OneFishTwoFishRedFishYouPhish (parody sec dog)

I'm a dog and how did I get here. If I wasn't a dog my opinions are my own and not my employers.

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

I increasingly feel like the vast majority of CyberSecurity issues stem from poor governance and management of existing technologies. You can do a lot if you have the culture to tighten controls and enforce least privilege. #riskmanagement #CISSP #CyberSecurity

[Joe Stocker @ITguySoCal]

Remember the days when things were much easier for sysadmins? @techspence

dsquery user -inactive 7

Compare this to the madness of Graph PowerShell to do the same thing 🤦‍♂️

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

@NathanMcNulty Yo, you guys gotta renew your domain IMO.

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

@CisoDisabled I've seen one before. It worked like this, MSSP uses Azure Guest accounts for SSO so they control the password. Password is controlled by Delinea secrets server. The customer gets the Delinea logs. Customer can remove the guest account to revoke access at any time and has logs.

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

@InfoSecGreyBrd

[Zain Kahn @heykahn]

ChatGPT has 180,500,000 users.

But most of them are stuck in beginner mode.

Here's the ultimate cheat sheet to use chatGPT like a pro:

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

@AccidentalCISO This is how we end up with Cisco AMP and McAfee :(.

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

@EricaZelic Yeah, Physical machines are where the majority of my concerns are. VDIs and VMs should be trivial once you can get your laptop working.

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

@EricaZelic Now how many of you want to tell me your address so I can uh ensure the compliance of your hard currency?

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

@EricaZelic Gl doing that when it won't boot. Either way someone gotta go hand hold all those users.

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

@EricaZelic 43

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

I've been saying this for years. As a former consultant, companies get the security they deserve.

[Mick Douglas 🇺🇦🌻 @bettersafetynet]

"For security reasons, we will be sending your username and password in separate emails"

This is absolute clown show security theater.

Know what? We (as an industry) get the security outcomes we deserve.

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

I just put in my two weeks' notice today. Goddamn it feels good. I don't think I'll ever return to the financial sector again. It's not all companies and people but there is a higher-than-average amount of people devoid of ethics or morals in the financial sector. #CyberSecurity

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

@arekfurt I just spent 18 months fighting an organization of 3000 people to put MFA on all SSO platforms. It was the hardest project I have ever worked on but it was worth it .

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

@bettersafetynet @UK_Daniel_Card The best change management process I've ever had was one where the ITSM tool had an API. I then had a bunch of .sh scripts that I could use to create said change for boilerplate conditions I'd pass into the script.

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

@bettersafetynet It's true, former Network Engineer for 10 years. Def some people into fur thangs. A LOT OF THEM WORK FOR ISPs.

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

@arekfurt If you say this out loud though, you're a pariah.

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

@InfoSecGreyBrd The security guy in me dislikes this is a real thing. The business analyst in me thinks that's an amazing ROI. Just amazing.

[OneFishTwoFishRedFishYouPhish (parody sec dog) @OnePhish]

@bettersafetynet Glad to hear his health is good :).