Posts made by Ghost

@Tinuviel said in The Work Thread:

@Ghost said in The Work Thread:

Average CISSP salary is 122,300.

If you're right in saying that more and more people will be going into security, will there be such a glut of people with this qualification that the salary will drop?

Not likely, no. The majority of people working in cybersecurity are either skilled/experienced people without degrees/certs or college grads who dont have further certs. Focused cybersecurity roles like the CISSP and CEH (certified ethical hacker) are the top certs, and the number of people who hold those isn't skyrocketing.

The salary, despite continued growth in numbers, remains in the $85,000-145,000/USD range.

I've been watching job postings for a few years now and the new trent seems to be listing a Bachelors degree as desired but InfoSec certs like CISSP and GSEC as highly desired. So despite being biased I tell most anyone I hear who is looking to get into IT work to focus on Cloud Engineering and Cybersecurity, because old school server farm Ops work is on the decline and extensive technical controls are on the rise.

@Tyche said in The Work Thread:

@Ghost said in The Work Thread:

You have to upkeep the certificate with study/conventions/seminars or you lose it. So it's like a kind of bonding.

And pay $700 to pass go. It's a good racket.

Average CISSP salary is 122,300.

$700 of that is 0.5723630417007358.

To upkeep it you need 120 study credits across 3 years or retake the exam. $125 a year for ISC(2) membership, which is less than one of my cell phone bills.

I mean, if paying 0.57% of a 122,300 salary or $125/year (0.10220768601798855% of a $122,300 average salary) is a racket, then I suppose you're the smart one for opting out!

@Admiral said in Armageddon MUD:

@Ghost If I was accused of impropriety I would not oppose having my responsibilities provoked. For a paid position I would expect to be compensated but until the allegations are addressed both the accuser -and- the accusee are safer with the alleged harasser suspended.

I wouldn't oppose it, either. Safety comes first.

But still, they're siding with "it's probably fake, even if we aren't sure" and have decided to not suspend that staffer's authority as a safety measure to their players.

If I was a boss and an allegation of misconduct came out of one of my leaders (who was in a position of authority), if I couldn't prove otherwise my focus would be to ENSURE SAFETY and temporarily suspend someone's ability to exploit their elevated privileges.

@Carex said in Empire State Heroes Mush:

I played Grodd (The actual gorilla) and women hit on me.

Just women? No men?

Because dicks out for SuperHarambe, yo

Edit: OMG the idea of roleplaying Grodd in a 20's type setting as a monster with super apes in pinstripe suits and Tommy guns sounds intriguing.

@Pandora said in How to Approach (nor not) a Suspected Creep:

I was pointing out that while you may be trying to help, plenty of people reach out in that same way trying to be instigators or gossip-gatherers & it's hard in a moment of high-pique to tell the difference.

Agreed.

PLENTY of people have reached out to me after public drama incidents under the false flag of being a sorority sister, but really they just wanted the gossip or to be a man-in-the-middle social engineering agent to get inside information on the bad things I might be saying about the 3rd party.

I'm mostly a person who obsesses over their own internal compass. If I'm not already reaching out to you for advice or to vent at, then you're probably not someone I want that from or don't need that service.

Would I call that harassment? No. But definitely an eh, fuckoff.

So, in other words, they're saying that...

THIS particular incident of staff/player trying to force IC sexual situations and quid pro quo was a directed spoofing attack by someone using a fake Discord account, and is completely separate from lists of previous sexual harassment situations levied against the accused in the past.

Sounds legit

@Tinuviel Weird innit? During school, looking at other people's work or asking other students to double check your work is considered cheating, but its VITAL to adult survival in the corporate sense.

I believe that I can pass this test and that it's just this big scary gate to help weed out the IT people from the chumps that think memorization matters.

See, the reason this CERT is so desired is because...

1. Instead of memorizing terms it is designed to ask questions that ask "what is the right thing to do?" over "what is the definition?". So the cert isn't about having this ticket, but about vetting way of thinking
2. If you pass you become a member of ISC(2), which you are kicked out of if found guilty of improper infosec behavior, hacking, etc. You have to upkeep the certificate with study/conventions/seminars or you lose it. So it's like a kind of bonding.
3. You cannot get this cert without relevant work experience.

So I'm just nervous because this certificate would provide a whole lot of reassurance in one's ability to find work.

780,000 information security workers in America.
Approx 350,000 information security openings

Approx 87,000 CISSPs in America(11%)/136,000 in the world and it is predicted that the number of cybersecurity jobs waiting to be filled will soon hit 3.5 million.

I cannot stress enough that with leaner processes like Agile and Cloud growing, the headcount for system administration will drop and clearly security is where that headcount is going.

Confession.

I'm stressing the fuck out about this CISSP exam.

I've got a 1000 page book filled with test questions and material, done about 40 hours of online videos, and the test requires you hit a 70% or better in 100 to 150 questions. From 8 months ago to now I've watched my pre-test scores go from the 60s to the 80s. Haven't hit 90 yet but OMG WHO THE FUCK CAN REMEMBER THE DIFFERENCE BETWEEN NIST800-64, ISO12007, and ISO12207 and THAT AES128 uses 10 rounds of encryption and AES256 uses 14. I imagine most people in the IT world have about 30-45% of those "number and acronym salad" terms memorized and use other resources for the stuff they forget. (Which one was 10 again? Oh yeah, 128.)

Danger zone? Every. Reddit. Thread. Says stuff like "oh the test is nothing like the pre-tests on any sites and this resource (one I didn't buy) is the best."

Probably going to cram hard on this for the next week or so, continue test runs, flash cards, etc. The test is not as crazy as some others, but what it does is that it will seek to run you through 100 questions in 3 hours with the following caveats:

1. If it detects with 95% accuracy that there's no way you can pass 70%, it will stop you early. YOU SUCK. GO HOME LOSER
2. Minimum 100 questions, all weighted with secret weights. 25 of the questions aren't scored and are designed to collect aptitude information. So the acronym salad stuff may or may not be weighted more by questionably (or more immediately) critical concepts like evidence gathering, core integrity concepts, and infosec logical thought questions.
3. If you hit question 101 (it hasn't stopped you because it detects you may still not hit 70%) you have until question 150 to get to 70%

However, if I pass I have the highest sought infosec certification in the current IT world and become a member of ISC(2). So...that would be sweet, right?

Anyway. Sigh. No pressure. The time is coming.

@Auspice said in Empire State Heroes Mush:

@Ghost said in Empire State Heroes Mush:

@Auspice said in Empire State Heroes Mush:

LOOK WE ALL WANT TO DO BEDROOM STUFF TO MARISA TOMEI AUNT MAY

Whoa whoa. Watch that use of all. I kinda prefer My Cousin Vinnie or The Wrestler Marisa Tomei.

LOOK WE ALL WANT TO DO BEDROOM STUFF TO MARISA TOMEI

BETTER?!

Technically "not in the bedroom" could be a preference sooooo

Haha Haha yaaaaaas love it

@Auspice said in Empire State Heroes Mush:

LOOK WE ALL WANT TO DO BEDROOM STUFF TO MARISA TOMEI AUNT MAY

Whoa whoa. Watch that use of all. I kinda prefer My Cousin Vinnie or The Wrestler Marisa Tomei.

@Dreampipe I have TNT on PlaystationVue, and AEW is in my DVR list. There hasn't been a SINGLE women's division episode that I've seen yet. I think this is a bad idea.

Okay, AEW is "FUBU Wrestling". That's great. However, they should have realized that women are coming to the forefront of WWE and if you're gonna have a women's division and want to take WWE on on this front? You gotta develop it.

As much as I like the spirit and soul of AEW, I think the following statements are true so far:

• It wins the support award. Clearly
• WWE, Impact, and Lucha Underground(RIP) have better developed women's division, and have better story development.

I worry that it's telling that John Morrison and Shotzi Blackheart aren't AEW-bound at a time where AEW is trying to solidify itself.

@L-B-Heuschkel said in Armageddon MUD:

I'm told this is apparently a common thing. Simply copy or spoof the IP address of the person you're harassing

echo ${GhostsOpinionOnMUSecurityFlaws}

Spoofing an IP address isn't hard if you have access to the user's IP address and access credentials, which most staff have. In theory, staff could easily set up a sniffer on the incoming port to log all incoming transmissions, which would be in clear text due to using telnet protocol.

@Lotherio said in The Hockey Thread:

@Ghost said in The Hockey Thread:

How the EFF did my Coyotes end up leading the Pacific division? Wow.

Because the Oilers bubble burst and they're heading back to playing how they were predicted to play at the beginning of the season. Merry Christmas Phoenix fans.

Sad part? The Yotes aren't getting much traction here in AZ. They never have.

The Yotes account for a very SMALL amount of merchandise in any athletic store, hat store, team shop, etc. You dont even see Yotes gear at grocery stores. Very few mugs, posters, etc. It's all ASU, Diamondbacks, Cardinals, or Suns.

I'd hate to see them go, but would rather see them in a city that loves them. It would be frustrating to see them suddenly get all of this PLAYOFF FRENZY attention (or even a cup) knowing that most of Phoenix would be like: "Hey that's great, but I don't care about hockey"

How the EFF did my Coyotes end up leading the Pacific division? Wow.

Is it just me or does AEW not air any of their women's division stuff on TNT?

@Arkandel said in Empire State Heroes Mush:

What if a Spider-man player didn't play an NPC out but 'just' played them being around? Is that also an offense?

"Sorry Gwen, I'd come hang out tonight but Jonah insisted I try to take some photographs of that new Egyptian exhibit again"

<THE BANHAMMER DROPS>

Come to think of it, it'd be pretty hard to roleplay being a photojournalist without NPCs.

@Derp All I know is WHAT BALLS does it take to actually tell someone oocly that you'll do something for them ICly if they TS your character?

Pretty brazen and highly loggable.

And in the log they weren't so coy about it, enough that I could assume it wasn't the first instance of this happening.

Kinda feel like the likelihood of someone apping 60+ year old Aunt May, Alfred, and Uncle Ben? pretty low.

I mean, maybe Marisa Tomei Aunt May but really, non-hero supporting cast members with no superhero skills (though some would argue that raising a teenager made Aunt May a superhero!) aren't likely to ever be apped.

My Spider-Senses detect shenanigans. What made staff stamp down so hard on this particular player? Did staff really side J Jonah Jameson-style on "HEY SOMEONE MIGHT APP THAT 65 YEAR OLD MATRON LADY THAT HELPS OUT IN THE SOUP KITCHEN! RULES ARE RULES! YOU CAN PICK UP YOUR CHECK ON THE WAY OUT!"?

Seems a little excessive to me. I mean, it could be exactly what it is at face value, but in the past I've seen stuff like this as a vehicle for: Staffer wants the character, staffer friend wants the character, staffer doesn't like player, behind the scenes rudeness between staff and player, etc.

Whenever I see such a staunch ruling on something somewhat minimal, I can't help but feel like there's gotta be a hot scoop for the Daily Bugle.

EDIT: Added more Spider-references.