Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)B
Posts
4
Comments
26
Joined
2 yr. ago

  • No questions, but am in the final stages at two orgs for a CISO position. I've been offered a few, and turned them down (in office or low salary compared to responsibilities) but these last two are feeling just about right. I'm in that mix of anxious / unknown / hope, and enjoying it.

    For all who are also applying/interviewing, may your interviews go well <3

  • And I do keep bumping into excel models for sale, or Excel add-ins. There's quite a few quants that'll do custom models for your scenarios for my price range, too - lookin' at you, cyberriskmodels.com and your $1200 Custom Models & Dashboards.

    I'm more interested in the models and their uses than the buying of a new software. I have fixed scenarios where decisions need to be made, and just a little guidance on 'use this kind of model (or template excel sheet) for evaluating a new mobile app for a business unit, and this other kind for evaluating the risk of patching production workload servers outside of business hours during the busy season' would be great.

    But yeah, the more I look the more I think it's not COTS. It's going to be buying hours with a quant and building models for our standard risk assessments. Which is fine, just good to know I 'spose.

  • Appreciate the reply. I do use RMFs, but I'm looking for specific analysis tools. For a given threat - data breach from a significant software update adding features - to model that risk quantitatively. I'll continue looking, but hoping to hear from someone on what they've used. I'll be sure to come back and share what I find as well.

  • cybersecurity @infosec.pub

    quantitative analysis tools

  • No, but after reading that article it's on my short list of books I'll be reading this month

  • Aiincidentdatabase

    Also search GitHub, several repos list failures.

    What kind of company? I do this training for our public sector / state agency execs, and have a fairly well stocked slide deck currently I might be convinced to share

  • Yoga, for sure. I used to think it was just women stretching. Now I know it's for everyone, and it's more about strength than stretching. There are muscles that get worked in yoga that I have never known was there through mainstream weight lifting and strength training. Specifically my core and lower back. It's made a difference, although it took about a year for me.

  • Yes please, I'll take the soup kitchens and socialism

    I looked into what happens in the meat industry, and found out it's actually pretty highly processed. It is incredibly disturbing the supply chain workflow that meat moves through

  • Absolutely not. Windows 7 may still function, but it is a target for unpatched vulnerabilities. Attackers are actively seeking windows 7 hosts for remote code exploits, lateral movement, and privilege escalation.

    Do not run Windows 7. Stop running Windows 10 after the end of life date next year.

  • Actual budget with simple fin for bank links. Currently hosted on pikapods, will move to self hosting on prem at some point.

  • Yes, and thank you for your interest in helping. Appreciated! After an update, I will eventually reboot. When doing so, the options in the gear at the Gnome login will be

    • Gnome
    • Gnome Classic

    Both of these options are X11. I verify this with $ echo $XDG_SESSION_TYPE and see X11. When Wayland is working, the Gnome login will show four session types:

    • Gnome
    • Gnome Classic
    • Gnome on X.org
    • Gnome Classic on X.org

    I haven't been able to locate a log file where something looks relevant to the decision made at boot for XDG, Wayland, or X11 that chooses one over the other. It's just as though Wayland stops being an option. 3 or 4 updates later, I'll have Wayland back again - but no idea why it comes and goes. My caveman intuition tells me it happens around nvidia updates, but I haven't kept strict notes on that.

  • Yeah, I'm ready to be done with X11. Dunno why Fedora with a perfectly working Wayland & Nvidia and updates set to manual will not offer Wayland in the session manager at login about 80% of the time. Must be something I'm doign wrong, but IDK what it is. I wish I had wayland 100% of the time o'er here.

  • I did try Bazzite after this post - defaults to Nvidia 560 driver, which is still not the stable. Also installs extra things that I had to turn off - ended up re-wiping and going back to Fedora 40. I may retry in the future, though - but in general, I'm less interested in immutable at this point.

    Thank you for the suggestions!

  • Linux Gaming @lemmy.world

    Way to stay on Nvidia 550 w/ Fedora 40?

  • Yep. This exactly.

  • I disagree! They can be great options, inexpensive and reliable. My current home server is a Dell r620 with xeon CPUs, 64gbs of RAM, and 2 terabytes storage in raid 5. It serves several vms, a mix of Windows and Linux. More than enough for many home set ups. Boots the os off a 16gb flash card. Cost me $185. Thing has been a tank.

    I bought two short L brackets from home Depot, and have it hanging flat against the wall. It's been fabulous.

  • Well now I have a new book (series?) to read, this looks super awesome, thank you

  • Derp, thanks for the prompt. I'd like to move to a position for more income. Government or private. Currently at $127k / yr.

  • Looking for cert guidance!

    I'm a late-40's life-long IT guy, working as a cybersecurity architect / deputy CISO for a state govt agency the last few years. I have my CISSP and bachelor's in IT mgmt from WGU.

    I have access to free microsoft classes & cert tests through my employer. Thinking about going back and getting some certs. Does it make sense to do the security certs in order?

    SC-900, SC-100-200-300-400, AZ 500

    Or am I overthinking it and I should just jump in and try a test to see how I do?

  • Also off work today, so it's pet-project time: I have some scripts that collect local housing rental prices. I've been collecting this information in a sqlite db using python webscraping libraries, so I can chart the effects of gentrification and homelessness in my (small, rural) community.

  • Lemmy Shitpost @lemmy.world

    There used to be whole forests like this in the Pacific Northwest

  • cats @lemmy.world

    New litterbox day