Post B4Lx9yl8P0EMGd9ame by bob_zim@infosec.exchange
 (DIR) More posts by bob_zim@infosec.exchange
 (DIR) Post #B4LvcS48pp5jMNUdai by SwiftOnSecurity@infosec.exchange
       0 likes, 0 repeats
       
       We have this system at work where you have to manually read and type out the estimated number of impacted systems before it lets you issue a command.
       
 (DIR) Post #B4Lvv6liF2oqoGlkzw by SwiftOnSecurity@infosec.exchange
       0 likes, 0 repeats
       
       Ultimate pucker factor when it starts hitting tens of thousands, then you go back and rethink this deployment strategy a bit.
       
 (DIR) Post #B4LwDtrgRQomI9WTY0 by Drat@infosec.exchange
       0 likes, 0 repeats
       
       @SwiftOnSecurity I always type One because everything runs in one virtual environment...🤔
       
 (DIR) Post #B4LwN4ipRapCZSkwF6 by the_other_jon@mastodon.social
       0 likes, 0 repeats
       
       @SwiftOnSecurity I wish our IT group had that.
       
 (DIR) Post #B4LwUQBc2TCbAUiqmG by DaveMWilburn@infosec.exchange
       0 likes, 0 repeats
       
       @SwiftOnSecurity Iranian Handala Hack operator sweating bullets before he launches the InTune command to wipe all those Stryker systems thanks to you guilt tripping him.
       
 (DIR) Post #B4Lx9yl8P0EMGd9ame by bob_zim@infosec.exchange
       0 likes, 0 repeats
       
       @SwiftOnSecurity Is there not a way to run some innocuous command (get the hostname, or uptime, or something) to get the exact number of affected systems ahead of time?
       
 (DIR) Post #B4LxP4PBh0pW7c5HWa by SwiftOnSecurity@infosec.exchange
       0 likes, 0 repeats
       
       @bob_zim absolutely there is but still you know you will be held accountable to this
       
 (DIR) Post #B4LxpQxkRnMxbyoxFY by glyph@mastodon.social
       0 likes, 0 repeats
       
       @SwiftOnSecurity it will be so much faster once AI is doing all your ops. it will breeze right through this prompt in fractions of a second, saving so much time!
       
 (DIR) Post #B4LzlQuosfkEDOffcG by jpsays@mastodon.social
       0 likes, 0 repeats
       
       @SwiftOnSecurity I know this feeling. I was nearly ill from anxiety.In January 2024, I “pressed a button” (someone else technically did, but at my direction) that ran a program that we had written just a few weeks earlier against XXXX (let’s just say many) machines.We had several vp reviews & even one with the president of the division during holiday vacation time just to get approvals.(There were many tests, flights, & data reviews leading up to this and daily during as well.)#KB5034510
       
 (DIR) Post #B4MpFFX6rOKvGMYWau by oration@mastodon.social
       0 likes, 0 repeats
       
       @SwiftOnSecurity At 3 different global banks, I've written a /usr/local/bin/sudo script as a wrapper for /usr/bin/sudoIt would take an incident or change number as justification, validate that incidents were open and matched the prod status of the machine, validate that changes were approved and the current time was within the window.It updated the tickets with $USER did a sudo on $MACHINE at $TIME and stuff.If you just type "emergency" it let you right in and also paged your boss.