Tom Lawrence (LinkedIn):

Can you earn the SANS Industrial Controls Systems Security graduate certificate by taking the individual SANS courses? Asking for a friend.

Writing the first date entry into the new log book:

Vacation is over, time to get back at it.

LinkedIn:

Ralph Langner(LinkedIn):

I much rather not have a USB C power connector for my ICS/OT Laptop. It's simply not rugged enough. The rectangular Lenovo power connector or barrel connector is better.

I'm spending some serious time cleaning up my two decades of digital photos on my current network drive. Over the years I have half sorted some stuff and left full phone dumps behind. I want to stand up a new drive but I need to clean up this current disaster first.

Spending my vacation time reading Sandworm by Andy Greenberg.

62443-4-1 Secure Development Life Cycle certified vendors. isasecure.org/end-users/ie...

We successfully introduced the niece to Scratch programming yesterday. She is having her first scrum meeting at the kitchen whiteboard during breakfast.

Don't forget to wear your PPE when doing something sketchy.

You can't secure what you have never seen. Put on some PPE and go visit the field.

When you become important at work, management freaks out about you taking vacation:

OTbase (LinkedIn):

It's a good day to activate some Win 11 licenses.

I did a thing.

If an organization is posting a job for OT Cyber Security Analyst without asking for any OT experience, OT cyber security experience or any OT cyber security training. That's a red flag.

I'm going to go outside and deal with my main threat actor: The weather

Current state:

OTbase(LinkedIn):

Configuring firewalls is not hard. Writing good ladder logic is harder.

When you finish fixing the architecture issue.

I've been running Nagios for a really long time. I ping a few Corporate computers that I care about so I can monitor uptime and get notifications about things going down. Nobody from Corporate has ever asked me about it. Ever.

OTbase (LinkedIn):

Never trust vendor testing, always do your own. If the device fails your test, don't put it into production.