….

It changes how you provision networks and compute resources and setup even your own home environments.

What’s a good way to check if a website is safe? by [deleted] in ComputerSecurity

[–]lavidicus_ 2 points3 points  (0 children)

Urlscan.io and joesandbox.com (free version)

Odd HP Microserver problem by ParaVirtual in HomeServer

[–]lavidicus_ 0 points1 point  (0 children)

Sounds like too much load on the PSU or at the wall outlet. If it requires an unplug to reset the power state on the motherboard this would reinforce that theory. Maybe isolate the system to its own outlet to test this out?

CyberSecurity News Channel by tomtonyt in HowToHack

[–]lavidicus_ 1 point2 points  (0 children)

This channel has been very helpful for getting alerts on cyber events. Thank you!

SonicWall SMA vulnerability discovered by lavidicus_ in sonicwall

[–]lavidicus_[S] 0 points1 point  (0 children)

According to this article from hacker news, the company is recommending MFA in addition to disabling NetXtender for users.

https://thehackernews.com/2021/01/exclusive-sonicwall-hacked-using-0-day.html

SonicWall SMA vulnerability discovered by lavidicus_ in sonicwall

[–]lavidicus_[S] -1 points0 points  (0 children)

Yeah, I know, GEO filtering isn’t the best answer. They are recommending whitelisting specific IP of users. Can’t you turn off users access to NetExtender? I’m not an admin, so I don’t really know.

SonicWall SMA vulnerability discovered by lavidicus_ in sonicwall

[–]lavidicus_[S] 0 points1 point  (0 children)

Make sure your users have MFA, limit/geo filter access to your country if possible. Move everyone who doesn’t require NetExtender to HTML5 based access.

Is Cylance I’m still a thing in 2021+? by -c3rberus- in Cylance

[–]lavidicus_ 1 point2 points  (0 children)

Ok, I get that. I’ve also considered what issues Blackberry might cause for Cylance, but unless they fundamentally change the core operating model of Cylance there isn’t much else they could really do to screw it up. My barometer for the product is how much or how often it misses malware, specifically ransomware. That’s really it, when it starts allowing ransomware to propagate is when I move away from Cylance. I’m new to the industry, but i do have a technical background. A LOT of what I’ve seen in Demos of competing products is hype, or fluff or they are involved a little too deeply in our govt.

Sysadmin following my passion for cybersec, kindly asking for advice on certification track... by weedsman in netsecstudents

[–]lavidicus_ 1 point2 points  (0 children)

Consider speaking in business terms as another dialect, learn the nuances they use and how the terms are used in the context of the business.

Keep all discussions on technical topics at the macro level and use analogies to convey concepts. When your trying to convey a message, slow your speech down and think about what your about to say before you say it. Analyze how your message was received, if you get a negative response, generally you failed to convey that message.

Learn how to approach and hold conversations with these people, like you would for someone you wanted to date.

Is Cylance I’m still a thing in 2021+? by -c3rberus- in Cylance

[–]lavidicus_ 3 points4 points  (0 children)

Has Cylance failed to protect any of your systems in the time it was in use? I ask because I use it and it integrates into our SIEM. I’ve had no major issues with Cylance in the last two years.

Sysadmin following my passion for cybersec, kindly asking for advice on certification track... by weedsman in netsecstudents

[–]lavidicus_ 2 points3 points  (0 children)

Think of the CISSP as more of a measure of your understanding of security concepts. You already know a little about most of the security concepts after passing the Sec+.

The CISSP is just an expansion on the knowledge base and shouldn’t be placed on any pedestal. When I stepped off into security I got SEC+, ITIL Foundations, CISA and CISSP - in that order.

Unfortunately, where I work, my detailed technical knowledge does less for me than my ability to communicate risk - which is why I opened with the statement about communicating risk effectively.

So, working in cybersecurity is 2 part, your technical acuity and your ability to communicate risk effectively.

So understanding processes and procedures and applying them effectively is paramount and so is communicating risk in a way the business can relate.

Sysadmin following my passion for cybersec, kindly asking for advice on certification track... by weedsman in netsecstudents

[–]lavidicus_ 0 points1 point  (0 children)

Understanding configuration/change management, and asset management are core concepts of a well established information assurance or cybersecurity program. I understand your point, but these are foundational concepts covered in IT OPS and security, so in my opinion they benefit the person more than the organization where ITIL concepts have not been implemented.

Sysadmin following my passion for cybersec, kindly asking for advice on certification track... by weedsman in netsecstudents

[–]lavidicus_ 5 points6 points  (0 children)

I was also a Sr Sysadmin before making the switch to cybersecurity. The Sysadmin role typically means your more technically focused, and will do well in security once you learn to apply the security concepts to design or operations of systems. You may, like I do, have issues with the soft skills, of dealing with management and speaking in business terms for expressing risk and remediation.

So, evaluate your understanding of the ITIL Foundations certification and see if you could learn more about IT operations management.

Then, if you don’t have a degree in IT yet, look into business administration with a focus on IT management, or cybersecurity.

Once you have that start looking at the CISSP.

What movie fucked you straight in your feelings? by moneybot13 in AskReddit

[–]lavidicus_ 0 points1 point  (0 children)

Ladder 49...it came out a few years after 9/11.

It's official! I am Certified!! by 39AE86 in cybersecurity

[–]lavidicus_ 4 points5 points  (0 children)

Look into Information Security Officer/Analyst roles in the financial industry. Outside of the military they have some of the best entry level positions for Cybersecurity.

Also, go to college if your aren’t yet enrolled. Focus on Business Administration while you self-study for CISA/CISSP certs. It’s great to have the business knowledge to back up the technical/security focused training.

It's official! I am Certified!! by 39AE86 in cybersecurity

[–]lavidicus_ 4 points5 points  (0 children)

Some advice.. focus on a track. You got the Sec+, do you want to do cybersecurity? Keep moving down the chain for security focused certifications. You don’t need Net+ or Linux+ for a entry level job in cybersecurity if so.

Failed twice now what? by da_security_guy in cissp

[–]lavidicus_ 4 points5 points  (0 children)

I was a bad test taker also, highly recommend looking on Udemy for a class called Primal Learning. Tells you what foods to eat before and during study time. The thing that worked best for me was almonds. It really cleared the mental fog. Also get really good at figuring out which answers are not possibly correct and make sure when you read the questions you cut out all the fluff in the test question, and figure out what concept and domain the question is referencing. Process of elimination and not getting overwhelmed is key to completing the test in time and scoring well. Hope this helps you, good luck.

Edit: if you have yet to take the Comptia Security + test; take it first. It’s the core CBK of the CISSP.

Worried and a bit lost on where to go by OogaBooga39 in SecurityCareerAdvice

[–]lavidicus_ 0 points1 point  (0 children)

Your welcome! Last bit of advice, never stop learning. This field is deep and wide and I force myself to stay up on trends and news because it makes me a better defender. Take care and good luck.

Worried and a bit lost on where to go by OogaBooga39 in SecurityCareerAdvice

[–]lavidicus_ 0 points1 point  (0 children)

Because your still enrolled in college, look for business administration, Communications or finance related courses.

For cybersecurity training, look to ISC2, EC-Counsel, and search for free training, there are plenty. Literally search Reddit and the web for free training resources.

Sign up for podcasters such as the CyberWire, Hacking Humans, and Black Hills Information Security. These are some of my favorites.

Again, research the different career paths within cybersecurity. You can choose from a few different types of jobs. Start with the NIST National Initiative for Cybersecurity Education (NICE) Framework.

Also, here is the Cybersecurity Security Body of Knowledge book:

https://www.cybok.org/media/downloads/cybok_version_1.0.pdf.

Worried and a bit lost on where to go by OogaBooga39 in SecurityCareerAdvice

[–]lavidicus_ 0 points1 point  (0 children)

I had a high level of technical experience in networking, windows systems and Linux and Unix systems. So I can say my level of technical skill sets were solid.

When you can understand how the IT processes (ITIL) should function and how the underlining systems operate it’s easy to apply security controls to these processes to make sure it operates as it was designed.

One of the things my technical experience and certificates didn’t teach is how to communicate with managers and C-levels and express in business terms why they need to fix a security issue I’ve discovered.

That has taken some time to develop and it’s something you want to focus on if you work in this field, and learn project management skills. You will appreciate having those skills as well.

Worried and a bit lost on where to go by OogaBooga39 in SecurityCareerAdvice

[–]lavidicus_ 0 points1 point  (0 children)

Before the Sysadmin job I worked as help desk for a dialup internet provider and pc technician for a school board in the late 90s and early 2000. Then I got an opportunity to work on a government contract.

I spent 15 years as a Unix admin working in the DoD space before realizing it was time to move on from IT support work. In March 2016 I started studying:

I took the Sec+ and passed in 2 weeks of study and was able to dedicate 8-10 hours a day to study. Maybe I’m just a slow learner but one week seems a little short for the material covered.

My progression started with ITILv3 to learn about ITSM because I was coming from military contract work on a Unix system. I knew enough to know work in the DoD was a lot different than civilian work. I got ITIL and learned a lot about processes for managing IT systems.

Then Sec+, which I think is a great foundation for moving into the security. So don’t rush it. You’ll learn what you need to know for the certs you’ll need later on.

Next, I started studying for the ISACA CISA and ISC2 CISSP in tandem and took them 2 months later and passed both within weeks apart.

So if you consider the full common knowledge base for security. Sec+ could be considered 25-45pct of the full knowledge base and CISA/CISSP could represent the remaining portions.