I am taking a required online training on "internet security" at my new university.

[drdrowland@fediscience.org]

@actualham

It was a test and everyone who completed the training failed the training

[econproph@mastodon.social]

@actualham I'm not sure those words mean (or do) what they think they do. SMDH.

[actualham@social.coop]

@drdrowland sadly no. But would have been a brilliant final exam

[wtl@mastodon.social]

@actualham @drdrowland

[fgraver@hcommons.social]

@actualham

[adamrice@c.im]

@actualham I once had to take a web-based infosec training module in order to work with a certain client.

The module was implemented in Flash.

[funnymonkey@freeradical.zone]

@actualham If you want to do a network traffic capture from the perspective of a logged in user and document the security and privacy issues with the system, hit me up!

Related note: you probably shouldn't.

[actualham@social.coop]

@adamrice oh flash remember those fun days

[hub@cosocial.ca]

@actualham classic

[kevinrns@mstdn.social]

@actualham

Run a virtual machine to delete soon?

[rgulick@social.coop]

@actualham

The latest argument in favor of "those who can, do; those who can't, teach."

I'm an ex teacher, BTW/

[kateiacy@planetearth.social]

@actualham Wow!

[paul_ipv6@infosec.exchange]

@actualham

i was working for a large corporation during a time they were going through the due diligence for a merger. since both companies were publicly traded, there were some very strict SEC rules about access to the info from both companies.

in order for me to see said documents to do the techical review, it required that i used only windows explorer, disable all ad blockers, all security features, and authenticate over an insecure web link.

yay for security...

[cadbury_moose@wandering.shop]

@paul_ipv6 @actualham

I hope you demanded an expendable computer and printer for the purpose and had them securely destroyed afterwards.

...and then washed your hands thoroughly.

3:O)>

[pseudonym@mastodon.online]

@paul_ipv6 @actualham

Same as it ever was. Same as it ever was.

As part of #infosec, I weep when I see stuff like this and the training class.

The unauthenticated emails from 3rd party platforms that HR uses to inform employees of legit business stuff, the surveys, all of it.

And they wonder why BEC (business email compromise) keeps happening when the bad guys send a legit looking "We changed our bank account, please update this routing number" email to Accounts Payable.

[stevegis_ssg@mas.to]

@actualham

I used to have to do a sample submission procedure that required both enabling Excel macros and enabling JavaScript and I thought, I don't *really* believe that whoever set this up is a mole for a botnet farm, but I can't see how their behavior would be any different if they were.

[cadbury_moose@wandering.shop]

@rgulick @actualham

And the final part:

Those who cannot teach administrate[1].

[1] or alternately: "teach teachers".

[softproof@mastodon.social]

@actualham They prolly also strongly advised to use google chrome because, well, the internet loves it. Good times for good people.

[jake4480@c.im]

@actualham 🤮

[forteller@tutoteket.no]

@actualham After doing all that one should just come to a website saying "you failed the class"