Nic Miller

You'll mostly find me under @aedileco for cyber stuff.

[Nic Miller @nic_miller]

@JoshuaH91885517 @merill And then let your device config or security baselines do most of the heavy lifting.
CA can then mean apps, including SSO SaaS apps, are restricted to company owned devices.

[Nic Miller @nic_miller]

@JoshuaH91885517 @merill Also device compliance can really just be a substitute way of saying company managed. It's flexible enough to meet BYOD etc, but if you have locked down the ability to Intune join devices to your tenant then you can set a minimal compliance policy (AVand bit locker)

[Nic Miller @nic_miller]

@GossiTheDog @TheCyberSecExp I'm not sure they're planning on trips to Disneyland?

[Nic Miller @nic_miller]

@GossiTheDog @TheCyberSecExp Why are they disrupted if Doxxed?

[c0nc0rdance @c0nc0rdance]

In 2018, "Parachute use to prevent death and major trauma when jumping from aircraft: randomized controlled trial" was published in the British Medical Journal.

It sought to determine if wearing a parachute when jumping from a plane had any impact on survivability.

It did not.

[Nic Miller @nic_miller]

@justatad

[Shane @shane_cyber]

🎉🎉'Require authentication strength' has appeared in Microsoft Conditional Access today! Why does this matter? 🧵👇#mfa #cyber #azuread #conditionalaccess

[Nic Miller @nic_miller]

@RobertMLee How are they getting hold of staff personal numbers like that?

[Nic Miller @nic_miller]

@el_jasoon @awakecoding @GossiTheDog Lastpass enterprise works well. You have the ability to store notes as well as passwords, which you can use for SSH keys etc. Can permission to groups of users etc so not just all tied to one individual account

Storing them as excel is exposing you to lots of diff risks.

[Nic Miller @nic_miller]

@lkarlslund @clomok Set an exclusion folder that you're running the 'trusted' stuff from. Ransomware as a category probably includes human operated ransomware, meaning they're tagging some of the tools used by the operators too.

[Nic Miller @nic_miller]

@HackingLZ *Laughs in finance*

[Nic Miller @nic_miller]

@ericgeller @GossiTheDog If you locked the account after X attempts, you could potentially DoS an entire Org through failed login attempts. Rate limit and block IP works but just becomes whack a mole. If you rate limit and prevent all logins then possibly production systems go down when no one can access

[Nic Miller @nic_miller]

@movinglagosian @VessOnSecurity @GossiTheDog Don't ever go work in a big finance organisation then :) macros are the beating heart of most finance

[Nic Miller @nic_miller]

@x1jdb @MaskedDefender @JamesHLeet @mattyglesias American industrial production and Soviet lives.

[Nic Miller @nic_miller]

@DamselflyPhotos @craigajohnson @airercode500 @Clarkezone Except how do you secure a personal device without invading the users privacy? Mobiles are possible but modern EDR tools of Windows are going to be far too invasive from a privacy perspective. You'd never be able to justify collecting that level of data

[MR @MarcusRashford]

Just heard @spectator are planning to run a story on me tomorrow about how I have benefitted commercially in the last 18 months…To clarify, I don’t need to partner with brands. I partner because I want to progress the work I do off the pitch and…(1)

[Nic Miller @nic_miller]

@cameronhunter I can't lie - my first reaction was all about that hair :O :P

[Nic Miller @nic_miller]

@JessicaIngrey Congrats on your offer, glad some common sense prevailed! The downgrading is pretty farcical all round, many are going to be unfairly penalised. Hopefully universities change their requirements accordingly and show some flex.

[Yorkshire Tea @YorkshireTea]

*Watches video*

*Closes tab*

*Burns computer*

[Nic Miller @nic_miller]

Check out my latest article: The top 5 mistakes CEOs make on cyber security, and how to avoid them https://t.co/hVQg2ldOvp via @LinkedIn