• 1 Post
  • 115 Comments
Joined 2 years ago
cake
Cake day: November 17th, 2022

help-circle
  • I’m luckily enough to work on a small team like the one you described, and yeah - our trello board isn’t fully fleshed out. We can put vague descriptions of what needs to be done and the team gets it done.

    I think SMART goals are one of those rare times where an HR course writer unintentionally hit on something that some people need to hear. There’s a junior engineer on my team whose goal was just, “I want to get better at infosec” - not measurable, time boxed, etc. by trying to at least hit one or two of the guidelines, they were able to flesh out this goal into things like “I want to attend a major security conference this year” and “I will study for, and achieve my Security+ cert”.

    It worked for them - and helped them clarify their broad nebulous goal into smaller specific and achievable goals - but obviously like all business/hr things SMART goals aren’t for everyone.












  • I think that mitigation requires two things for it to work.

    1. You need to use a a Type 2 hypervisor (like Virtualbox, VMware Workstation/Fusion).
    2. That VM needs to be configured in NAT mode.

    The two primary ways you can configure a network for a local virtual machine are NAT and Bridged.

    Bridged mode places your VM effectively on the same network as your host OS, meaning that any DHCP server that exists on your network (rogue or otherwise) will give your virtual machine and IP.

    In NAT mode, the virtualization platform itself includes a DHCP server to dole out IPs, and handle the routing between your virtual machine and your host OS’s network.

    The thought process is that if you trust your laptop, the DHCP address handed out for NAT mode will not have the VPN breaking DHCP option and your VPN inside the VM will not have it’s route table screwed with.