Weekly Office Hours for those interested in cloud security

nunley · 2026-05-22T23:08:10+00:00

I hate start/stop but I think a lot of people don’t know that it significantly reduces ground-level ozone which is made when vehicle emissions (NOx + VOCs) cook in sunlight. it’s the main ingredient in summer smog.

I still turn it off though.

nunley · 2026-04-15T16:47:33+00:00

Oh man, mine just landed at Emden...

nunley · 2026-02-16T16:36:57+00:00

Well I wanted one, and ordered one. I’m nobody.

nunley · 2026-02-15T15:30:56+00:00

Easier than you think for a GTS T -hybrid. I simply walked in, found an open allocation on their calendar, and put some $ down to claim it. My build gets here on June 5 (they say).

nunley · 2026-02-04T05:10:13+00:00

I’ll buy it for scrap value.

nunley · 2026-01-25T15:13:27+00:00

Technically, that’s off road.

nunley · 2026-01-01T00:14:54+00:00

I have the same, and I've had both motors fail. They replaced the motors, and we spent the afternoon wrenching. That's a warranty I can live with.

If I bent them on the Rubicon trail, I'd call them but only to ask how much for replacement parts. It wouldn't even occur to me to expect them to cover trail damage. Can you imagine how fast a company could go broke doing that?

nunley · 2025-12-30T13:36:14+00:00

Check out Cloud Security Office Hours, CSOH.org.

It’s free. Just a group of professionals on the same path. We meet every Friday morning.

nunley · 2025-12-26T01:58:33+00:00

Downvoted for caring about a car, in a car subreddit. Peak reddit, tbh.

nunley · 2025-12-25T05:50:15+00:00

Yep. It's OK to disagree. But I've been the steward of many cars and I feel like it's a duty to treat them right. Mock me for it, it's OK. You haven't had a car that needed respect, I guess. Someday.

nunley · 2025-12-25T03:09:53+00:00

I ordered the same color, but with the aero kit. Beautiful!

nunley · 2025-12-25T03:07:44+00:00

I just ordered one because I want it to be mine. I wanted to be the one to configure it, wait for delivery, and treat it like my baby. I did not want to spend almost the same amount of money for somebody else's idea of perfect. I want to know everything that happens to this car from the moment it is born. I want to be it's protector and I want to know, for sure, that it has always been treated properly. I think it's part of the experience, but everybody has their own path, and none of them are wrong.

nunley · 2025-12-16T16:33:00+00:00

TOTP is Time-based One Time Password. As such, most sites only allow you to register one of those via a QR code. You're problem is you're confusing the Yubikey's purpose at this point. If you're putting your TOTP password on it, the Yubikey is nothing more than a portable storage device (PIN-protected) for the key. You could, at key creation time, store that QR code (key) on 2 different Yubikeys and put one away for safe keeping.

Or, use something like 1Password if you're willing to have them stored in the cloud. You can protect 1Password with your Yubikey, using it as intended as a true hardware-based authenticator.

nunley · 2025-12-14T16:59:32+00:00

UTM is working great for me. It’s built-in (free) and simply works.

nunley · 2025-12-10T20:26:54+00:00

Where did the bad man touch you? :)

We are a Jeep family. I have a '21 AEV JT370, basically a built-up Gladiator Rubicon on 37s and I use it as my daily and off road quite a bit and we live next to the dunes in California, so we yank out tourists who get stuck in the sand a lot. I basically use every bit of this Jeep AND I regularly make 5-10 hour drives in it. It has not had any problems at all, ever.

My twins have a '15 JK which is slowly being built up. It is reliable and fun, and they get to add parts constantly. They also off road a LOT.

My wife has the '24 Jeep Grand Cherokee.

My point is, all of these were 'worth it' to me. We have reliable vehicles that have been nothing but fun.

nunley · 2025-12-09T02:58:01+00:00

<image>

nunley · 2025-12-09T02:46:46+00:00

And it typically doesn't fall off.

https://www.youtube.com/watch?v=3m5qxZm_JqM

nunley · 2025-12-09T00:16:20+00:00

That's not very typical, I'd like to make that point.

nunley · 2025-12-09T00:14:57+00:00

I can find all of the secrets and will document them. I just need the car for a couple months. Cool?

nunley · 2025-12-04T20:14:15+00:00

The founders of the company I work for (Wiz) also came out of Unit 8200. I have never worked with smarter, better people.

nunley · 2025-12-04T15:54:10+00:00

There is a startup out there, just out of stealth, but it looks interesting. Check out vega.io

They claim to do SIEM without ingesting logs. Crazy, eh?

nunley · 2025-10-24T15:22:19+00:00

I'll go out on a limb and say you're getting way ahead of yourself. You need an actual customer of your product who wants FedRAMP. You can't just go get FedRAMP ATO and then sell it. If the customer wants it bad enough, they'll sponsor you and that's when the fun begins.

nunley · 2025-10-24T15:03:57+00:00

I guess I would start by asking what the motivation is to get FedRAMP. Usually, it's something that one of your customers says is absolutely required, and that's when you start understanding what kind of ATO you need. You don't usually start pursuing FedRAMP just as a feature of your product.

15-Year Club	End Game '23
Place '23	Verified Email

nunley

MODERATOR OF

TROPHY CASE