Security Awareness Training here at Duckbill continues with a plethora of crap advice.
I don't know why @1password doesn't advertise "we won't auto-fill on phishing sites" more heavily, because it's the single biggest red flag that something's suspicious.

The training of course finds "a password manager validates the strength of your passwords" incorrect.
"When someone sends me an unexpected attachment I should forward it to the IT department so they can" kill me with an axe after the fifth time in a row? My god.
It alludes to "password management software is available" without naming any of them or, y'know, ASSUMING THAT A COMPANY THAT IS HALFWAY COMPETENT WILL PROVIDE SUCH A THING.

Skimping on *THAT* is like saving on S3 charges by deleting all of the backups.
No mention whatsoever about "the CEO will never email you in a hurry telling you to wire large sums to rando bank accounts" or "send all of the payroll data / employee W-2 information to me via email."
And of course the honest "get a weird email or phone call? Double check via Slack" or similar is nowhere to be found.
Ooh! It *did* highlight business partners as potential insider threats. I dunno wtf it thinks I can do if @mike_julian decides to turn evil; that goes beyond "infosec" and into "litigation slapfight."

• • •

Missing some Tweet in this thread? You can try to force a refresh

Keep Current with Corey Quinn

Corey Quinn Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!


Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @QuinnyPig

23 Feb
So today's thread is on how to apply for jobs (beating out "the horrors of git" by a nose).

Scenario: you're on the job market for one reason or another. Let's begin.
Probably the dumbest possible way to go about this is to fire up some job board or another, find a job posting, slap your résumé into the system, click next, retype your entire résumé into the system by hand, hit submit, and then get auto-rejected by a robot.
You can do a LOT of those applications in a day, but it doesn't get you where you want to go.

Stop a minute. Be intentional. Pick a company you'd honestly like to work for.

Name it! I'll pick one of the responses and continue.
Read 31 tweets
23 Feb
Clubhouse is Not For Me for a few reasons; some of them are about me, while others aren't.
First and most important: It's not an accessible platform. That's a hard pass from me.
Now, onto the "me" parts.

It's ephemeral content. If you're not in the chat room, you miss the entire thing. There's no playback, there's no content reuse. I can't use the content I put out there to build a platform elsewhere.
Read 4 tweets
23 Feb
This is as worthy a thread topic as there is. Let's dive into it.

Note: I bias for being rather mercenary. Please consider my viewpoint through that lens.
"What's my market value?"

Simply put, what people will pay you have you work for them. Note: you must create more value than you cost, and you cost more than just your raw salary. Rule of thumb, "double your salary" is directionally what you cost your employer.
"How do I figure out my market value?"

There are a few ways. Talking to your peers. Looking at salary survey data from a variety of sources. Getting managers at other companies blind drunk and pumping them for information.

I prefer another option:

Read 23 tweets
23 Feb
So let's talk about pens.

My handwriting is crap and I don't do a lot of writing as a result, but I do jot notes from time to times. Most of the pens on my desk are pretty standard, except for this thing. Image
If I bust out my trusty @awscloud scale (it's like a regular scale except it costs 5x more because of Machine Learning), most pens are less than half an ounce. Image
This huge bastard is over three times heavier. It's a *weird* pen. Image
Read 5 tweets
23 Feb
Since people are already melting down at an engineer’s salary, let’s pour fuel on the fire with a Hard Truth:

Engineers are almost never the most highly compensated employees in a company.
"Who is?"


The high performing salespeople will make magnitudes more than the average. Sales directors and heads of sales will often get paid shockingly large amounts of money. And it's usually all or mostly cash compensation.
"How much does a top performer in B2B sales make?"

You give the rainmakers what they want.

This is also why you see toxic shitty people as "head of sales" who still have a job. It's hard to fire the person who closes $20 million a year. (Not defending this pattern!)
Read 7 tweets
19 Feb
All right, fuck it.

Hey @amazon: While you're spewing Leadership Principles at public school students, see if you can spot which word in "HIRE and Develop the Best" that you forgot.
The LPs have merit, are often misunderstood for long periods of time, and are very much how Amazon runs their business--but they're not universal truths, and they're not the sort of thing you slap on a wall without significant context.
Hiring is hard, filling the pipeline is a process, but if you can't find ways to solve for those problems without what amounts to indoctrinating schoolkids who don't get to meaningfully opt out, then you've become something I can't understand.
Read 5 tweets

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!

Follow Us on Twitter!