I set up Netbox recently at work to try and improve the abysmal documentation situation. I use an Ansible playbook to provision and set up the server, then copy a docker compose file and start the containers. So far I’m loving Netbox, I just wish my predecessors had documented things from the start.

Namecheap + the dynamic DNS client in pfSense. No issues sinve I set it up years ago.

Before that it was a cron job that updated through the google domains api.

I recently set up and started using MediaTracker for this purpose. It’s kind of barebones, but functional. Seems like its biggest difference with movary is that it also covers TV, ebooks, audiobooks, and games.

I have a little section for movies and books on my website and i’ve been working on a script to automatically pull those lists and reviews from MediaTrackers api each time I build my site.

Thanks! This is actually exactly what I have been basing my efforts on so far, it’s just sobering to look at how far away we are from completing implementation group 1.

I just started my first official cybersecurity position at a medium size company in an industry that is currently being heavily targeted with ransomware.

I’m starting pretty much from scratch as they have not had a dedicated security role in over a year and my predecessor didn’t make much progress. So far i’ve been focused on inventory lists, policies, and procedures for hardware, software, and data. I think we’re doing okay with minimizing stuff thats internet facing and patching is in a good place (well, at least with the devices and os’s that are still supported).

Any suggestions on where to go from there or what to prioritize?

I’m studying for CCSP right now. It’s fairly general and tries to be vendor neutral but Architecture is one of the knowledge domains on the exam. Might be worth it if you meet the work requirements or experience waiver requirements.

A lot of people also seem to conflate it with the CISSP when it comes up in conversation I’ve noticed.

I swear by ddrescue. It’s a situation I strive to never be but i’ve been there before. I used it once to rescue an employees masters capstone project from their dead work laptop.

Oh MediaTracker looks nice, thanks!

It’ll stay low impact until suddenly one day having a reliable post-quantum encryption scheme becomes rather important…

Neat! Ever tried tryhackme? I’m curious how the modules on htb compare.

If you’re looking at paying for certs I personally would stick with ones from common organizations, like CompTIA, (ISC)^2, SANS, Cisco, etc. I think a lot of the value in the cert (at least for career purposes) comes from the name recognition and trust placed in the organization certifying you. A recruiter looks at a Sec+ credential and knows exactly what that entails, whereas a certification from a lesser known organization or community college doesn’t do much to tell them what you know or have studied.

Look into using GNU stow! It’s exactly what you’re doing but it creates the symlinks for you.

I love this solution, I’ve been using it for years. I had previously just been using the home directory is a git repo approach, and it never quite felt natural to me and came with quite a few annoyances. Adding stow to the mix was exactly what I needed.

I bought an OnlyKey a few months ago and love it.

Hey, I have a career question this week! I’ve been a sysadmin for the last 1.5 years (It’s a small shop so everything security related is currently my responsibility). I’ll soon be graduating with a BS in Cybersecurity & Information Assurance. I’m SSCP, CySA+, and PenTest+ certified. I want to end up in a penetration testing role. Once I graduate, should I start looking for pen testing gigs immediately or do you think I ought to get some experience directly in the security industry first? Would getting OSCP help my chances of moving directly to pen testing?

Lots of searching

Updated some diagrams at work today using the newish D2 language. I’ve dabbled before with tools like D2 that generate diagrams from “code”, like plantUML but D2 was really easy and made some great looking images.

Definitely looks more professional than the ASCII art diagrams they replaced, though I do find the ASCII ones charming.

I’ve used ledger on and off for a few years. I use it along with ledger-autosync to process the transaction files I download from Amazon, Paypal, and my bank. I haven’t gone so far as to automate the import of those files, I just download them manually, but it does support that.

I’m a sysadmin (for now) so it’s patch week for me. No big surprises so far so hopefully it’ll be a nice relaxing weekend!

What strategies or software are you using? My stuff is also kind of spread out right now: informal notes in loosely structured folders, formal stuff in a zettelkasten directory, bookmarks in a recfile, and work stuff in a Zim notebook.