Jeff Hoge

Cybersecurity leader, dad of 4, follower of One. VP of @TriadISSA. My tweets, including dad jokes, are my own.

[Jeff Hoge @JeffH_InfoSec]

When working in Linux, you can more or less read text files.

(yep, go ahead and unfollow me after that one)

[Jeff Hoge @JeffH_InfoSec]

@IDme How can I contact you for a potential business partnership? There are no advertised numbers for your organization, and multiple web form inquiries have come up short.

[Jeff Hoge @JeffH_InfoSec]

Come on @Microsoft... Why does modern Outlook (Mac client & "new" Windows client) not include the item count? Us Inbox Zero folks need this desperately.

[Jeff Hoge @JeffH_InfoSec]

Information Security, in a mature organization, is a function of Risk Management, not I.T.

Is the goal to make things work or to minimize risk?

[Jeff Hoge @JeffH_InfoSec]

@fectin @SwiftOnSecurity I’m considering working as a university faculty member later.

[Jeff Hoge @JeffH_InfoSec]

I'm considering a PhD Cyber program (favoring Dakota State). Has anyone attempted this, and if so, could you share realistic completion times and $ spent?

[Nicole Filippone, Autistic Advocate & Author @sensorystories_]

Ok, so I can actually explain why this happens... ready?

[Jeff Hoge @JeffH_InfoSec]

All meetings need a subject, agenda/objectives, and a set end time.

Without these elements, they aren’t meetings; they are hostage situations.

[Jeff Hoge @JeffH_InfoSec]

Microsoft 365 admins: If you are leveraging Azure AD Premium with password hash sync (PHS), why specifically would you still need to run AD FS (Federation Services) in your environment?

Thoughts are forthcoming.

#azuread #microsoft365 #adfs #office365 #activedirectory

[Jeff Hoge @JeffH_InfoSec]

Artificial intelligence taking air travel…?

Bold move, OpenAI.

[Jeff Hoge @JeffH_InfoSec]

@chereese @Tw1sm Yesssssss!! Congratulations Chereese!

[Jeff Hoge @JeffH_InfoSec]

@PicturesFoIder 40+20 = 60
7+8 = 15
60+15 = 75

Now ChatGPT knows how I do math. 🤫

[BSides Buffalo @BsidesBuffalo]

SPEAKER SPOTLIGHT: Our third speaker of the afternoon in Track One will be @JeffH_InfoSec, continuing the Active Directory theme with "Mitigating (Radio)Active Directory".

[Jeff Hoge @JeffH_InfoSec]

@_sysengineer OSINT challenge?

[Jeff Hoge @JeffH_InfoSec]

Geese are the most malicious threat actors in existence.

They are Canada’s APT.

IYKYK.

[Jeff Hoge @JeffH_InfoSec]

Makes me cringe: When marketers describe "Zero Trust" as a remote access protocol.

I realize ZTNA is set up as a secure alternative to VPNs, but every solution I've seen encapsulates traffic over IPSec or TLS, just like modern RA-VPNs.

I must have missed that Zero Trust RFC.🤷🏻‍♂️

[Jeff Hoge @JeffH_InfoSec]

One time as an IT leader, I had a developer in tears because they heard a sysadmin reference needing to perform a “sanity check.”

“Make sure I’m not insane” != “Make sure my data is sanitized” … most of the time, at least.

[Jeff Hoge @JeffH_InfoSec]

@DM3k_tech Tell the user to keep dialing 0 until they reach the desired party.

[Jeff Hoge @JeffH_InfoSec]

@scrumtuous Turbo Pascal, circa 1994.

[Jeff Hoge @JeffH_InfoSec]

@ECCOUNCIL I've been trying to renew my annual membership fee for the last few months and am getting the same error, regardless of payment method or browser. I tried calling customer service several times, only to be dropped from queue. Who can I speak with to take my money?

[Jeff Hoge @JeffH_InfoSec]

Too much security is nearly as bad as no security.