I'm trying to put together a pitch for our executives/City Council to persuade them to increase our spending on Cybersecurity by 50%. If any of you all have good resources to point me to it would be welcome.

@scottalanmiller said in What Are You Watching Now:

@Kelly said in What Are You Watching Now:

I was hanging out with some 20 somethings last night and one of them was sharing that they watched a movie with his fiancee's family called "...uh...7 brides for...um 7 brothers?" I realized just how old I am.

LOL. To be fair, that movie is old to you, too. Our generation just tended to watch older movies as a matter of course and millennials tend to avoid classic movies most of the time.

It was just one of those, "I'm old enough to be your dad" moments.

I was hanging out with some 20 somethings last night and one of them was sharing that they watched a movie with his fiancee's family called "...uh...7 brides for...um 7 brothers?" I realized just how old I am.

Thanks for the reply @JaredBusch. I'm getting push back from the server team on my ask for this. They feel like it would introduce some insecurity into the system, but I'm not sure I understand the risks.

Here is the problem:
We have a large number of people working remotely now (like everyone else). Organizationally we are in a transition between being engineered towards the LAN and having cloud based tools. What this means is that our AD is not fully accessible to remote users without VPN. But, a chunk of users can do their job without needing to use the VPN. For the short term are there any concerns that you all would have about changing (assuming we can, haven't dug in that far yet) the expiration of the machine account/password?

I know this is not the best answer. I'm just trying to buy time before we can get some tooling implemented to fix the underlying management problem.

@dafyre said in What Are You Watching Now:

Warrior Nun on Netflix.

It was fun. Pretty light (despite the violence and gore). Not a deep, provocative, thoughtful show. Worth a watch, but I'm not raving about it.

Given that you're seeing intermittent service you probably have a dual routing issue. If you can use pathping or traceroute to determine the paths that your traffic is taking that might give you some visibility into how your traffic is flowing. If you haven't already pruned it, I would remove all of the routes off the 3750 if possible.

@black3dynamite said in Password manager for ordinary users?:

@Kelly said in Password manager for ordinary users?:

Why not just use Firefox? They have a dedicated password manager now, and it is higher quality than the password storage features in Chrome and the like.

Unless the user is using Firefox sync, if the hard drive crap out or their Windows profile, they will lose all their passwords.

Based on the OPs description they would have to be using FF sync, if it was on the table, to meet the requirements.

@Kelly said in Password manager for ordinary users?:

Why not just use Firefox? They have a dedicated password manager now, and it is higher quality than the password storage features in Chrome and the like.

https://support.mozilla.org/en-US/kb/use-master-password-protect-stored-logins

Why not just use Firefox? They have a dedicated password manager now, and it is higher quality than the password storage features in Chrome and the like.