#itsec

[kontrollszumma]

Ma majdnem tartottam egy kiselőadást a DoS és DDoS közötti különbségről, de túlságosan okoskodásnak éreztem hogy ezt csináljam és sehogy se sikerült úgy megírnom hogy ne legyen olyan... szóval most kiventillálom itt:

A DoS vagyis denial-of-service egy olyan (számítógépes) támadás, amely során egy gépet vagy hálózatot próbálnak ellehetleni: vagy nagy mennyiségű kérés küldésével vagy olyan kérések küldésével aminek a kiszolgálása sok ideig tart/erőforrásigényes, ezzel elérve hogy az adott szolgáltatás ne legyen elérhető. A támadás egy helyről indul.

A DDoS vagyis distributed denial-of-service pedig ugyanez csak több helyről indul a támadás, jellemzően egy botnet által kivitelezve így sokkal nehezebb ellene védekezni.

(az MS-DOS pedig egy operációs rendszer csak a rend kedvéért)

[artanyis]

Thought I'd jump in on this, as an engineer in the IT field.

There was a meme/thing going around a while ago, (like 15+ years ago) "The difference between an engineer and a tech enthusiast. The tech enthusiast has all of the newest home automation, everything connected to the Internet, control panels for his microwave and refrigerator.

"The engineer has a 15 year old printer and a shot gun next to it in case it acts up."

The point of that was twofold, one, engineers tend to know how things work and how to fix them and keeping them simple makes them more reliable and easier to fix, so we tend to not want all that extra stuff we don't need/use.

The second, is that because we know how they work we also tend to know what they're doing. Fifteen/Twenty years ago, the big data mining of personal information from every Internet connected device was mostly paranoia, there wasn't enough personalized computer tech for that to be a big thing, although corps were trying. (Look into Target's personalized database) And engineers have a tendancy to be doom sayers. (I try not to be, but it's hard, especially now that I'm in ITSec) so having a way to dispose of that connection in as efficient a way as possible is pretty normal. Though unplugging it is probably easier.

That said, yes, you can still get, "dumb," appliances, although you usually have to go out of your way a bit to find them, but they are usually cheaper when you do so. I have a plain TV, and my gaming PC hooked up to it so I can stream, watch downloaded movies, play games, or whatever on my TV, because it's like a giant monitor, but cheaper, and it's easier and works better than any of the smart TVs my friends have, and I didn't have to do anything special. And it has a keyboard.

Got a new fridge a couple years ago, found a dumb one that came as a bundle with a matching stove and dishwasher, all together they were still cheaper than the single smart fridge.

Yes, you can subnet your IoT devices on a separate network to track usage. I have no IoT in my house, because I don't need them. You can get a used sonicwall firewall on eBay/Amazon for a reasonable amount, which has a wizard built in to help you configure rules for this kind of thing. Highly recommend people stop using crappy consumer wireless, spend the money on a real wireless AP, get a couple ruckus unleashed APs, setup a hidden SSID for your Alexa and what not, vlan that too a restricted subnet, add some connection rules and you're basically done.

[thedigitalempress]

Day 1: Maintaining the Feeling of Being a Successful Business Owner

I've decided to start blogging again and I thought it would be great to start it today on the 11/11 portal. Today is a very powerful day for manifesting and I wanted to just have fun starting another daily challenge of keeping myself disciplined.

I did a 30 day BBL challenge two years ago to build my dream body (view the #me or #fitness hashtags to see what I'm talking about if you haven't already. I love what I've built physically but also mentally and emotionally. I'm more confident in myself, love myself so much more, and I hold myself to a higher standard than I have before starting that challenge.

So now I want to start a new 30 day challenge of blogging how I'm building the discipline to be successful IT Security business owner. I have been working on this for years but always fell back into doubt and fear. I think now that I'm single and I don't have anyone around me distracting me or trying to destiny swap with me I have all of my energy and power back to go full throttle. I also want to see where my confidence is by December 11.

I built an unshakable discipline for going to the gym now I can't miss a day or I feel like shit. Now I'm even walking more during the day to close all of my fitness rings on my Apple Watch. I want to get to the point in my business where I can't go a day without making an informational post for digital security across social media, expanding my knowledge in the field, and providing my clients with the best security solutions possible.

What I Worked on Today: - Building out pricing matrices for all of my services to ensure I'm making at least $10K/month - Some cloud storage filing for my first client since starting the IT Security Consulting side of my business (I've done career consulting before but slowly phased out of that because it wasn't fulfilling for me) - Joined some Facebook infosec groups as well as did some branding on TikTok for my business

What I Learned Today: - Taking aligned action is everything. Doesn't matter if it's perfect (Which has been a setback for me in the past. Trying to make sure everything is perfect instead of just creating/doing) - Keeping an abundant and positive mindset will take you far. Ever since I've decided to work on myself and become a more improved version of Empress/Tailor I have decided to let go of so many limiting beliefs. Not just in business but in money, love, and intellect. - Neville Goddard and taking frequent breaks keeps me motivated. I realized that when I'm sitting down for too long I tend to get restless and can't focus as well. Taking frequent walks and having Neville in my ear telling me to keep my thoughts aligned is why we're even here blogging because I've wanted to get back to this for a while tbh

Motivation: - Today being 11/11 and just feeling like a brand new woman. I almost slept in this morning but I hacked my brain to shut tf up and forced myself to get up and go to the gym. Multimillionaire me gets her ass up and goes to that gym at 5AM everyday unless something comes up and I can't make it. If I can't make it I'm getting atleast 10K steps in - Knowing that my reality right now is literally just a product of old thought patterns and everything I'm thinking and feeling now will produce in my 3D reality because it's law - Seeing reality literally bend to my will as I stay in the end state. At this point I'm just having fun and playing this shit like a video game.

Challenges I'm Facing: - I am quickly learning to tell my conscious mind to stfu and stop trying to tell me a plan B. There is no plan B. Everything is working out for plan A. We're literally right back to plan A after years of having plan b's and c's.

Milestones and Progess: - I had two consultations scheduled today! I can't wait to work with them and start their projects - I'm blogging on Tumblr again! Eventually it will be back on a website I'm running - I completed 95% of the tasks on my to-do list. Before I was only completing about 45%. This was also after I told chatgpt to give me a more aligned focused work schedule so I know how to curate my tasks for everyday so I'm making more aligned progress.

Well that's all I got for tonight. It's 9:17PM and another one of the things 3.0 version of myself does is get to bed before 10PM and gets off social media at this time. I want to be more intentional with my time and make sure I'm getting more sleep as well to stay healthy and have a fresh mind in the morning.

Here is my current website with all of my services and affilitae links: https://thedigitalempress.carrd.co/#

Take a look at it and let me know what you think. And if you read all the way to the end you're a real one. I plan on making this journey very enjoyable and inspiring for those following along. Thank you for tuning in.

Empress

[1o1percentmilk]

they say it's a "phone call to discuss the position teehee" but yOU can't trick me! i know as soon as i walk in there i'm gonna be fighting for my life

[eventporto]

ITSEC EVENT

[militaryleak]

Thales Presents Next-Generation SATIS Small Arms Trainer Enhanced by Unreal Engine 5

Recent conflicts underscore this reality, emphasizing the critical role of proficient marksmanship in securing victories on the battlefield. Responding to the demand for innovative training solutions, Thales has introduced a groundbreaking enhancement to its SATIS Small Arms Training Indoor Simulator, powered by Unreal Engine 5 (UE5). Building upon the collaboration announced at I/ITSEC 2022, Thales and Epic Games have transformed the SATIS simulator into a cutting-edge training platform with unprecedented capabilities. With the integration of Unreal Engine 5, SATIS now delivers AAA video game level graphics, revolutionizing the immersive experience for trainees. This enhancement not only elevates on-screen realism but also extends to the tactile realm, ensuring maximum engagement and effectiveness during training sessions.

Recent conflicts underscore this reality, emphasizing the critical role of proficient marksmanship in securing victories on the battlefield. Responding to the demand for innovative training solutions, Thales has introduced a groundbreaking enhancement to its SATIS Small Arms Training Indoor Simulator, powered by Unreal Engine 5 (UE5). Building upon the collaboration announced at I/ITSEC 2022,…

[automaticvr]

I/ITSEC 2023 Highlights - OptiTrack

[caller23]

So anyway, the rule around here is, if you put a brand new glass in the cupboard, you throw away an old glass from the cupboard. So I got a new pint glass from the recent I/ITSEC conference, so I had to remove an old pint glass. Well, it turns out that the one I removed is a pretty old pint glass that I had repaired with 5-minute epoxy back in 2010. This glass was already old back then when I accidentally chipped a bit of glass off the bottom. So I took some 5-minute epoxy and carefully dabbed it on the broken section to smooth it out. Well, it turns out that epoxy isn't a bad fix for a chipped glass, since this one has been repaired for better than 13 years now and the repair is still in really good shape. Yes the epoxy has turned quite yellow over the years, but in general it is still strong and smooth and we have had no problems with it. Again, the only reason I'm throwing it out is that I added a new glass to the cabinet. So take a note. You actually *can* repair a chipped glass with epoxy, and it turns out it works great!

[thxnews]

BAE Systems Showcases Cutting-Edge Innovations at I/ITSEC

  BAE Systems Showcases Next-Gen Solutions at Prestigious Conference

In a bid to sustain global military force capabilities in a rapidly evolving digital world, BAE Systems is set to make a significant mark at the National Training & Simulation Association’s Interservice/Industry Training, Simulation, and Education Conference (I/ITSEC) from Nov. 27 to Dec. 1, 2023. Peder Jungck, the Vice President, and General Manager of BAE Systems Intelligence Solutions, emphasizes the commitment to elevate global defense and security through cutting-edge training and simulation solutions.  

Shaping the Future of Military Readiness

Unveiling Differentiating Capabilities At I/ITSEC 2023, BAE Systems, in collaboration with industry-leading partners, will unveil groundbreaking capabilities, pushing the boundaries of military readiness. Key highlights include: Wargaming Solutions Introducing Pioneer™, a strategic decision-making system that revolutionizes planning processes. Simulation & Training Solutions Showcasing advancements in next-gen training tools like Project OdySSEy and the Helicopter Door Gunner Digital Training System, supported by subsidiary Pitch Technologies. ADAPT (Advanced Digital Analysis & Prototyping Testbed) A revolutionary system designed to transform data, enhancing preparedness and empowering decision-makers to predict, adapt, and succeed.   Date Time Topic Location Monday, Nov. 27 5 p.m. ET Matt Crozier, director of Advanced Technology Prototyping, will highlight how BAE Systems’ ADAPT technology is advancing customers’ mission outcomes. Booth #2588 Monday, Nov. 27 10:30 a.m. ET Pitch Technologies to present at Tutorial Session 2: Live, Virtual, and Constructive (LVC) Interoperability 101. W305AB Monday, Nov. 27 10:30 a.m. ET Pitch Technologies to present at Tutorial Session 4: Introduction to HLA 4. W306AB Tuesday, Nov. 28 12 p.m. ET Kyle Draisey, director, of cyber and intelligence, and Don Widener, chief technology officer, will participate in a supply chain panel. Booth #2870 Wednesday, Nov. 29 10 a.m. ET Draisey will host a discussion entitled, “The Digital Quiver: Harnessing Cyber Effects Modeling to Transform Military Planning.” Booth #2870  

Beyond Exhibits: Engaging Briefings

Premier Sponsorship at the Cyber Pavilion In addition to the exhibit, BAE Systems will play a pivotal role in large-scale briefings at the Innovation Showcase and as a premier sponsor at the NTSA’s Cyber Pavilion. The company actively collaborates throughout I/ITSEC 2023, exemplified by Bohemia Interactive Solutions (BISim), a subsidiary, supporting the I/ITSEC 5k Run/Walk/Roll, benefiting the Tunnel to Towers foundation.  

Forging Connections and Unveiling Innovations

Visit Booth #871 for a Glimpse into the Future BAE Systems is dedicated to fostering new connections, sharing expertise, and unveiling the latest in defense and security technology at I/ITSEC 2023. Attendees can experience the future of military readiness and innovation firsthand by visiting booth #871. The commitment to advancing global defense and security is not just a statement but a tangible reality at BAE Systems. Connect with us at I/ITSEC 2023, booth #871, to witness the future of military readiness and innovation.   Sources: THX News & BAE Systems. Read the full article

[kontrollszumma]

Random tudományajánlás :D

[amethystsadachbia]

Me getting up this morning to no mass email from my work ITSEC: 😌

Me logging into a necessary website a few hours later and seeing a message about crowdstrike: 😬

waking up to see the CloudStrike incident affecting like half my friends and their jobs today

[ksszns]

https://github.com/drk1wi/Modlishka

go get -u github.com/drk1wi/Modlishka

cd $GOPATH/src/github.com/drk1wi/Modlishka/

make

https://github.com/drk1wi/Modlishka/wiki/How-to-use

[gainsec]

Fields of Study Within Offensive Cyber Security 2021

Read about the fields of study within offensive cyber security 2021.

[eventporto]

As Photographer for ITSEC event at Ritz Carlton Jakarta

[kiforditom-szetszedem]

^^^

Úgy van. Most már nálunk is az van, hogy előbb egy túlszigorú spam szűrő, értesítést kapsz, s ha egy emailről TUDOD hogy az legit, szólsz az IT-nak, hogy deblokálják, másrészt meg ha valami gyanús, de átjött, arról is szólsz. Mert azzal semmit sem érsz ha valakit "levizsgáztatsz", de sokat veszíthetsz, ha csak a "levizsgáztatás" a teljes itsec stratégiád

Security through laziness 👇