In my case the email came through due to a “bad” DMARC configuration so they were able to spoof our domain from an external server and the OAuth app in question had our company’s name on it.
And on a personal front, I was busy that morning and didn’t pay enough attention to the permissions being requested by the app before I clicked “allow”. So it was a failure of both systems and people controls.
My new rule is that if I get an email asking me to do any sort of action, automated or not, I’m going to sit on it for 1-24 hours before doing anything about it. If it’s actually urgent then someone will get ahold of me through some other method than email.
My wish would be for some sort of multi-person approval process rather than allowing anyone who is an admin to authorize an app. Even admins can be susceptible to a targeted and advanced attack.
Also, many people (like myself before my own “failure”) simply aren’t aware of OAuth apps as a serious attack vector. Most remedial training around phishing campaigns covers things like fake login pages but not “An attacker has spoofed an internal domain and an OAuth app with your company’s name in it”.
The attack that was simulated in my case utilized convincing social engineering, spear phishing, domain spoofing, and malicious OAuth apps meant to look like an internal resource/service to gain access to sensitive material.
It was very sophisticated and I’m glad I fell for it during a simulation rather than in a “real life” situation. It was a learning experience and a situation I’m way more paranoid about now. I could easily see admins and developers anywhere falling for it if they were specifically targeted.
I’m not sure about that. I’ve been pretty strict about physical distancing, mask wearing, and all of the other things necessary to help combat the spread of the virus. I’m also someone who gets a flu shot every year and I make sure my child is vaccinated.
That being said - I am majorly skeptical about a vaccine being rushed through the approval process for political reasons and how safe it will be for me and my family. I may refuse it if it seems like it will do more harm than good and/or the process isn’t transparent and the safety data aren’t made available.
Having grown up with two addict parents I can tell you that “Just try doing something else” isn’t typically a useful strategy.
This is actually a concern of mine regarding retirement and part of the reason I tell people that I will likely never retire. A large number of my social interactions are through work, and I feel if I didn’t have something “productive” to do I would be pretty listless and depressed.
I get wanting to enjoy leisure time and hobbies, etc, but there is something rewarding about doing work that you enjoy that is different for me.
Personally, I use both languages (as well as Java and C#) and find they do really well for different tasks. If I need a binary command-line tool that I can ship off fairly easily I turn to Go. If I need to quickly parse some text files, bang out a quick HTTP client script, or automate some AWS tasks, I’ll go with Python.
What we should really be aiming for is flexibility. Some people can be in the office, some can stay remote.
Personally, I dislike being in an office every day, but even more than that I hate the commute. If my manager forces me back, I’ll probably quit and look for a job/company that plans to allow remote work permanently. I’m trying to remain hopeful, however.
Source: I'm a Portland State alumnus.
Generally, if you aren't making adequate progress in a course, you can be dropped by the instructor mid-semester/quarter or placed on academic probation, both of which can cause you to fall below the minimum number of credits needed to be eligible for healthcare coverage.
So while you may save some money on health insurance, you lose a potentially large amount of time due to having to keep up with coursework to maintain eligibility.
That being said, this may not be a problem if they are courses you are actually interested in and can dedicate time to completing.
That being said, I have worked for some shitty bosses who have told me not to post questions and information in channels directly because they want them “vetted” first. I’ll never work for someone like that ever again.
There are mornings when you just want a quiet breakfast while you’re on vacation without an embarrassing meltdown happening and, for better or worse, the most effective way to accomplish that is by giving your kid a movie or show to watch on the iPad for 30 minutes while you eat.
We’re extremely fortunate because my income covers our monthly expenses, but it was a huge financial blow for us and we are conserving cash like crazy. I can’t even imagine someone who lost all their family income going through the same thing.
So, yes, there absolutely is need to worry.
- I bought an Apple Watch through them that was the cellular version. There was some activation error with the carrier when we tried to set it up, and rather than the employee I was working with shrugging it off and saying, “Sorry, you have to call the carrier”, they handled it all for me and got it fixed before I left the store.
- I bought a Logitech mouse. It was having issues with the cursor stuttering. I went to return it, they went though the process in store of updating the firmware to make sure it was a hardware issue, and then they gave me a full refund and recommended another mouse (which I still have and love).
I'll choose them over Amazon any time if they have the item that I need (which they typically do).
Many people are deeply lonely and will do and believe anything someone says if that someone is offering love and affection.
This debate has come up at my place of work recently: Should the area where someone lives impact their salary if they are working as a remote employee? Should someone be paid less if they move to an area with a lower cost of living, even if they started in an area where they were making a higher salary?
As a parent myself this story makes me really glad I did.
Having worked with (and for) a few assholes in my day, I can say that most of the time they aren't as smart, helpful, or clever as they believe themselves to be. Most of the time they add friction to a work environment and make other people around them miserable, and eventually those other people quit.
It's possible to be positive and also be factual, realistic, and capable. Being positive doesn't mean ignoring reality and glossing over everything negative. I'm a fairly positive person, but I definitely still have conversations where I say, "Yeah, this totally sucks, I'm not happy with it, and I think it needs to be fixed".
Approaching things in a positive, friendly, and collaborative manner has always served me and my teams far better than being grumpy and pessimistic about everything.
I live near Portland and have many friends and coworkers who live in the city and this isn’t true. There have been mostly peaceful protests, yes, but not nightly riots.
I’m also not clear on how that would make this acceptable or justified even if it were true.