• 0 Posts
  • 79 Comments
Joined 2 years ago
cake
Cake day: July 22nd, 2023

help-circle




  • Active Directory is a monster. Got downvoted to hell the other day for saying there is nothing out there that comes close for managing a fleet of machines. Most of the idiot arguments revolved around thinking AD is fancy LDAP.

    “Linux and Mac can do authentication!”

    If one’s view of AD is that limited, we’re not having the same conversation. Cross connect AD with Powershell and Hyper-V, you have a robust ecosystem for enterprise. And there are zero issues with running headless Linux servers on Hyper-V.





  • PS really is the bomb. Been a Windows sysadmin for a decade and I couldn’t do a damned thing without PS. I have no modern programming or scripting experience, yet picked up PowerShell and started implementing it very quickly. If you’re running Active Directory, it’s a must, no question.

    Snover has some great intro to PS videos. That’s what got me started.





  • Y’all never get tired of preaching to the choir, do ya?

    Anyone with technical chops has likely tried Linux, or is running it now. 99.954% of the Windows users will either upgrade or roll without updates. Converts are going to be exceedingly rare.

    Only way I’ve got people using Linux was when I fixed “little old lady” computers as a charity thing. I’d throw whatever spare parts I had in there, swap in an SSD, load Linux Lite. I never told them it was Linux. Show them how to get FaceBook and email, done. And I never got a call back!


  • This was before I watched Paul Harrell (RIP) on YouTube. Gun content, take that as you will. But the man was a masterclass in how to present information.

    Tell 'em what you’re going to tell 'em. Tell ‘em. Tell’ em what you just told them.

    Never once talked down to anyone, except for “so called experts”. Never assumed the audience knew specific things. Always showed examples and tests, with controls. Always spelled out any inexact differences in testing, no matter how small. Sprinkled in some dry humor, often unexpectedly. Anyone who teaches could learn from the man.



  • Perhaps because corporate security training is boring as hell?

    I worked up a training class over the course of a year. Ridiculous to take so long, but I wanted to nail it. I figured there were three key things.

    1. The things I talked about had to be relevant to the employees. I pared the stories down to items they could actually encounter. This is how an attack can affect you, how it can affect us. Here are things I’ve seen right here at our business.

    2. Anything I wanted to talk about had to come with actionable prevention techniques. Here’s the problem, here’s what you can do about it. They had to feel empowered, not helpless.

    3. The class had to be entertaining and interesting, start to finish, no fumble fucking around, no baffling them with jargon. I rehearsed that entire year until I could do it in my sleep. Plenty of humor threaded throughout the talk.

    Nervous as hell when the day finally came. I have no problem speaking to a group, love it in fact. But talking cybersecurity to non-technical people is about as boring as it gets. Business owners bought everyone lunch and we met in the conference room.

    Timed it to run for 40 minutes, left space at the end for questions. Talk about a resounding success! Everyone in the room was engaged and had questions, some even staying beyond the allotted hour. Fuck me, I actually got applause! (Yes, and everyone clapped. Really.)

    Phishing tests went from 25% failure to 4% failure overnight. I left a USB drive on the floor by the printer. No one touched it for three days, and then only to place it on the table.

    My next job was at a software dev. Security training involved cutsie animated characters and multiple choice questions. Yeah, a live puppet show would have been more effective.




  • Had a manager who would shoot the bullshit with me for our one-on-one time. I open about my life, he never pushed, but he genuinely wanted to make sure his people were doing OK. Guy that replaced him went straight to business and was hella uncomfortable talking about anything else. Not that his personality sucked, but he believed in working every second of the day. Talk about whiplash.