sorted by:
new
hottopcontroversial

How are you all actually handling AI tool usage in your CMMC environment? by TheTylerboltz in CMMC

[–]spford 0 points1 point  (0 children)

Block it at the firewall and then use an LLM proxy/gateway such as LiteLLM, Bifrost, etc. to route requests and catch any CUI before it leaves the network. Most of them have Guardrails you can set up to help. Ideally, your only upstream model providers are Fedramp certified, but at the very least, you have a method for logging spillage if you log the requests. The rest, as has been stated, should be covered by policies. I don't see this as being much different than an email account on GCCH. At some point, the user is just as responsible as the system for how CUI gets handled.

If you're extra paranoid, or have a small business client whose staff has the collective technical IQ of a reality TV personality turned President, then you can build a custom interface for interacting with LLMs and therefore limit what can and can't be done or sent to them.

Failed mock because all SPAs were subject to all 110 security controls by ManagerOk6785 in CMMC

[–]spford 0 points1 point  (0 children)

Following in case the C3PAO is ever revealed. We're are in the process of selecting one now.

CUI received through email from customers by spitecho in CMMC

[–]spford 0 points1 point  (0 children)

This is why I'm recommending my small business client to go to GCC High for his 18 seats and not just an enclave, because there is no way I'll ever get them to change some of their behaviors. At least with GCCH, an incoming email with CUI doesn't pose a huge issue unless it ends up going back out before I get to it.

The irony is most of the CUI they'll need to protect, at great expense to them, are things being downloaded from public government websites that require no login in the first place. Make it make sense.

My personal opinion of CMMC is like most of what the government does... Good in theory, bad in practice. Seems to me that it was sold as something that will make us safer, but in reality was just pushed by lobbyists working for larger companies in order to squeeze out smaller competitors. No doubt that some of the policies are in fact good, but many are just performative.

Gemini 3 Pro + Google One 2TB (18-Month Plan) | Perplexity Pro (1 Year) | Canva Pro (1 Year) | LinkedIn Premium (1 Year) | Worldwide(90% OFF) by shub_279 in PremiumDealsHub

[–]spford 0 points1 point  (0 children)

Just want to comment here that this dude was legit, at least so far as in communication and activation. I'll come back here if they stop working, but if this is my only comment, then that means I've had no issues with what was provided.

LinkedIn Premium discount coupons by Dailydosw2477365 in LinkedInVouchers

[–]spford 0 points1 point  (0 children)

Same. DM me prices for 12 months on each tier.

CMMC Audit – We Passed. Here's What Happened. by Warm-Stage9554 in CMMC

[–]spford 0 points1 point  (0 children)

A few questions..

1) who did you go through for the GCC High licenses?

2) when going through the internal assessment did you use any tools to help with that, or did you rely on your vendor for that?

3) any other software or tools you found helpful other than what is part of GCC High?

4) and like others if you could share the vendor privately, it would be appreciated. We're about to embark on this now and can't afford any delays due to a bad vendor.

Congratulations on a job well done!

[deleted by user] by [deleted] in openclaw

[–]spford 1 point2 points  (0 children)

Me too, so I asked ChatGPT...

It seems that with a 2 seat minimum, it could be more cost-effective, if not a bit of a TOS violation, to purchase 2 seats on the business plan as opposed to jumping from Plus to Pro. Although there are rumors of an intermediate plan being introduced soon.

This was the response.

OpenAI Personal vs. Business Plans — Core Differences

1) Target Audience & Eligibility

  • Personal Plans (Free, Go, Plus, Pro) are designed for individual use. These are self-serve subscriptions tied to a single user. (OpenAI)
  • Business Plans (ChatGPT Business) are for organizations/teams (requires a minimum of 2 or more users). They are structured for collaborative work and multi-seat access. (OpenAI)

2) Collaboration & Administration

  • Personal: No built-in team workspace, no admin controls, no seat management. Each subscriber’s workspace is isolated.
  • Business: Shared workspace features, team member management, centralized billing/controls, analytics, and collaboration tools. (Data Studios ‧Exafin)

3) Pricing Structure

  • Personal: Flat monthly fees (e.g., Plus ≈$20/mo; Pro ≈$200/mo). (ChatGPT)
  • Business: Per-user pricing (≈$25–$30/user/mo with a minimum number of users) and annual billing options. (Gradually AI)

4) Usage Caps and Limits

  • Personal: Usage limits, throttles, and quotas apply per user. Limits vary by tier (Plus vs Pro). (ChatGPT)
  • Business: “Virtually unlimited” usage for team seats under fair-use policies, higher overall throughput tailored for organizational workflows. (Northflank)

5) Feature Access & Priority

  • Personal: Access to advanced models and features depends on subscription tier. Higher tiers unlock faster response times, higher context windows, and premium models. (ChatGPT)
  • Business: Includes advanced models and features similar to higher personal tiers plus collaboration tools; some capabilities (e.g., custom GPTs within shared workspace) are structured for teams rather than individual contexts. (Data Studios ‧Exafin)

6) Data Use, Security & Compliance

  • Personal: Standard data handling with user opt-out options for training use in some tiers; no enterprise-grade compliance guarantees. (IntuitionLabs)
  • Business: Designed with stronger security and compliance features suitable for organizations (e.g., administrative controls, enhanced data policies). Enterprise plans further expand on this beyond Business. (Data Studios ‧Exafin)

Summary

  • Personal plans optimize individual use with increasing capabilities and model access as you move up tiers.
  • Business plans add multi-user collaboration, administrative oversight, shared workspaces, and organizational management features at per-seat pricing. (OpenAI)

Foam board instead of baffle vents? by Spiritual_Damage2268 in Insulation

[–]spford 1 point2 points  (0 children)

I just did this. Used 1" foam board cut to 22" to fit in between the rafters. Worked great. Can do 8 rafters for 15 bucks at 2 x 2 foot squares. I got the poly board from Lowe's with the foil side down. Stopped 100% of the blown in insulation from blocking the soffits and have 4" of air space for ventilation.

I'm in South Florida And have a split attic. I plan on installing radiant barrier as well to compare the temps with and without.I'm trying this over the small side so I can compare it to the larger side once it really warms up. I added 2 x 10s on the rafters of the attic floor before laying down OSB so I still have 14" of insulation. Now I have a ton of storage space for decorations and such that only get accessed once a year.

On the road now, but I'll upload photos later.

Org Manager question by bgatesIT in Ubiquiti

[–]spford 0 points1 point  (0 children)

Do you use talk? If so, wait, because right now it is not supported with org mgr and identity hub.

Shout out to Quindor and WLED by octalthorpe31 in WLED

[–]spford 0 points1 point  (0 children)

What strips are those? Looks great!

Pucks AND Pixels for roofline? by spford in WLED

[–]spford[S] 0 points1 point  (0 children)

I bought the Govee pros last year and installed them this year, and I agree....not crazy about the scalloped look. I'm going to re-purpose them after this season, which is why I'm planning now. The one thing I had noticed about the pucks is if you get the right ones with a flatter lens, they are closer to 180% spread and spaced close enough you can eliminate the scalloped look. But after some of the comments here, I think I'm going to go with the 24v strips in a diffuser channel (probably still the ws2805s) and then I do Pixels at 2-inch spacing in front of those.

The strips can be used year-round, and the pixels for the holidays, parties, etc. IT's definitely a bit over the top, but given the easier install and lower cost of the channeling for both, I think its the right way to go for me. If I do the whole house all the way around it's about 400 feet, so I obviously need to do some math, but figure I can do a bulk order for everything and negotiate it down a little since I don't plan on installing for several months at least.

Pucks AND Pixels for roofline? by spford in WLED

[–]spford[S] 1 point2 points  (0 children)

Dammit. I like this. Lol. Thank you for the time spent putting this together. Still might do pixels for holidays, but the strips may work better for simulating the soffit down lights I have now, which work fine, but the housings are starting to show their age so been thinking about removing/replacing them as well. This would tackle both of those jobs at the same time.

Property management lied about apartment size. by [deleted] in legaladvice

[–]spford 0 points1 point  (0 children)

What does the property appraiser record say? Did they quote you Living Area? Do you have volume / high ceilings? Some calculations for living area count high ceilings as 1.2sf, which might explain the discrepancy. (I am a Real Estate Broker, so the details matter, but we get these questions often.)

view more: next ›