CSA CCSK 50% sale

Just got an email from CSA saying they're going to offer a significant discount on the exam vouchers and online self-paced training course, starting next Monday. Looks like a great deal!

Text of the email:


Certificate of Cloud Security Knowledge (CCSK) One-Time Savings

Mark your calendar for a massive savings opportunity on Cyber Monday next week! The CCSK certificate is widely recognized as the standard of expertise for cloud security, providing a solid, foundational knowledge of how to secure data in the cloud. To be sure this valuable credential is widely accessible, we will be offering 50% off all CCSK online products:


Start: Midnight (12 AM PT), Monday, 11/29/2021 End: Midnight (12 AM PT), Tuesday, 11/30/2021

Our mission is to train cloud experts and to help fill the skills gap in cloud security. This is a once in a lifetime deal so make sure to share this with anyone who could benefit from it.

You’ll hear from us again next Monday on how to save 50% off these CCSK offerings.

84 Updates and Shenanigans

in

My Udemy courses, mentioned in the trailer: https://www.udemy.com/user/ben-malisow/

 

John Stossel sues Facebook: https://variety.com/2021/digital/news/john-stossel-sues-facebook-defamation-fact-check-1235072338/

 

Senator asks Facebook to commit to ending finsta(s): https://reason.com/2021/09/30/richard-blumenthal-finsta-facebook-hearing/

Video of the Senator asking the FB representative the question: https://www.youtube.com/watch?v=ktQ3p2rhqcY

NIST report on facial recognition solutions: https://nvlpubs.nist.gov/nistpubs/ir/2019/NIST.IR.8280.pdf

MIT study of gender/color in facial recognition software: http://gendershades.org/overview.html

Amazon’s marketing video for Astro: https://youtu.be/sj1t3msy8dc

The AV Club article: https://www.avclub.com/amazon-debuts-its-awful-creepy-robot-snitch-1847774948

Beeple Crap: https://en.wikipedia.org/wiki/Mike_Winkelmann

 

 

 

 

 

New ISC2 Cert, and Five Free CPEs

in

ISC2 is developing a new cert, something to “certify entry-level professionals.” Now, I thought the SSCP already existed for that purpose…and I’m also curious how someone “entry-level” can also be considered a “professional”…..but if you are an ISC2 member, and you help fill out a survey that will be used to construct the exam that will be used for this new cert, you can get five free CPEs.

So…go get your CPEs: ISC2 Link to Survey

Updated OWASP Top Ten (finally)

in

OWASP typically updates their Top Ten Web Application Security Risks about every two years, so many of us have been excited and anxious waiting for the new release (the last formal version was published in 2017). Of course, with the way things have been in 2020, a delay is certainly understandable, but it’s nice that the new edition is finally out.

Go check it out here: https://owasp.org/Top10/

For those of you studying for INFOSEC exams where questions specifically about the Top Ten might come up (for instance, the CCSK or CCSP), I don’t know if the test material has been updated to reflect the new OWASP list, or when that might happen. I imagine there will be some lag before the tests can be modified to include the 2021 content. My advice: if you plan to take the exam before January, 2022, study the OWASP 2017; anything later, use the 2021 OWASP version.

Book Signing / Meet-and-Greet

Totally impromptu: if you are in the Chicago area, and would like me to sign any of my books that you might have (the CCSP Study Guide, Practice Tests, Exposed, or whatever), we'll be hosting a short signing at the Courtyard Marriott Downtown River North on Sunday, 05 SEP 2021, from 5:00 - 6:00 pm in the lobby (or, if a small enough group shows up, the bar, when I will buy a round). Robin will be joining me, if you want to meet the full cast of “The Sensuous Sounds Of INFOSEC.” Hope to see you there!

79. Greatest Hits - Prepping

in

This week, we are on hiatus while we avoid Hurricane Ida and preserve our own most precious assets (our asses, and those of our pets). This is a perfect time to catch up on past episodes of “The Sensuous Sounds Of INFSOEC”…and what better time to revisit our show on prepping for disaster? We promise— as soon as we’ve stabilized, we’ll feature a show about our own experiences and lessons learned.

In this episode, we prepare for the endtimes through personal continuity and disaster recovery, and nerd out on some truly great media.

Just a few of the books, movies, and TV mentioned (or associated with this topic):

  • Dawn of the Dead (George A. Romero, 1978)

  • Chernobyl (HBO, 2019)

  • The War Game (Peter Watkins, 1966: not to be confused with the 1983 classic WarGames)

  • Night of the Comet (Thom Eberhardt, 1984)

  • Cast Away (Robert Zemeckis, 2000)

  • Empire of the Sun (Steven Spielberg, 1987)

  • Firefly (Joss Whedon, 2002-2003: should have been 6 seasons and a movie)

  • Serenity (Joss Whedon, 2005: at least we got the movie)

  • Deadwood (HBO, 2004-2006)

  • The Road, Cormac McCarthy

  • Z for Zachariah, Robert C. O’Brien (THE BOOK— not the terrible movie that threw in some horrible racial overtones and a love triangle for no reason)

  • Lucifer’s Hammer, Larry Niven and Jerry Pournelle

  • Lord of the Flies, William Golding

  • To Build a Fire, Jack London

  • Day of the Triffids, John Wyndham

  • On The Beach, Nevil Shute