Dmitry Z

I rant about IT, Infosec, and things I find funny.
Security Architect at one of the biggest banks you've never heard of.

[Dmitry Z @dzag_]

I guess I'll crawl down this rickety hallway #defcon32

[Dmitry Z @dzag_]

@plaverty9 @CompassITC Huge fan of both! Congrats!

[Dmitry Z @dzag_]

The most celebratory error message I've seen.

[Dmitry Z @dzag_]

Boarding a plane to Las Vegas and 90% of the people are going to AWS Reinvent. Talking to strangers is way easier when you know the commonalities. Lots of random conversations.

[Dmitry Z @dzag_]

I got what has to be one of the best fraudelent emails in a while on a personal account today. I'm impressed because it transcends definitions. It's technically not a phish, it's a legit Paypal notification. Abuse of PayPal's request money feature I guess?

[Dmitry Z @dzag_]

@dontlook @GossiTheDog I think MS Authenticator can when tied to AzureAD. Duo at least shows you which app is requesting the push, so you can train users to look. If you're logging into "Payroll" and the app says "VPN" something is phishy.

[Dmitry Z @dzag_]

I'm surprised @Amtrak hasn't made a tiktok "it's corn" video for trains yet. "And when I tried it with butter, everything changed" should definitely be a shot of the new acela.

[Amtrak @Amtrak]

trains

[Dmitry Z @dzag_]

@SW_Samii @securityweekly @SecWeekly Figuring out how to read those labels to find which power supply goes to what is usually a science, but sometimes an art.

[Adrian Sanabria (@[email protected]) @sawaba]

I've been working on a talk tentatively titled "Myths and Lies in InfoSec"

Some of the research I'll be referencing in the talk was inspired by one particular stat: "60% of small businesses go out of business within 6 months of a data breach"

How do we know a stat is fake? 🧵⏲️

[Dmitry Z @dzag_]

@plaverty9 Hold the power button and volume up (maybe down?) until the Samsung logo appears, then let go of power. Keep holding volume button and a bootloader menu should appear giving you some options.

[Dmitry Z @dzag_]

@plaverty9 Does the screen turn on? Are the volume buttons intact? Does the USB port work for charging? I remember with some phones of that era, I was able to get into the bootloader and mount it as a thumbdrive on a computer. Don't remember if that was built in or custom bootloader though.

[Dmitry Z @dzag_]

I'm not one to celebrate things early, so I wasn't shouting it from the rooftops before. But it feels real now. I'm going to get to do the things I want to be doing in the kind of environment where I can once again make a difference. My job is to build "awesome".

[Dmitry Z @dzag_]

First day as a Security Architect at Federal Home Loan Bank of Boston done. Great team, great place. Commute less stressful than expected.
Day 2&3? I get to go to AWS re:Inforce. How cool is that?

[Dmitry Z @dzag_]

@_leisures It's uncanny how what you describe mirrors a lot of what I went through as well. Thanks for sharing.

[Lea S @_leisures]

I honestly cannot remember the last time I did a job search. I was extremely lucky in that most of the time I just interviewed and got the role. I was not at all prepared for the utter slog of a search I was about to do. Best piece of advice - it's a marathon not a sprint. (2/n)

[Lea S @_leisures]

I've put off writing this thread, but figured I should share my experience job hunting from late last year which bled into early this year. If you are curious about my background you can look at my LinkedIn, but I honestly went in totally naive. #infosec #womenintech

[Dmitry Z @dzag_]

@sawaba Those teeny tiny up/down keys are the worst though.

[Dmitry Z @dzag_]

Today I close one chapter and prepare to open another. It's my last day after 11 years at my current company. On Monday I start a new adventure that promises to be everything I have been working towards. It's crazy, scary, and exciting.

[Dmitry Z @dzag_]

Doing knowledge transfer has started to feel like playing a greatest hits album. One time, I added an appendix akin to intro to cryptanalysis and then threw in "age of the universe" stuff for good measure.

[Dmitry Z @dzag_]

In the days since I gave notice at my job, my time usage has been unexpected.
I feel like it's been:
10% explaining my new job
10% doing daily stuff
30% offloading/transitioning knowledge
50% being the person everyone vents their frustrations to.