iiinova — where your digital self keeps evolving

EricaZelic @ericazelic.bsky.social · 02/04/2025

Logged on to social media, saw a sick person celebrating people's mistakes and demonstrating their toxicity in the workplace, happy their coworker might be having a hard time. Logging off social media. I don't need to be reminded there are hateful souls in the world today. Try Love, Less Hate.

1160

EricaZelic @ericazelic.bsky.social · 01/04/2025

This time I tried something new: I'm burnt out and defeated. I'm not used to these feeling coming from offsec. So I took a couple days off, instead of quitting.

0100

EricaZelic @ericazelic.bsky.social · 26/03/2025

What is the equivalent of windows event view in iOS?

130

EricaZelic @ericazelic.bsky.social · 22/03/2025

If nothing else, the last 2 months have allowed American's to see each others' true colors. Ignorance is bliss.

150

Reposted by EricaZelic

jpiterak.bsky.social @jpiterak.bsky.social · 22/03/2025

This is great.👇

0145

EricaZelic @ericazelic.bsky.social · 20/03/2025

As a public figure, what matters the most is whether or not people like you. Elmo has been given a lesson. It's up to him what he does with it. He can continue a state of denial or he can learn. The choice is his.

020

Reposted by EricaZelic

Covie @covie93.bsky.social · 20/03/2025

Imagine calling yourself the master race and have to resort to erasing the achievements of minorities to make yourself feel better.

923345098545

EricaZelic @ericazelic.bsky.social · 20/03/2025

Once upon a time, long long ago, people used to go over to each others' houses and just sit and talk.

130

EricaZelic @ericazelic.bsky.social · 19/03/2025

Has anyone ever had a bad call with a vendor? I had one today. It was my first bad call with a vendor.

470

EricaZelic @ericazelic.bsky.social · 18/03/2025

Omg Intune. I swear, managing M365 requires 10 PhD equivalencies.

0201

EricaZelic @ericazelic.bsky.social · 16/03/2025

The price of tuna has increased 700% since the 80s. Invest in tuna 😋 🐟

130

EricaZelic @ericazelic.bsky.social · 16/03/2025

As many people are aware, there have been ongoing issues with Exchange the past few weeks. The latest *incident* (not advisory) is about NDRs. We have been seeing tons of NDRs but do not match the NDR codes in the Incident. /1

160

EricaZelic @ericazelic.bsky.social · 16/03/2025

Today I learned the difference between TPMv2 and fTPM. It seems like a lot of devices are using firmware versions of TPM although the specification version lists 2.0 with a subversion.

160

EricaZelic @ericazelic.bsky.social · 16/03/2025

Dear SharePoint developers. If your SharePoint Online application is more than one year old, your delegated API permissions may no longer follow least privilege. Microsoft now has the sites.selected API permission which is akin to SP on-prem ACS permissions. learn.microsoft.com/en-us/sharep...

learn.microsoft.com

Understanding Resource Specific Consent for Microsoft Graph and SharePoint Online

Understanding Resource Specific Consent for Microsoft Graph and SharePoint Online.

030

EricaZelic @ericazelic.bsky.social · 16/03/2025

Can someone tell me what this app registration is that I see absolutely everywhere?

380

EricaZelic @ericazelic.bsky.social · 16/03/2025

Labeling your entire data estate is challenging, especially when you start considering service principal access to data.

020

EricaZelic @ericazelic.bsky.social · 15/03/2025

This is heart breaking and I wonder how many of our senior are experiencing this right now. Disgusting

040

Reposted by EricaZelic

Don Moynihan @donmoyn.bsky.social · 15/03/2025

This was the same guy who resigned after he was found making a bunch of wildly racist remarks. Musk, Vance and Trump all insisted he be brought back into government. And for what? So be could access and share private personal data in violation of the law? This is our new era of merit?

141361393

Reposted by EricaZelic

Sam Erde @samerde.day3bits.com · 14/03/2025

Desired State Configuration (DSC) has been re-engineered and given new life in the just-released v3.0. "DSC is a declarative configuration and orchestration platform that defines a standard way of exposing settings for applications and services." devblogs.microsoft.c...

devblogs.microsoft.com

Announcing Microsoft Desired State Configuration v3.0.0 - PowerShell Team

This post announces the release of Microsoft Desired State Configuration v3.0.0. We discuss the features and benefits of DSC and how it differs from PowerShell DSC.

2285

EricaZelic @ericazelic.bsky.social · 14/03/2025

When you increase tariffs on wine, while it may increase sales of domestic wine, it also increases demand, which increases prices for domestic wine as well. Increased tariffs increases prices for consumers who will have to make sacrifices in purchases, which has net negative effects on the economy.

180

Reposted by EricaZelic

Mark Cuban @mcuban.bsky.social · 10/03/2025

One of my companies informed me they cancelled a $2m conference in Florida. Why ? They didn’t feel they could pass on the incremental cost of tariffs. So they are cutting expenses. That’s a city that lost a ton of tourism revenue. The cost of tariffs isn’t just the cost of the tariff

28009667015970

EricaZelic @ericazelic.bsky.social · 13/03/2025

When you're good at something, insecure people will hate you. Just remember that's a them problem and not a you problem.

020

EricaZelic @ericazelic.bsky.social · 13/03/2025

My account was suspended on X lol. No idea why. Maybe because I referred to Elon as Edolf.

480

EricaZelic @ericazelic.bsky.social · 03/03/2025

There's a lot of people in transition right now, especially in tech related roles. Consider pursuing consulting: You get to see so many different organizations and learn common problems. You interact with the entire tech stack when doing offsec. You have more opportunity and exposure.

250

EricaZelic @ericazelic.bsky.social · 02/03/2025

One good thing about being a techie - we are not easily enslavable. Only other uber nerds understand what we are doing anyway.

120

EricaZelic @ericazelic.bsky.social · 02/03/2025

One day, people are going to want me to come in and fix the stuff being destroyed as we speak. They better be prepared to pay... a fucking lot.

070

Reposted by EricaZelic

John Skiles Skinner @skiles.blue · 01/03/2025

I got laid off today, with the rest of 18F. 18F was an elite federal software shop. We made gov't websites work better, more efficiently for the American people. We saved taxpayers from getting screwed over by contractors. And were fired for it. We made this website to tell our story: 18f.org

18f.org

We're not done yet | 18F

31689271830858

Reposted by EricaZelic

Jake Williams @malwarejake.bsky.social · 28/02/2025

2. If you want to deliver cyber effects, prepositioning matters. You can't just preposition days or even weeks before you need to deliver a capability. Think in many cases on scales of double digit months. 3. I strongly suspect CYBERCOM "planning" already includes prepositioning operations. 2/

1655

EricaZelic @ericazelic.bsky.social · 02/03/2025

Listening to Sarah McLachlan on Spotify and reminiscing of the wonderful youth I had. After 20, I lived a carefree life rich with depth, experience, and emotion. I did extraordinary things people will never know. It was a very unique path most cannot relate to. open.spotify.com/track/0oPZm6...

open.spotify.com

Possession

Sarah McLachlan · Fumbling Towards Ecstasy (Legacy Edition) · Song · 1993

130

Reposted by EricaZelic

ByteVagabond @bytevagabond.com · 02/03/2025

In 2010, Aaron Swartz faced 35 years in prison for downloading 70GB of JSTOR articles. He died by suicide in 2013. Meanwhile, Meta illegally downloaded 80+ TERABYTES of books to train AI models with zero consequences. The law doesn't punish corporations—only idealists fighting for open knowledge.

10294119

EricaZelic @ericazelic.bsky.social · 02/03/2025

What would Edolf be without sucking the tit of the US gov?

010

Reposted by EricaZelic

Nathan McNulty @nathanmcnulty.com · 02/03/2025

If you work with Entra, you'll want to bookmark and monitor this page 😎 Much of this is in Identity / Secure Score, but it's great to see security guidance cleanly laid out in one doc You might think this is well known stuff, I assure you it is not :( learn.microsoft.com/...

57720

EricaZelic @ericazelic.bsky.social · 02/03/2025

I've never been good at corp politics and never will be. I tell people what they need to hear and not what they want to hear. This is also why I did well working for myself. It was just exhausting to do alone.

1120

EricaZelic @ericazelic.bsky.social · 02/03/2025

Keeping it real Sunday: In meritocracy, merit based work is virtually non-existence. What ends up happening is echo chambers promoting and adding budget to incompetence.

150

Reposted by EricaZelic

XPN @xpnsec.com · 26/02/2025

VSCode Extensions & Themes are terrifying. Latest example of a suspected popular malicious theme. Not isolated to VSCode, but being conditioned to not trust random applications, but installing plugins willy nilly...

news.ycombinator.com

Hi - Isidor here from the VS Code team. A member of the community did a deep sec... | Hacker News

A member of the community did a deep security analysis of the extension and found multiple red flags that indicate malicious intent and reported this to us. Our security researchers at Microsoft…

0114

EricaZelic @ericazelic.bsky.social · 01/03/2025

Idk who might need to hear this, but in Architecture, most mature orgs with greater than 100k users only draw those diagrams when trust boundaries are crossed. If you don't know what I mean by that, you probably shouldn't be doing architecture.

0100

Reposted by EricaZelic

EricaZelic @ericazelic.bsky.social · 01/03/2025

This is why I don't like Guests or Anonymous Users

251

EricaZelic @ericazelic.bsky.social · 01/03/2025

If your org's approved architecture is based on Zero Trust and you use Teams, here is a nifty chart from Microsoft which lays out your plan. If you store any type of controlled data in your tenant, anywhere, you will fall into the Specialized Security Category. learn.microsoft.com/en-us/securi...

65015

EricaZelic @ericazelic.bsky.social · 01/03/2025

If you're in a GCCH cloud, be aware of this very important gotcha before your CMMC auditors come in and start running scripts: Settings displayed from PowerShell output using Exchange Online Management, Teams PowerShell, and SPOService are OFTEN DIFFERENT from what is displayed in the UI

162

EricaZelic @ericazelic.bsky.social · 01/03/2025

Dear C-Suite, you have hard jobs. I don't envy you. Ultimately, some decisions boil down this: 1. Do I want to get popped by skidz or potentially lose contracts due to compliance? Or, 2. Do I want to endure users complaining about unfamiliar buttons and restrictions. It's a hard choice, I know

050

EricaZelic @ericazelic.bsky.social · 01/03/2025

5 things I did last week: 1. Fought with people for security 2. Implemented security stuff 3. Found people removed security stuff 4. Explained multiple times why security stuff was needed 5. Got blamed for security stuff that caused a problem ... that wasn't security related ... again

2131