5706906c06c

Define data? Eugene Kaspersky volunteered their source code. It's true that won't be an on-going effort and that back-doors are hard to detect through the millions of lines of code, but it's one hell of a sign of confidence.

Edit: Not dismissing the Russian scenario, but this is McCarthyism 2.0 as far as I'm concerned.

Great, what happens to the release iterations between now and when the next test is going to be conducted? Show me the build logs, what changes, etc.

I can't disagree. However, it doesn't deter businesses from using it as it demonstrates intent to maintain certain security posture, regardless of how ill-conceived that posture might be. That said, the statement is touchy feely, and will more than likely not hold true in the court of law when pressure tested.

I meant not offense to those with neon-colored hair, correct on the PHB read. Also, Wally is based on a person I worked with. Apparently, he worked with Scott Adams back in the PacBell days.

I've done InfoSec for a bunch of startups, none seem to grasp the importance of security by design and how it can play an integral role in the business. It's exhausting to have to battle a neon-haired developer that wants to just write code (rightfully so,) not following a process or standards often engaging in arguments just to be right. Imagine one person going asking an entire engineering org to create security priorities until business gets a hold of those and comes back to yell at you for delaying sprints, yep, that's InfoSec for you. Also, any business that says "We take security seriously" isn't. That's a boilerplate they plucked out of the legalese to CYA.

First, what the actual fuck? Second, am I missing something, how did they stop the bleeding? I feel like the story just stopped with no further explanation?

Factually incorrect, there was no data loss, availability was affected, however; https://aws.amazon.com/message/41926/

Agree, there was no data loss, but those who relied on US-Standard solely with no bit replication were dead in the water for the duration of the outage.

Remember the AWS S3 outage a few months back? There is a lesson to learn from that.

I have a bunch of engineers that can presumably automate the provisioning and de-provisioning of the LDAP user accounts without having to mess around with the AD. I hire a consultant (think MSP) to set up and maintain the LDAP hosts and have my engineers write the necessary scripts to perform the aforementioned. This is beneficial for security automation, especially, in the cases where a company is too small to afford a dedicated IT SMEs but large enough to be able to afford something like SSAE-18 SOC 2 Type 2 (or equivalent). In those cases, the security automation in itself presents a repeatable process, which can be verified given the scripts would be executed using a job (Jenkins). This project fits that mold perfectly because that I have dealt with the exact scenario nth times with many start-ups operating in the B2B world with security stipulations such as ISO 27xxx or SOC 2 Type 2.

BlackRock did the same.

Walmart Labs, their e-commerce division has been on an acquisition frenzy for a while now. I recently interviewed there for a role that was directly involved with the M&A activities regarding technology and infosec.

Just look at the list of acquisitions here: https://www.crunchbase.com/organization/walmart/acquisitions

Facebook - I mainly use it to post pictures of my kids and random thoughts that get a couple of likes to satisfy my appetite for someone else's approval. Come to think of it, posting pictures of my kids seems like a bad idea. I visit is occasionally, but don't really engage in other's political post rhetoric, opinions, etc.

Twitter - I use it professionally and religiously to acquire new follower, follow people in my industry and to keep track of the latest trends, etc. I also randomly reach out to people in the same line of work to solicit feedback.

LinkedIn - more of the same, but I don't put that much effort behind it. I just made sure there is a consistent tone of message between LinkedIn and my Twitter handle regarding my professional persona, etc.

Also, why do you ask?

LinkedIn has never been a credible source for anything.

That's a fair assessment, I would imagine by the time the malware has made it on a host, none of what you mentioned is materially relevant given that malware has made its way on the host.

I don't suppose working and going to college is relevant to this topic? That was the basis of my first question.

What about entering the workforce, make enough to cover cost of living, and then go back to college?

1%? What does that mean?

I'm so sorry for you and your job, I guess.

The problem is that most have adopted password managers and two-factor, which means the guideline will be largely ignored.

Isn't X-Frame-Options deprecated? Pretty sure we're supposed to use Content-Security-Policy instead?

Meh. I don't need LinkedIn to judge or validate my life achievements.

This is beginning to look like Michael Clayton.

What about those with chronic depression and/or going through a form of depression? I find myself struggling quite a bit at times, often lacking motivation. I would welcome anything to help me sort it out in a controlled fashion so I can become more functional.

Java primarily.

I've come to terms with the fact that I'll work until I can't, possibly because of an illness or just sheer exhaustion.

I just watched the Sustainable documentary on Netflix talking about the very topic. It's fascinating!

Interesting, now they get to constantly get scrutinized by the OCC, which, by the way, is no fun. Those audits can end up being brutal.

I worked at OmadaHealth series A to C setting up the InfoSec program. It was fun! Looking forward to their continued success!

True, and their managers are the ones that recognize the engineer's importance.