Stijn!!

[Jim Richards]

Good news, David!

[RKDinOKC]

When the drafting supervisor I was responsible for entering all the information into our AS400 to put new parts on the system. One of the VPs came in and started chewing me out for a couple of parts that the information was wrong. I pulled it up and showed in the system logs the parts in question had been edited AFTER the parts were entered. Asked him if anyone else had permissions to change that data. He said yes. Told him I refused to be responsible for any information that anyone else had access to change. He shut up and walked off.

[RKDinOKC]

Must be knee day for Davids! Another friend of mine named David got approved to get an MRI on his knee today so they can tell how to get rid of a crippling cyst on the back of his knee. He has been off work and in pain for the last two weeks because insurance turned him down the first time.

[flipper35]

Originally Posted by RKDinOKC

Yes, using KnowBe4. But looks like using on-site LMS.

Gotta pay back Mitnick for getting caught LOL They are pretty cheap compared to everyone else.
I wanted to go with Mimecast. Not much more $$ and they filter mail editing and using real attacks to train users.
They also filter all web surfing as well doing the same thing, reconstructing bad web sites to training users real time.


Found someone had recently turned off the sensitive words filter. Only 4 people including myself have that access.

We use it here as well. First, everyone failed, now they report the KB4 stuff or anything else they don't recognize. Really, they haven' t learned what to look for yet?

I tore a tendon on my knee out dirt biking. Was OK for a while and one day the knee stopped holding any weight. Three months of three times a week therapy and it is mostly better.

[RKDinOKC]

We are midway thru our baseline and 20% failed by clicking on the links in the emails and 15% reported the phishing emails.

For Glen, KnowBe4 is a security awareness training company. They offer training thru video modules that are supposed to teach users to recognize malware and other security threats. They also offer sending emails to test if the users learned anything. LMS is a Learning Management System used to track users training.

[GH85Carrera]

Over the Hump and on the downhill slide towards the weekend.

Happy Thursday.

Mrs Carrera spent several hours outside yesterday morning spreading around some of the pile of compost. In the morning it was 60 degrees and 90% humidity. She said it did wonders to flush her pores. That high of humidity is never comfortable. Driving to work as I went down into a low area valley my car instantly was covered in condensation. As I came back up the hill on the other side it all vanished. It was like a magic switch just turned it on of off. It was weird how fast it could change.

[flipper35]

Originally Posted by RKDinOKC

We are midway thru our baseline and 20% failed by clicking on the links in the emails and 15% reported the phishing emails.

For Glen, KnowBe4 is a security awareness training company. They offer training thru video modules that are supposed to teach users to recognize malware and other security threats. They also offer sending emails to test if the users learned anything. LMS is a Learning Management System used to track users training.

We were the opposite. 19% passed the baseline. Some of the senior management laughed until I told them of a few cases recently in the news. They sobered up real quick when you start talking "real" money.

The last test 98% passed.

[Porsche-poor]

morning all. man do these people here not know how to take a vacation? I sat down and got a Skype message to help and engineer on vacation work out a new general arrangement.

[flipper35]

You know, some people love their work so much that is all they like to do.

I am not one of those people.

[RKDinOKC]

We started this stuff because somebody in accounting paid a $17,000 fake invoice that was CEO spoofed. Email looked like it might be from a CEO with the right name, but was from a gmail account with a different mame, and asked to please pay the attached invoice by wire asap. And the invoice did not have a company name or address! Way too many red flags.

[flipper35]

They tried that with our CFO, but their first mistake was using the name of our old CEO. That and the fact I had already done some personal training with her prior to our starting the training stuff. We do in person departmental training as well, but we only have 430 employees.

[RKDinOKC]

We've only got about 350 employees with email. As with my recent issue our only email training has been focused how Not to use offensive language so our company could keep it's good name and "Honor God" whomever that is. NOT how to actually use email let alone recognize phishing attacks.

We have an ftp server that people can upload large files and it puts a link on the clipboard to paste into emails for recipients to click and download. It is very secure with the only access to the file being the link, and once downloaded the file is deleted. Users do not even know it exists and put files with proprietary information on Drop Box. eeek. Oh, and we won't block access to DropBox because "people are using it." We can't stop a leak because it is leaking?

But, hey, it's more important somebody isn't offended than lying and making proprietary information publicly accessible. Especially if you do it to "Honor God."

Am I a bit bitter....Noooooo. Think a better term is fed up with self-righteous Holy **** used to cover inadequacy and laziness instead of doing things right.

[Porsche-poor]

I'm fed up to. Just had one of my favorite engineers tell me he put in two weeks notice cause he is more fed up than I am.

[flipper35]

Richard, that seems to be a widespread issue, even in the church itself. Not wanting to get into a religious thing, just an observation.

David, that sucks.

[GH85Carrera]

At my old place of employment we had a guy come walking in with a typical work uniform and he had a clip board. He walked around to the different fire extinguishers and looked at the information. He got to the back of the building and was about to open a darkroom door when I first saw him and stopped him. He stated writing up an invoice and handed it to me for extinguisher inspection. It was like $250 bucks. I laughed at him. I walked him right to the bosses office. He got belligerent and demanded payment in full. The owner called the police. The dude snatched the invoice out of my hands and took off out the door. He mailed us a statement for over a year before he gave up.

The cops told us about the scam. Evidently he would walk into a business and look like he was supposed to be there and hand the invoice to a secretary and he regularly got paid. It was not really illegal since he "performed a service" even though no one asked him to do it.

It was not a 17K invoice, but 5 minutes of "inspecting" a fire extinguisher tag and getting paid is a sweet deal for him. That was an analog "phishing" scam from before email.

[RKDinOKC]

The KnowBe4 training has in-person scam and physical security training modules. They are actually very complete in their security awareness.

As David said, just because they go thru training doesn't mean they actually learn anything.

[RKDinOKC]

My financial plan was to work to retirement age then between Social Security and my 401K would be able to maintain my current income to past what I consider my life expectancy. My new health problems have increase what I was planning for medical expenses, but has also reduced my life expectancy by the same amount.

After the recent threat I've run the numbers through several scenarios of retiring 10 years before planned. I could survive, but only just. Would have to start dispermemt of my 401K and sell the 928 and be very conscious of every penny and hope I don't have to do any repairs or improvements to my home. This would make it to SS retirement, and would again leave me having to watch every penny just to pay bills and eat having used all my 401K to make it to retirement age for SS.

[GH85Carrera]

The last guy to retire from here took early retirement at age 92. I am hoping to retire before age 90.

[RKDinOKC]

Found some Board Members get 150% of my salary and only receive few emails before each of the 4 4 hour meetings they attend a year. A couple of them work for non-profits and their salaries at the non-profits are more than paid for by donations made by the company they are board members of.

[GH85Carrera]

I know a guy that sits on a board for a large company. He must make some major money. I think he owns a chunk of stock in that company. Must be a great gig to have.