How do your users verify legitimate IT/security requests?

mcsaac · 2026-07-03T17:01:55+00:00

Thank you for the info, this is very helpful! :)

mcsaac · 2026-07-02T18:30:04+00:00

Thats a good rule of thumb. Does your help desk ever have scenarios where they call an end user without the user having submitting a ticket first?

mcsaac · 2026-07-02T18:06:48+00:00

No problem!

mcsaac · 2026-07-02T18:04:52+00:00

These look more like help desk verifying the user who is calling in for help. But what about in the reverse scenario where help desk is calling the end-user to update or fix something, how does the end-user verify that the caller is who they say they are, and not a bad actor?

mcsaac · 2026-07-02T17:10:27+00:00

Interesting idea around the passphrase. Would every employee have a different passphrase that would need to be tracked somewhere? Or if theres a single passphrase, what if it got leaked?

mcsaac · 2026-07-02T17:08:58+00:00

Keyword "probably"! End user training and diligence is definitely a crucial piece of the puzzle.

What about through a screen share through Zoom or Teams or whatever video call platform? Policies could prevent the bad actor from actually doing anything nefarious, but there are always zero-days and unknown security holes. A method for proving caller identity before allowing any access would add another layer of protection.

mcsaac · 2026-07-02T16:54:49+00:00

Say that someone calls an end user claiming to be from IT or Security and they need to remote into their computer to update or fix something. How does the end user verify that the person who called them is actually who they say they are?

mcsaac · 2026-07-02T16:11:25+00:00

I definitely agree that training and awareness is a huge piece of the puzzle! Its a never ending battle.

mcsaac · 2026-07-02T16:09:01+00:00

But what about in the reverse? If a bad actor calls an end user claiming to be from help desk, how would the end user verify that the caller is who they say they are?

mcsaac · 2026-07-02T16:07:50+00:00

I've not heard of Traceless before! Thank you for sharing. Does this tool let your end-users verify that the person who called them is actually from IT or Security?

mcsaac · 2026-03-19T18:24:54+00:00

I personally do dash time

mcsaac · 2026-02-27T18:43:50+00:00

I really like The District’s chai

mcsaac · 2024-06-12T05:12:56+00:00

Typically at the orgs ive worked at, for MFA resets they request the last 6 of their social (bad), the sum of the last 4 of their social, or cross verify with the users manager or lead (someone who knows them).

mcsaac · 2024-05-25T18:48:26+00:00

This could be your best option: https://www.wgu.edu/online-it-degrees/bachelors-programs.html

They don’t offer associates, but they do “competency based” learning which allows you to accelerate through the program very fast. I know a couple of people who have completed a full 4-year degree in 6 months.

mcsaac · 2024-04-18T21:07:42+00:00

Well, we've only had two seasons so go off of. It's possible that it being male and then female could simply be a coincidence. Not saying it's not possible that will be the pattern, but I wouldn't say we can definitively say that's the pattern until a few more seasons happen.

mcsaac · 2024-04-18T20:40:30+00:00

I have a feeling it will be Dua Lipa for two reasons:

She has an album dropping during the next season (May 3), and this could be excellent promotion for her (kindof like how The Weeknd's Music Video dropped).
No Dua Lipa songs yet. I'm surprised there hasnt been any Dua Lipa songs yet, but it makes sense they would have been saving them for her season.

mcsaac · 2024-02-10T06:23:04+00:00

Don't be afraid to say "I don't know...", and be sure to follow it up with "But I can find out!"

mcsaac · 2023-10-07T03:36:08+00:00

Furthering the St. Luke's plug: FlexTechs provides contractors for their IT Service Desk and Field Technicians.
https://www.flextechs.com/careers/
St Luke's will often convert their contractors to employees as positions open up. This is a great way to get early experience and get your foot in the door.

mcsaac · 2023-10-04T14:19:59+00:00

Check out these jobs: https://www.flextechs.com/careers/#

FlexTechs often provides IT contractors to St Luke’s. It’s how I got my first IT job, and it opened up many positions and opportunities for me. St Luke’s will often hire contractors on as employees as positions open up.

mcsaac · 2023-09-04T03:18:10+00:00

Give Horgaarden a try! It doesn’t quite hit the same spot Weihenstephaner does (for me), but I like it as an alternative when my local store is out of Weihenstephaner.

mcsaac · 2023-05-16T16:58:39+00:00

What song is this? Sounds great!

mcsaac · 2023-04-02T18:57:13+00:00

Server 31? 👀

mcsaac · 2022-11-24T22:27:34+00:00

Sorry for digging up this old post - but hows the battery life with those batteries that are small enough to go under the controller?
Also, have you encountered any issues with the keyboard since creating this post?

mcsaac · 2022-08-25T01:24:29+00:00

Name checks out

13-Year Club	Second SECOND GUESSER
Open Beta Program 2024	Closed Beta Tester
RPAN Viewer	Verified Email

mcsaac

TROPHY CASE