321–330 of 408 posts
"...and another who claimed he was at home while sitting in what looked like an office cubicle." Doesn't everyone set up a cubicle at their house to set the right mood?
Kind of like a mini bunker in your own home.
Earlier quoted context omitted.
Depends on the job. There’s a growing trend of people getting remote jobs then just hanging out in Slack/Zoom (camera off, never talking) collecting a check til they get fired. In some cases they’ll outsource some work overseas.
How many of these people can there possibly be? Are there really that many jobs with such low visibility, low expectations that someone can get away with Just Not Working for more than a few days before it’s obvious?
Earlier quoted context omitted.
> Okay, name one person. My current employer's CISO or my former employer's equivalent of the CISO. Both were hired prior to 2017 and had relevant education and expertise. And no, I'm not going to risk doxing myself to someone accusing me of sexism for saying that CTO/CISO roles should be filled by people with relevant education. > Compsci is not an infosec-related degree. Are you kidding me? I am beginning to lose c…
Quoted post unavailable.
I took courses on Cryptography, Networking (with a unit on DoS/DDoS mitigation), Operating Systems (with a TON of systems programming that got me intimately familiar with buffer overflows and memory models), and a Software Engineering course that included some discussion of injection attacks.
As term or course projects I implemented or was part of team that implemented: a virus scanner, an intrusion detection system (back before they were common -- we called in 'dynamic iptables' or something like that), portions of an operating system with a bunch of security and permissions relevant stuff, a password cracker, and a bunch of crypto algorithms.
Aside from all of this, a basic understanding of how to program and build software systems is already important background.
But no CS is totally unrelated to infosec and I'm a sexist dick for saying that people in leadership should know about the work they are managing. /s
Earlier quoted context omitted.
No, the changes to it are going away, not the legislation. It'll be back on contractors to make the determination of IR35 status again
Which means it’s essentially going away. I first encountered it in 2005 when I first contracted & it has never affected me. It nearly affected me with my previous contract a couple of years ago as the business really didn’t understand it and was “playing safe” by trying to go “inside IR35” for the role, but that’s utter nonsense for a 3 month engagement such as the one I was doing. I’ve always paid employers NI etc.…
Earlier quoted context omitted.
> I once missed a $10 payment on my credit card and lost 100 points on my credit score. I swear on my life. Is it an option to not use CC in your life? I don't but I understand people in the city may have a different experience.
> Is it an option not to use CC in your life? Honestly the CC isn’t the problem, it’s mobile phone notification culture. One billion meaningless daily notifications, I just shut everything off. I had used a backwater credit card that I never touch to pay for parking and suddenly CC company was livid that I was delinquent. I rack up over $100 in late fees and lost 100 pts off my cred score. To resolve the issue I had…
I have three children. It is literally impossible for me to survive on any salary companies are willing to pay. I work multiple jobs. Idk the solution. It costs me $3,000 a month just for school. That’s a second mortgage. Either they increase pay 50%. Which they don’t want to do. Or I work three jobs. If they don’t like it, pay more. I actually don’t even have a choice, it isn’t even an option. School must get paid f…
You're getting a lot of heat for investing in your children. This makes me sad, though I suspect the people are good intentioned, trying to help you "solve" your problem. I can think of many scenarios where 1K/month/child is the best option. I don't know the quality of schools available in your area, but I do know it can vary wildly, and good school can make a huge difference. And you have my deep respect for the sac…
In any major metro, an extra 2-3 bedrooms in a district with great schools is way more expensive than living in a place with the worst schools and paying tuition.
Earlier quoted context omitted.
Rental car companies will sometimes not rent to you unless you use a credit card specifically (not a debit card).
While at my doctor's office yesterday, I noticed a sign stating all new patients are required to give a credit card number and have it kept on file. I have done this for years because it was convenient for me, but I don't think it should be required.
Semi-related, but Equifax runs The Work Number, which is basically your "employment credit report / record"; they hoover up the data by agreements with employers that they will share employment info with them. You can freeze your employment record with them here: https://employees.theworknumber.com/employee-data-freeze/ I highly recommend you do this, as any employer could just decide to look you up using this info a…
Earlier quoted context omitted.
Another data point, I was reading just yesterday on a HN post about fake qualifications about many male director level people without proper education. They were criticised too. I guess we all see the world as we wish.
We're specifically talking about a field where even a decade ago "proper education" was only offered by a couple of schools in the world. Compsci is not an infosec-related degree.
The vast majority of the people who invented, built, and maintain all the systems infosec people are deploying had CS or CE degrees. A good CS degree provides an excellent foundation for infosec careers. In fact, at many institutions, the infosec major is very similar to the CS major.
It's not everything you need, which is why a CISO should minimally also spend some time as an individual contributor in an infosec or closely adjacent group.
You're moving the goalposts because your position that CISOs need no education whatsoever in the work they are leading is prime facie absurd.
Earlier quoted context omitted.
Suggesting a tax refund is pretty clearly proposing they should not have to fund public schools.
Refund or voucher to the parent suffering it. Still not seeing how you went from that to “don’t you understand that non-parents should fund public schools?” The premise is that those hurt by it, parents, recover money to otherwise educate their kids. Nowhere in that was a claim that the childless should get money back for being childless, so I don’t see how addressing that is responsive.
This doesn’t sound any different from someone having no kids, not using the service, and expecting a refund.